Reference E: Issue category routing

Each issue category tab presents a distinct detection type. Use this table to route a CI scan result to the owning resolution guide.

Tab	Detection scope	First evidence to check	Resolution guide
Vulnerabilities	Known CVE vulnerabilities in dependencies resolved during the build. This includes transitive dependencies.	Whether a fix version exists. Confirm the dependency resolved during the build.	Investigate, prioritize, and remediate SCA CVE issues.
Configurations	IaC misconfigurations in Terraform, CloudFormation, Kubernetes, and Helm templates.	The resource block and attribute in the template.	Investigate, prioritize, and remediate IaC misconfiguration issues.
Secrets	Hardcoded credentials, API keys, and tokens.	The secret validation status. Rotate credentials that reach the build stage.	Investigate, prioritize, and remediate secrets issues.
Package Integrity	Package operational risk and license miscompliance.	The license obligation and package operational-risk rating.	Investigate package operational-risk and license-miscompliance issues.