DependencyTrack / DependencyTrack/dependency-track
Support Filtering by "Active" Flag on Component & Vulnerability Projects Listing
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
### Current Behavior:
Dependency-Track v3.6.0 introduced the active bit/flag (#399), whereby projects can be configured as inactive and then are hidden from display by default, with projects screen displaying a checkbox "Show inactive projects".
The functionality works and is useful.
However, inactive projects are displayed (not filtered out) on:
* Component screen -> Projects tab
* Vulnerability screen -> "Affected Projects" listing
### Proposed Behavior:
Filter out inactive projects by default from:
* Component screen -> Projects tab
* Vulnerability screen -> "Affected Projects" listing
..and add "Show inactive projects" checkbox to these screens,
Here's one use case, for the Component screen:
* 120 projects. 60 use component XXX and 60 use component YYYY
* It is trivial to filter (and count) projects using XXX and YYY in in Dependency Track 3.6.1
* We need to update projects to migrate XXX to YYY
* However, some of the projects are not deployed (ie, are inactive) and do not need to be counted (or updated) when looking at XXXX.
* Hence, with the help of the active bit, the count of 60 might drop to (say) 40.
Contributor guide
Assessment
This issue has not been assessed yet.