Creates an Ignore Rule that suppresses violations matching the specified filters. Ignore rules apply only to future scans. To apply to past scans, you must manually trigger Apply on Existing Content on the relevant watch or watches.

The ignore_filters object defines what to ignore. You must specify at least one objective filter (vulnerabilities, licenses, cves, operational_risk, or exposures) and can optionally scope it with source filters (components, artifacts, builds, watches, etc.). Combining an objective filter with scope filters is supported, for example cves together with watches.

For exposures, you can ignore by scanner ID, category, file path, file path pattern, or fingerprint. Pass fingerprint values as the hex strings Xray returns for the exposure finding. Each fingerprint must already exist; unknown values return HTTP 404.

The optional expires_at field must be a future RFC 3339 timestamp (e.g., 2027-06-29T00:00:00Z). Past timestamps are rejected with a validation error.

Tip: when calling this endpoint with jf xr curl or another shell client, pass the JSON body via --data @file.json rather than an inline string to avoid quoting pitfalls — embedding single quotes inside a single-quoted argument produces invalid JSON, which fails with Failed to parse ignore rule.

Requires the "Manage Watches" permission. Since Xray 3.11. Fingerprint filters are supported since Xray 3.150.0.