51 lines
2.0 KiB
Markdown
51 lines
2.0 KiB
Markdown
# Triage Workspace
|
|
|
|
The triage workspace (`/triage/artifacts/:artifactId`) is optimized for high-frequency analyst workflows: navigate findings, inspect reachability and signed evidence, and record VEX decisions with minimal mouse interaction.
|
|
|
|
## Keyboard shortcuts
|
|
|
|
Shortcuts are ignored while typing in `input`, `textarea`, `select`, or any `contenteditable` region.
|
|
|
|
| Shortcut | Action |
|
|
| --- | --- |
|
|
| `J` | Jump to first incomplete evidence pane for the selected finding. |
|
|
| `Y` | Copy the selected attestation payload to the clipboard. |
|
|
| `R` | Cycle reachability view: path list → compact graph → textual proof. |
|
|
| `/` | Switch to the Reachability tab and focus the search box. |
|
|
| `S` | Toggle deterministic sort for the findings list. |
|
|
| `A` | Quick VEX: open the VEX modal with status “Affected (unmitigated)”. |
|
|
| `N` | Quick VEX: open the VEX modal with status “Not affected”. |
|
|
| `U` | Quick VEX: open the VEX modal with status “Under investigation”. |
|
|
| `?` | Toggle the keyboard help overlay. |
|
|
| `↑` / `↓` | Select previous / next finding. |
|
|
| `←` / `→` | Switch to previous / next evidence tab. |
|
|
| `Enter` | Open the VEX modal for the selected finding. |
|
|
| `Esc` | Close overlays (keyboard help, reachability drawer, attestation detail). |
|
|
|
|
## Evidence completeness (`J`)
|
|
|
|
`J` navigates to the first incomplete evidence area for the selected finding using this order:
|
|
|
|
1. Missing VEX decision → opens the VEX modal.
|
|
2. Reachability is `unknown` → switches to the Reachability tab.
|
|
3. Missing signed evidence → switches to the Attestations tab.
|
|
4. Otherwise, shows “All evidence complete”.
|
|
|
|
## Deterministic sort (`S`)
|
|
|
|
When deterministic sort is enabled, findings are sorted by:
|
|
|
|
1. Reachability (reachable → unknown → unreachable → missing)
|
|
2. Severity
|
|
3. Age (modified/published date)
|
|
4. Component (PURL)
|
|
|
|
Ties break by CVE and internal vulnerability ID to keep ordering stable.
|
|
|
|
## Related docs
|
|
|
|
- `docs/ui/advisories-and-vex.md`
|
|
- `docs/ui/reachability-overlays.md`
|
|
- `docs/ui/vulnerability-explorer.md`
|
|
|