Send emails for vulnerability notes
Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.
Release notes
Problem to solve
Vulnerabilities can have notes added to leave information such as why it was dismissed or some reasoning behind why a particular vulnerability is valid and not a false positive. For other objects like MR and Issues, leaving a note can trigger email notifications. Today, vulnerability notes do not do this, leaving a gap in one of our shared notification mechanisms for users who would like to receive such emails for vulnerability updates.
Intended users
User experience goal
An email should be sent out whenever a note is added to a vulnerability object, much like what happens for an MR or Issue note.
Proposal
Look at leverage the common email template (#235184 (comment 402718348)) we already have in place. This will require that we first Enable special references for vulnerabilities.