CycloneDX / CycloneDX/Sunshine
Support for respecting Analysis state
Open
enhancement
- Dominant language
- HTML
- Stars
- 124
- Forks
- 16
- PR merge metrics
- No merged PRs in 30d
Description
Feature request: When the VEX or VDR contains an analysis state it would be great to respect that in the visualization.
The spec: https://cyclonedx.org/docs/1.6/json/#vulnerabilities_items_analysis contains the **state** property to declare the occurrence of a vulnerability.
Thus in the summary, components and vulnerabilities table this should be respected maybe toggled to include them based on their state. Don't show "not_affected", "false_positive", "resolved".
Contributor guide
Assessment
This issue has not been assessed yet.