CycloneDX / CycloneDX/Sunshine

Support for respecting Analysis state

Open
#15 2 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
HTML
Stars
124
Forks
16
PR merge metrics
No merged PRs in 30d

Description

Feature request: When the VEX or VDR contains an analysis state it would be great to respect that in the visualization.

The spec: https://cyclonedx.org/docs/1.6/json/#vulnerabilities_items_analysis contains the **state** property to declare the occurrence of a vulnerability.

Thus in the summary, components and vulnerabilities table this should be respected maybe toggled to include them based on their state. Don't show "not_affected", "false_positive", "resolved".

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.