Glossary
The language of Relane Security: repositories, assessment coverage, findings, remediation and verification.
Terms used in the consolePermalink to Terms used in the console
| Term | Meaning |
|---|---|
| Workspace | The personal or organization context that owns repositories, scans, findings and related security work. |
| Connection | An authorization to access a source account's permitted repositories through Relane. |
| Repository | A source repository added to a workspace, including supported GitHub, GitLab Cloud and Bitbucket Cloud sources. |
| Revision | The specific version of the repository being assessed or reviewed. |
| Scan | One repository assessment with a selected scope, progress, completion state and result when available. |
| Coverage | The assessment's account of what it could examine and the limitations on that result. |
| Limited coverage | An assessment that could not establish adequate coverage of its selected scope; not an all-clear. |
| Confirmed finding | An issue supported by the evidence required for its issue type. |
| Review candidate | A lead that still needs validation, kept separate from confirmed findings. |
| Severity | The reported seriousness of an issue: critical, high, medium, low, informational or unknown. |
| Proof state | Whether an issue is confirmed or still needs validation; different from severity. |
| Triage | A recorded decision about how to handle a finding, such as not a real issue or accepted risk. |
| Fix proposal | A proposed change for an eligible finding, shown for review before any approval to apply it. |
| Verification | A follow-up assessment of whether the targeted finding remains after a change; not the same as merging a pull request. |
| Policy | A repository's criteria for evaluating a scan result, such as severity and adequate coverage. |
| Destination | An email, Slack, Teams or webhook endpoint selected to receive workspace security events. |
| Delivery receipt | The recorded outcome of a notification attempt; a configured destination alone is not a receipt. |
| Pentest engagement | A separately authorized assessment of a specified target and scope, with its own report. |