docs/triage: add docs on auto populating symbols
Change-Id: I7054dd71d0e6501e38e3d1871c81ed4f8eb6a921
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/688735
Run-TryBot: Markus Kusano <kusano@google.com>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Neal Patel <nealpatel@google.com>
TryBot-Bypass: Markus Kusano <kusano@google.com>
diff --git a/doc/triage.md b/doc/triage.md
index 000ca59..ba746e7 100644
--- a/doc/triage.md
+++ b/doc/triage.md
@@ -152,7 +152,8 @@
then the dropdown that shows the current branch, then "Tags"). Walk the
versions backwards from the fixed one to find the highest that doesn't
contain the fix. (It might not be the immediately preceding version.)
- - If the vulnerable functions cannot be auto-populated, add vulnerable
+ - Use `vulnreport symbols <issue ID>` to auto-populate vulnerable symbols.
+ - If the vulnerable symbols cannot be auto-populated, add vulnerable
functions to the `symbols` list by reading the CVE, the fixing CLs, and the
code at the vulnerable version you chose above.
4. From the repo root, run `vulnreport fix <GitHub issue number>`.
