QA finding
A finding is new, has been open for a long time, or is back after it was dealt with
QA Info Severity: Medium
Part of the audit Findings over time. Finding id: qa.findingLifecycle.
What it costs you
Without dates on findings, nobody can tell a problem that appeared yesterday from one that has been ignored for a year, and a problem that comes back looks like a new one.
What to do
Deal with returns first, then the oldest open findings.
What it checks
- New issue since the last check
- Issue open for too long
- Issue came back after a fix
- Issue came back after being dismissed
How to fix it
Work through the list in this order
- Returned after being dismissed: confirm the content is unchanged, then report it as a fault in the tool.
- Returned after being fixed: find the change that undid the fix.
- Open for a long time: fix or decide not to.
How to check: The next crawl lists fewer returns and fewer old findings.
Thresholds
| Name | Default | Meaning |
|---|---|---|
max_days_open | 90 | Report a finding that has been open for more than this many days. A starting value, not taken from a source. |