DependencyTrack / DependencyTrack/dependency-track

FPF report exported doesn't show suppressed results

Open
#2,790 7 comments 0 reactions 0 assignees View on GitHub
defect in triage
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior

We are hitting the API endpoint: `/v1/finding/project/{uuid}/export` to get a report but the results that are generated do not show suppressed results. I would suspect that since the json has an entry for the component for the analysis that has `isSuppressed` that it would still show up in the export but just have `"isSuppressed": true`

### Steps to Reproduce

1. Take a component and suppress it
2. Get an FPF report by hitting the /v1/finding/project/{uuid}/export api endpoint
3. View results and see that suppressed components don't show up in findings

### Expected Behavior

Expected Behavior is that exported FPF would show suppressed components with JSON like the following:
```json
"analysis": {
"isSuppressed": true,
"state": "RESOLVED"
},
```

### Dependency-Track Version

4.8.2

### Dependency-Track Distribution

Container Image

### Database Server

PostgreSQL

### Database Server Version

14

### Browser

Google Chrome

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.