DependencyTrack / DependencyTrack/dependency-track
search/project should work on any field, and should be able to specify field
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
### Current Behavior
search/project API only searches within name, uuid, version, and API cannot specify which field to match upon (it matches on any of the three)
### Proposed Behavior
search/project API can search on any field, and should be able to specify which field to match upon.
Bonus points for being able to use comparison operators for numeric values (like epssScore).
For example, being able to search for an epssScore >= 0.2 (or some other value) would help support DoD requirements regarding addressing CISA-catalogued KVEs (known vulnerabilities exploited), per Binding Operational Directive 22-01.
### Checklist
- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested
Contributor guide
Assessment
This issue has not been assessed yet.