DependencyTrack / DependencyTrack/dependency-track
Filter Projects Metrics by tag
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
Enhancement: In Dependency-Track v3.3.1, clicking on "projects" provides a summary of metrics at the top of the screen:
- Portfolio Vulnerabilities
- Projects at Risk
- Vulnerable Components
- Inherited Risk Score
When clicking on a tag, the list of projects is filtered by the tag. Thus, in the attached screenshot one sees 3 out of the 6 projects in the portfolio.
As an enhancement, the metrics should be filtered by the tag. eg in this example...
- Portfolio vulnerabilities could be tweaked to "tag vulnerabilities". Or even show both?
- Projects at Risk would be "1" (only one project out of 3 with tag is analysed).
- Inherited risk score would be... something. But (hopefully) less than 892! (Aside: the documentation does not explain what risk score is).

Contributor guide
Assessment
This issue has not been assessed yet.