Current Situation

Developers do an effort to review or acknowledge Security Hotspots raised on Pull Requests. When they do that, they get a PASSED/GREEN Quality Gate. This is great and this is what we expect all the developers to do on PRs to make sure no security-sensitive code is merged.

Today, there is a problem. When the Security Hotspots are merged from the PR to the target Branch, Security Hotspots are reopened and the comments the developer took time to put on the Hotspots are lost.

Expected Behavior

Similar to what is done for Issues, the "issue tracking" should be turned on for Security Hotspots, and statuses and comments should be kept from the PR to the target Branch.