DependencyTrack / DependencyTrack/dependency-track

Parent container with child application

Open
#3,530 1 comment 3 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior

Working for a large company, I'm part of a team of 70 developers working on 1 large application divided into sub-applications. We use DependencyTrack to analyse vulnerabilities in our applications and track the number of vulnerabilities from release to release.
However, I'm currently having problems using DependencyTrack to work effectively.
As you can see on the attached screen, I use DependencyTrack to analyse ALL my projects. Each of our projects has a "release" version and a "development" version.

The problem I'm having is the hierarchical organisation of DependencyTrack. It is impossible to create "applications" that are children of a parent "container".

In my screen, you can see that I have to use an alias on each child container to avoid having a creation ban because the name is already taken. So I end up with a very complex and, above all, long hierarchy.

![image](https://github.com/DependencyTrack/dependency-track/assets/6824137/52d88d0d-c90b-4da1-afb6-a7d1891bf5db)

### Proposed Behavior

The expected behaviour would be as follows:
- When creating the "project", don't just check that the name exists to refuse creation, but join this check with the parents.
For example, it would be possible to do the following:
Project 1 -> Development -> 1.1
Project 2 -> Development -> 1.1

- Do not use any classifier for a parent

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.