DependencyTrack / DependencyTrack/dependency-track

Filter Projects Metrics by tag

Open
#238 13 comments 3 reactions 0 assignees View on GitHub
enhancement gnomes
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

Enhancement: In Dependency-Track v3.3.1, clicking on "projects" provides a summary of metrics at the top of the screen:
- Portfolio Vulnerabilities
- Projects at Risk
- Vulnerable Components
- Inherited Risk Score

When clicking on a tag, the list of projects is filtered by the tag. Thus, in the attached screenshot one sees 3 out of the 6 projects in the portfolio.

As an enhancement, the metrics should be filtered by the tag. eg in this example...
- Portfolio vulnerabilities could be tweaked to "tag vulnerabilities". Or even show both?
- Projects at Risk would be "1" (only one project out of 3 with tag is analysed).
- Inherited risk score would be... something. But (hopefully) less than 892! (Aside: the documentation does not explain what risk score is).

![metrics-per-tag](https://user-images.githubusercontent.com/4938718/48787505-d11d7c00-ece0-11e8-836b-643c0fb08642.png)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.