DependencyTrack / DependencyTrack/dependency-track

Support Filtering by "Active" Flag on Component & Vulnerability Projects Listing

Open
#475 2 comments 3 reactions 0 assignees View on GitHub
enhancement p2
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior:
Dependency-Track v3.6.0 introduced the active bit/flag (#399), whereby projects can be configured as inactive and then are hidden from display by default, with projects screen displaying a checkbox "Show inactive projects".

The functionality works and is useful.

However, inactive projects are displayed (not filtered out) on:

* Component screen -> Projects tab
* Vulnerability screen -> "Affected Projects" listing

### Proposed Behavior:

Filter out inactive projects by default from:

* Component screen -> Projects tab
* Vulnerability screen -> "Affected Projects" listing

..and add "Show inactive projects" checkbox to these screens,

Here's one use case, for the Component screen:

* 120 projects. 60 use component XXX and 60 use component YYYY
* It is trivial to filter (and count) projects using XXX and YYY in in Dependency Track 3.6.1
* We need to update projects to migrate XXX to YYY
* However, some of the projects are not deployed (ie, are inactive) and do not need to be counted (or updated) when looking at XXXX.
* Hence, with the help of the active bit, the count of 60 might drop to (say) 40.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.