DependencyTrack / DependencyTrack/dependency-track

search/project should work on any field, and should be able to specify field

Open
#2,168 0 comments 1 reaction 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior

search/project API only searches within name, uuid, version, and API cannot specify which field to match upon (it matches on any of the three)

### Proposed Behavior

search/project API can search on any field, and should be able to specify which field to match upon.

Bonus points for being able to use comparison operators for numeric values (like epssScore).

For example, being able to search for an epssScore >= 0.2 (or some other value) would help support DoD requirements regarding addressing CISA-catalogued KVEs (known vulnerabilities exploited), per Binding Operational Directive 22-01.

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.