> For the complete documentation index, see [llms.txt](https://docs.ox.security/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ox.security/scan-and-analyze-with-ox/analyzing-scan-results/active-issues-new/issue-details-comments.md).

# Issue Details: Comments

The Comments tab is a full conversation thread on the issue. Anyone with access to the issue can leave comments, and can edit or delete their own. Every comment is visible to everyone with access to the issue. There is no limit to the number of comments you can post on a single issue.

Use this tab to track an investigation as it unfolds, record triage decisions, share context, ask questions, or hand off remediation work.

## Auto-logged actions

Some issue-level actions automatically add an attributed entry to the thread, so the audit trail is captured without a manual note. Examples include:

* Marking an issue as a **False Positive** (entry tagged `[Reported as False Positive] <reason>`)
* Canceling a False Positive report
* **Excluding** an issue

## Permissions and roles

Visibility is the same for everyone with access to the issue. Posting, editing, and deleting are [controlled by role](/admin-settings/roles.md).

Editing is always owner-only. Even an admin cannot rewrite another user's text.

Auto-logged action entries (Report False Positive, Cancel False Positive, Exclude) are attributed to the user who performed the action and follow the same edit and delete rules as manual comments.

| Action                        | Any user with access to the issue | Comment owner | Admin                               |
| ----------------------------- | --------------------------------- | ------------- | ----------------------------------- |
| View any comment on the issue | Yes                               | Yes           | Yes                                 |
| Post a new comment            | Yes                               | Yes           | Yes                                 |
| Edit own comment              | Yes                               | Yes           | Yes                                 |
| Edit another user's comment   | No                                | n/a           | No                                  |
| Delete own comment            | Yes                               | Yes           | Yes                                 |
| Delete another user's comment | No                                | n/a           | Yes (on issues they have access to) |

## Comment fields

Each comment in the list shows:

| Field        | What it shows                                                                                                                                                                  | How to use                                                                    |
| ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------- |
| Author       | The avatar and display name of the user who posted the comment.                                                                                                                | Use this to identify who made the note and follow up directly if needed.      |
| Timestamp    | When the comment was posted, shown as a relative time (for example, "a few seconds ago").                                                                                      | Use this to track the chronology of the conversation.                         |
| Comment text | The body of the comment. Auto-logged action entries are wrapped with a tag such as `[Reported as False Positive]`.                                                             | Read for context, decisions, and audit history.                               |
| Actions      | A "..." menu on the right of each comment with per-comment actions (edit, delete). Edit is available only to the comment owner; admins can delete any comment but cannot edit. | Use this to manage your own comments or, as an admin, to clean up the thread. |

### Tickets and audit logs

Linked tickets and the issue audit log update on every comment action.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.ox.security/scan-and-analyze-with-ox/analyzing-scan-results/active-issues-new/issue-details-comments.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
