DependencyTrack / DependencyTrack/dependency-track

Configuration Integrity Check Tool and Report

Open
#2,740 3 comments 1 reaction 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior

Dependency-Track does not provide UI feedback to the administrator to highlght when there might be configuration or other problems. Sometimes DT might not even be checking for problems. DT Logs can be useful... but an admin might even have access to them.

### Proposed Behavior

* Provide an integrity report in the Administration page that gives details of any problems, with severity.
* Implement a task that performs integrity tests. This should run on startup and periodically thereafter... and be used to populate the integrity report
* Create integrity tests. A useful MVP would be a check on whether OSS Index Analyser has been configured with an API token.
* Ideally, display a warning flag in UI to admin users to alert them to the the existence of unresolved problems. This can be done in a similar way to Jenkins.

![image](https://github.com/DependencyTrack/dependency-track/assets/4938718/54c63deb-277d-4e3d-8a65-c5feb6d5bf53)

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.