Chapter 1
Start with the release gate
- 01
Verify the report identity
Check the normalized target, scan time, environment and scan mode. If they do not match the release under review, stop and create a current report.
- 02
Read blockers, warnings and unknowns
Begin with release blockers, then review warnings and finally every unknown coverage area. A low total never cancels one important blocker.
- 03
Treat the gate as a snapshot
Use the gate for the stated build and time. After the target changes, run fresh checks before making another release decision.
Check before continuing
- Confirm target and scan time
- Read blockers before totals
- Keep unknown coverage visible
Chapter 2
Read and prioritize findings
- 01
Sort by decision impact
Review critical and high severity findings first, but include confidence and release impact. Severity alone is not the complete priority.
- 02
Read the complete finding
Read rule identifier, evidence, confidence, severity, impact and next action together. Ask for clarification when the evidence does not support the stated conclusion.
- 03
Prepare bounded fixes
Group findings only when one reviewed change addresses the same release dependency. Keep unrelated fixes separate so each result can be verified clearly.
Check before continuing
- Critical blockers
- High impact security and privacy
- Lower priority improvements
Chapter 3
Share the review
- 01
Choose the recipient and purpose
Decide whether the bundle supports a developer fix, release approval or qualified review. Include only the fields needed for that purpose.
- 02
Remove sensitive material
Exclude credentials, raw secrets, private source, unredacted customer data and unrelated evidence. Verify the exported file before sending it.
- 03
Preserve traceability
Keep the target, report date, scan scope, rule identifiers and evidence states. These details prevent an old or partial report from being mistaken for current coverage.
Check before continuing
- Share the minimum necessary
- Keep rule identifiers and scope
- Never include raw secrets
