A vulnerability is a security weakness in code that can expose personal or sensitive data or compromise a system. During review, look for glaring vulnerabilities that automated checks may miss. section 3.3.2 section 3.3.3
Use vulnerability findings to guide review decisions:
- Check whether applicable security standards are followed. section 3.3.2
- Treat vulnerabilities that expose sensitive data or compromise the system as blocking issues. section 3.3.3
- Reserve blocking decisions for critical security problems; handle minor concerns through constructive feedback or a separate pull request. section 3.3.3
A review decision
A reviewer notices a security weakness that could expose sensitive data. Because it affects system security, the reviewer blocks approval rather than treating it as a minor refactoring suggestion. section 3.3.3
