Open the finding, stay on the Summary tab, type in the Notes box and click Update status. The box says notes are saved with Update status, so closing the dialog first loses the text. Use notes for the reason behind a decision.
The Notes box is a free-text field on the Summary tab of every finding. It is the place to leave context for the next person.
Steps
- Go to Issues and click the finding.
- On the Summary tab, scroll below the description to Notes.
- Type your note.
- Click Update status in the top bar.
Good to know
The help line under the box reads Saved with "Update status". That is the whole rule. If you close the dialog with Close or the cross, the text is gone.
Good notes are short and specific. They answer the question a reader will ask later.
- Why a finding is marked False Positive.
- Who agreed to an Accepted Risk, and for how long.
- The pull request or ticket that carries the fix.
Notes stay on the finding. Because issues persist per target across scans, a note remains there when you scan again.
You need permission to triage issues to change notes. If Update status is missing or fails, ask an admin to check your role, or use /contact.
Notes also suit ticket links. Read how to link a finding to a ticket for the options.
Notes also help when a teammate opens the finding weeks later and wants to know what happened, since the reasoning stays on the finding instead of living in a chat thread. Write for that reader. Two lines is enough.
Related questions
- How do I assign a finding to a teammate?
- Can I link a finding to a ticket in my issue tracker?
- How do I mark a finding as accepted risk?
- How do I mark a finding as a false positive?
- How do I change a finding's status?
How to triage findings in Cyberlop: disposition, assignee and notes
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.