Manual reviews
Some attachments cannot be judged responsibly by a machine. A camera photo may show an ID card, a whiteboard or another screen; a scanned contract cannot be read reliably by OCR; a Word file may embed a photo the scanner does not read. Instead of guessing, the scanner lists these on Manual reviews, where a person looks at each one in Jira and records a decision.
The page is for administrators only, like the review actions on findings: the list names attachments that may contain ID documents or secrets.
What lands on the page
Attachment scanning raises a manual review for an attachment, with one of these reasons:
| Reason | Meaning |
|---|---|
PHOTO | Camera photo; may show an ID document, whiteboard or screen |
SCANNED_DOCUMENT | Scanned document; OCR is not reliable enough to trust |
NO_TEXT | No readable text was found in the image |
LOW_CONFIDENCE_TEXT | Text was found but could not be read reliably |
NOT_ANALYZED | The image could not be analysed within the safety limits |
EMBEDDED_IMAGES | The document contains embedded images that were not read |
SCANNED_PAGES | The PDF has pages without a text layer |
An attachment appears once per reason. Any text OCR could read with confidence is still scanned for secrets, so an image on this page can also have findings.
Nothing about the image itself is stored: the page shows the issue, the attachment's file name and the reason. Use Open in Jira at the end of a row to open the issue and see the attachment.
Recording a decision
Each review starts as Open, and the list shows open reviews by default; use the Status filter to see done or suppressed ones. Decide what should happen to it:
- Done when you have dealt with it, for example by removing the attachment in Jira. If a later scan finds the same attachment again for the same reason, the review goes back to Open, because what you marked done is still there.
- Suppress when the attachment is harmless or accepted and should not come back. A suppression is permanent: later scans that see the same attachment again keep it suppressed. Choose Suppressed in the Status filter to see them.
- Reopen on a suppressed or done review to undo the decision.
The scanner never changes anything in Jira; the decision is a record for your team and the audit log.
Stale reviews
Each row shows when the attachment was first and last seen. After a scan that read attachments completes, reviews it did not raise again get a Stale label in the Status column, for example because the attachment was deleted. Hover the label for an explanation. The label disappears as soon as a later scan sees the attachment again. Reviews only become stale after scans that read attachments on an installation where image analysis is available, so a fields-only scan never makes reviews stale. Use the Stale filter to list only stale or only current reviews.
From a scan
The scan detail page says how many items from that scan need manual review and
links to this page, filtered to that scan. A standalone image that needs review
also counts as NEEDS_REVIEW in the scan's attachment coverage, which is why
such a scan shows COMPLETED WITH GAPS.
Retention
Manual reviews follow the same retention window as findings (ten years by default), counted from when the attachment was last seen.