Description
The evidence pack ZIP currently exports raw findings. It should export deduplicated findings so compliance reviewers don't see the same issue repeated dozens of times.
What to implement
- Update the
/evidence-pack builder to use deduplicated findings from the DB (or from the in-memory result if DB isn't available)
- Add a section in the evidence pack's summary report:
"Findings after deduplication: 12 (from 47 raw)"
- Include
related_files for each deduplicated finding so auditors can see the full scope
Acceptance criteria
Description
The evidence pack ZIP currently exports raw findings. It should export deduplicated findings so compliance reviewers don't see the same issue repeated dozens of times.
What to implement
/evidence-packbuilder to use deduplicated findings from the DB (or from the in-memory result if DB isn't available)"Findings after deduplication: 12 (from 47 raw)"related_filesfor each deduplicated finding so auditors can see the full scopeAcceptance criteria
related_filesis present in the exported finding records