Vulnerability Explanation - Behind a feature toggle

Problem to solve

Vulnerability Explanation (VE) has feature enhancements that we will need to consider when we move to chat.

  • VE includes a pre-flight check to make sure users don't send the prompt to the third party AI if secrets are detected.
  • VE allows users to preview the prompt before sending to to the third party AI.
  • VE allows users to choose whether or not to send code snippet as part of the prompt.

These functionalities are not available today in chat. Instead of building them into chat, we will be putting Vulnerability Explanation behind a toggle so Owners and Maintainers can turn off this feature specifically. Including things like a prompt preview leaves the decision to send the prompt to the end user. These decisions should be made by the organization and not the individual user, hence the feature toggle.

Proposal

Vulnerability Explanation can be turned on and off for a group and is behind the settings toggle that already exists today and is documented here.

Edited by Alana Bellucci