DependencyTrack / DependencyTrack/dependency-track

different enhacements possible

Open
#1,601 3 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

The enhancement may already be reported! Please search for the enhancement before creating one.

### Current Behavior:

1- components page empty, until search.
2- vulnerabilities order in the vulnerabilities page.
3- alerts mail list have to be written by hand.
4- uploading a BOM deletes every component that already exsits.
5- show inactive projects button have to be activated each time you come back to the projects page.

### Proposed Behavior:
1- show all components and filter by search, like the projects page.
2- order vulnerabilities by severity or the number of affected projects in the vulnerabilities page.
3- get the mails from the users mapped to the project associated with the alert.
4- auto merge the exsisting components with the new BOM.
5- once the button activated it should stay like that until deactivated.

what would be an amazing update is to propose CPEs, SWIDs, PURLs when trying to add a component. like the user can type in the input and it will give suggetions. i know that it would need more database tables, storage and getting all CPEs that exsist, but sometimes it is hard for normal users to find the right CPE of a component.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.