Currently it seems to be not possible to modify these powershell calls
Get-AzSKSubscriptionSecurityStatus
Get-AzSKAzureServicesSecurityStatus
to exlude all "passed" controls form the log. This would be very nice if i can set a parameter toexlude all control ids from log if they passed.