CS-367 [Feature] Ability to add comments directly to findings

[github-actions]

This is an automated pull request to merge chas/add-comments-to-findings into dev.
It was created by the [Auto Pull Request] action.

---

Summary by cubic

Adds first-class comments to Findings so teams can discuss issues directly in the Finding detail view. Also enables mentions, deep links, and audit logging for Finding comments.

• New Features

  • App: Adds a Comments section to the Finding detail sheet; respects permissions via read-only mode.
  • API: Accepts finding as a CommentEntityType and validates existence before creating comments.
  • Notifications: Mention emails include a snippet from the Finding and a deep link to /overview/findings?open=<id>.
  • Audit logs: Maps finding comments to the correct audit entity.

• Migration

  • Adds finding to the CommentEntityType enum. Run your Prisma migrations.

^{Written for commit b8b5874. Summary will update on new commits.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
app	Ready	Preview, Comment	May 12, 2026 8:27pm
comp-framework-editor	Ready	Preview, Comment	May 12, 2026 8:27pm
portal	Ready	Preview, Comment	May 12, 2026 8:27pm

[linear]

CS-367

[cubic-dev-ai]

No issues found across 6 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.