Skip to content

Documentation

Remediation details

Work on one remediation task: change its status, assign it, edit its details and discuss it in comments.

Overview

The remediation page holds everything about one task: what needs fixing, on which asset, by when, who owns it and what has happened so far. Open it by clicking a task on Remediations, a card on a CVE’s Remediations tab, or the Ticket created link after Create Ticket on a CVE.

You need remediation:read to view the task and remediation:write to change it or comment on it.

Screen tour

  1. Back to remediations: returns to the list.
  2. The SLA track, the priority and status, and how long the task has been open.
  3. The title, with the CVE and asset chips. Click the CVE chip to open the CVE in the catalogue, or the asset chip to open the asset.
  4. Description: the steps and context for the fix.
  5. Activity: what has happened to the task so far.
  6. Comments: the discussion on the task.
  7. The pin strip: Status, Priority, Assignee, Due date and the linked records.

Pin strip

The pin strip on the right keeps the task’s key properties in view:

PropertyWhat it showsHow to change it
SLA barHow much of the SLA has been used.Follows the priority.
StatusOpen, In progress, Resolved or Dismissed.Click the chip. See Change the status.
PriorityCritical, High, Medium or Low.Click the chip and choose a priority. See Edit the task.
AssigneeThe user who owns the task, or Unassigned — click to assign.Click it. See Assign the task.
Due dateThe target date set when the task was created, or —.
Linked recordsThe CVE, the asset and, when the task is tracked in another system, the external ticket.Click a link to open it. The external ticket opens in a new tab.

Below the properties are the SLA status and links to the Description, Activity and Comments sections. The link for the section you are reading is highlighted.

Change the status

  1. Click the Status chip. The Change status list opens.
  2. Choose Open, In progress, Resolved or Dismissed. The current status is greyed out.
  3. Resolved and Dismissed need confirmation: the list asks Mark as Resolved? or Mark as Dismissed?. Optionally enter a Reason, for example “What was done to resolve this?”, then click Confirm resolved or Confirm dismissed.

The reason is saved as a comment marked [Resolution] or [Dismissal], and the activity records the change. For the full status list, see Remediations.

Assign the task

  1. Click the Assignee field. The Assign to box opens.
  2. Type part of a name or email address in Search by name or email… and pick the user from the results.
  3. Or paste a user ID under Or paste a user UUID directly: and click Assign.

The assignee is shown with their initials. The My open saved view on Remediations shows the tasks assigned to you.

Edit the task

You can change a task’s title, description and priority at any time:

  • Title: click the title in the header, edit it and press Enter to save, or Esc to cancel.
  • Description: click the description, edit it, and save. Use it for the fix steps, version numbers and links to change tickets.
  • Priority: click the Priority chip in the pin strip and choose Critical, High, Medium or Low. The SLA follows the new priority.

Each edit is recorded in the audit log.

Activity

The Activity section lists the task’s history, newest at the bottom:

  • Task created.
  • SLA deadline passed, with the SLA for the priority, for example (7d for critical).
  • Status changed to resolved., with the user who resolved it.
  • Resolution rationale recorded. or Dismissal rationale recorded., with the reason.
  • each comment, shortened to its first line.

Comments

  1. Type in Add a comment… at the bottom of the Comments section.
  2. Click Post, or press Ctrl+Enter (⌘+Enter on a Mac).

CVE IDs in a comment become links to the CVE. On your own comments:

  • Edit: change the text, then click Save. Edited comments show edited.
  • Delete: asks Delete this comment? This cannot be undone.; click Confirm delete.

Click the eye icon (Mark as seen) on a comment to mark it Seen in this browser. [Resolution] and [Dismissal] comments are part of the record and can’t be edited or deleted.

Keyboard shortcuts

KeyAction
Ctrl+Enter / ⌘+EnterPost the comment you are typing
EnterSave the title you are editing
EscClose the open status list or assignee box, or cancel an edit