DependencyTrack / DependencyTrack/dependency-track

Allow component identity version search field to contain regex patterns

Open
#1,359 2 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior:
Currently the behavior of the field is "contains" or "startswith" and there's no way to change that in the UI.

We often have wish to search for `projects using component X with version less/higher than Y`, or `projects using component X with version starting with Z`.
Currently it's a little bit clunky because if you search for `2.1` you'll also get search results for `1.2.1`, `3.2.1` etc., while the intended search was for `^2.1`

### Proposed Behavior:
Allow the version search field to contain a regex pattern, and return matching results.

If complete regex support is too complex or costly, a subset would still be beneficial.
Proposed initial subset operators: `^` (start of line), `$` (end of line), `*` wildcard

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.