DependencyTrack / DependencyTrack/dependency-track

Grouping vulnerabilities by packages

Open
#4,135 0 comments 4 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior

We would like to group the list of vulnerabilities at the package level.
At the moment, in DT we see in the DT vulnerabilities section, for example, twice Component setuptools of the same version and different vulnerabilities for these components.
![image](https://github.com/user-attachments/assets/778a1cd1-8f15-4aaf-ad0b-ef421a45749a)
The main problem is that Jira integration with DT will create 2 tasks for each vulnerability for the same component (package), which is not very convenient, since a large number of tickets are generated, which are more difficult to process.

### Proposed Behavior

It would be convenient if there was a grouping functionality that would combine all the found vulnerabilities at the level of one package, so we would get 1 ticket per component (package) with a list of all vulnerabilities.

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.