Reassign a vulnerability
Use Reassign to transfer responsibility for reviewing a vulnerability finding to another user while preserving the existing risk decision and investigation history.
Opmerking
The Reassign action is available based on your user role and the current risk decision. For example, findings with a Pending review or Risk accepted decision can be reassigned
Ensure that:
You have identified the appropriate person to review the finding.
The new assignee has the appropriate responsibility and permissions.
You have sufficient context to explain why the finding is being reassigned.
You have the appropriate permissions to reassign the finding.
Navigate to Secure release > Repository tab.
Select repository name.
Select the Releases tab and select the release for which you want to re-evalute risk decision.
Select the Vulnerabilites tab.
Locate the vulnerability for which you want to reassign the asigned risk.
Alternately, you can also navigate to Secure release> Monitoring dashboard > Vulnerabilities. . Locate the vulnerability with the Risk accepted decision. You can use the search functionality and configure the displayed columns to help locate the vulnerability. Select the alert name to open the vulnerability details.
Review the vulnerability details, current assignee, and Risk decision before transferring responsibility. Confirm that reassignment is required and identify the appropriate new reviewer.
From the vulnerability details, select Action > Reassign.
In the Reassign dialog, select the user who should take responsibility for reviewing the finding.
In Notes, provide relevant information about the reassignment. Include the reason for transferring the finding and any context that may help the new assignee continue the review.
Review the information and select Reassign. The finding is transferred to the selected user while retaining its existing risk decision and review information.
Opmerking
Reassigning a finding changes its owner but does not change the underlying risk decision. Use the appropriate risk action separately to Accept risk, Mark as invalid, or reevaluate an existing accepted risk.
Open the vulnerability's Audit trail to verify that the reassignment has been recorded. The audit trail maintains the history of actions performed on the finding, including assignment and reassignment changes.