Z118 — Stale Global Suppression¶
Z-Code: Z118 STALE_GLOBAL_SUPPRESSION · Engine: standalone · Exit: 1
The Fixture¶
The fixture lives at examples/z118-stale-global-suppression/ in the Zenzic repository.
The source docs/clean-page.md contains no broken links, but .zenzic.toml defines a global policy to suppress Z101 on it:
docs_dir = "docs"
fail_under = 0
[build_context]
engine = "standalone"
[governance.directory_policies]
"docs/clean-page.md" = ["Z101"]
Because Z101 is never triggered by clean-page.md, the policy is "stale" or "dead". Zenzic flags this configuration debt with Z118.
Running the Example¶
# Clone the Zenzic repository — no install required
cd examples/z118-stale-global-suppression
uvx zenzic check all --strict
Expected output:
.zenzic.toml:1 ! [Z118] Global policy 'docs/clean-page.md' = ['Z101'] was never used to suppress a finding. Remove the dead configuration.
Exit code: 1
Interpreting the Output¶
The Z118 finding indicates a STALE_GLOBAL_SUPPRESSION issue.
This warning is raised by Zenzic when an entry in directory_policies, excluded_file_patterns, or excluded_external_urls is never utilized to suppress an actual finding during the scan.
- Scan Type:
All - Severity:
Warning(can be promoted toErrorvia--strict) - Impact: Accumulation of dead policies creates configuration debt and obscures the true perimeter.
Resolve the Issue¶
The remedy to Z118 is always to remove the offending line or policy block from .zenzic.toml.