DependencyTrack / DependencyTrack/dependency-track
Grouping vulnerabilities by packages
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
### Current Behavior
We would like to group the list of vulnerabilities at the package level.
At the moment, in DT we see in the DT vulnerabilities section, for example, twice Component setuptools of the same version and different vulnerabilities for these components.

The main problem is that Jira integration with DT will create 2 tasks for each vulnerability for the same component (package), which is not very convenient, since a large number of tickets are generated, which are more difficult to process.
### Proposed Behavior
It would be convenient if there was a grouping functionality that would combine all the found vulnerabilities at the level of one package, so we would get 1 ticket per component (package) with a list of all vulnerabilities.
### Checklist
- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested
Contributor guide
Assessment
This issue has not been assessed yet.