Override the Fail on Severity threshold for specific issues
You can specify exemptions (ignore rules) for specific security issues. An ignore rule allows pipeline builds to proceed even if a security scan detects an issue.
Stop pipelines using OPA
How to create and apply governance policies to stop pipelines automatically based on detected severities