Columns
| Column | Purpose |
|---|
| Finding ID | Link back to SLA tracker |
| Fix PR / Commit | URL / hash |
| Environment | Local / Staging / Prod |
| Retest Steps | What to run (scanner or manual) |
| Evidence | Path under ./artifacts or screenshot link |
| Retested By | Name |
| Retest Date | YYYY-MM-DD |
| Outcome | Pass / Fail |
| Notes | Edge cases, follow-ups |
CSV seed
Finding ID,Fix PR / Commit,Environment,Retest Steps,Evidence,Retested By,Retest Date,Outcome,Notes
SAST-2025-021,[https://github.com/org/app/pull/123,Staging,"Run](https://github.com/org/app/pull/123,Staging,%22Run) ZAP baseline; visit /echo",artifacts/zap/report.html,bob,2025-10-20,Pass,"No alert"