From security audit perspective, It's good to have a File upload option in evidence column in the checklist. It would be helpful to communicate the issues to the stakeholder. I aware that ASVS is lift shift approach in SDLC but sometime it also helps to perform the review after the deployment process.
For now we will not implement this feature, most people use actually their own evidence system like Jira, Service Now or Defect Dojo and use those places to collect and store the requirements and evidences
Hello,
From security audit perspective, It's good to have a File upload option in evidence column in the checklist. It would be helpful to communicate the issues to the stakeholder. I aware that ASVS is lift shift approach in SDLC but sometime it also helps to perform the review after the deployment process.