The Issues page displays all security vulnerabilities found in your code. Review findings, mark false positives, and track remediation progress.
Issues Overview
Security issues are sorted by severity:
| Severity | Description |
|---|
| Critical | Immediate exploitation risk, requires urgent attention |
| High | Serious vulnerability that should be fixed soon |
| Medium | Moderate risk, plan to address |
| Low | Minor security weakness |
| Informative | Security best practice suggestion |
Viewing Issues
The issue list shows:
- Severity - Color-coded severity level
- Title - Brief description of the vulnerability
- Category - Security category (XSS, SQLi, etc.)
- File - Location in your codebase
- Repository - Source repository
- Status - Open, Ignored, or Closed
Issue Details
Click any issue to see:
- Full Description - Detailed explanation of the vulnerability
- Code Snippet - Highlighted vulnerable code with line numbers
- Remediation - Suggested fix or mitigation
- Context - Repository, branch, and file path
- AI Analysis - Vidoc’s reasoning for flagging this issue
Filtering Issues
Use filters to find specific issues:
- Severity - Filter by Critical, High, Medium, Low, Informative
- Status - Open, Ignored, Closed
- Repository - Specific repository
- Branch - Git branch
- Category - Security category (XSS, SQL Injection, etc.)
- File path - Search by file path pattern
Managing Issues
Mark as Fixed
When you’ve remediated a vulnerability:
- Click “Mark as Fixed”
- The issue moves to Closed status
- If the vulnerability reappears, it will be reopened automatically
Ignore an Issue
For false positives or accepted risks:
- Click “Ignore”
- Provide a reason (required)
- Vidoc creates a learning to avoid similar false positives
Write clear, specific reasons when ignoring issues. This helps Vidoc learn your codebase patterns and improves future scan accuracy.
Reopen an Issue
To reactivate a closed or ignored issue:
- Filter to show Closed or Ignored issues
- Click “Reopen” on the issue
- The issue returns to Open status
Bulk Actions
Select multiple issues to perform bulk operations:
- Check the boxes next to issues
- Use the bulk action dropdown:
- Mark as Fixed - Close selected issues
- Ignore - Ignore with a shared reason
- Reopen - Reactivate selected issues
Ask AI
For complex security issues, use the AI assistant:
- Click “Ask AI” on any issue
- Ask questions about:
- How the vulnerability could be exploited
- Recommended remediation approaches
- Impact assessment
See AI Chat for more on the AI assistant.
Issue Lifecycle
Related Pages
