DependencyTrack / DependencyTrack/dependency-track

Provide an option to apply an analysis to all the aliases of a finding

Open
#4,622 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior

Applying an analysis via REST to a finding only changes one single finding, despite the finding having (in most cases) aliases from different vulnerability sources. There is no sensible reason to have different analyses for different findings that refer to the same vulnerability.

### Proposed Behavior

Provide a REST API option to automatically apply analyses to all aliases of a found vulnerability.

### Checklist

- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.