DependencyTrack / DependencyTrack/dependency-track
Add analysis in Vulnerabilities-> Affected Projects Report
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
### Current Behavior
I do a vulnerability Audit for my project, I click on the vulnerability -> Affected Projects to see, if other projects are affected. I see: Name, version, active as columns
### Proposed Behavior
It would improve usability if there would be an additional column: Analysis. That would enable me to see immediately if another project already analyzed the issue. Right now I need to click through all projects to find that answer. So basically combining:
`/v1/vulnerability/source/:source/vuln/:vuln` --> vulnerabilityUuid, affecedComponentUuid (s)
and
`/v1/analysis?component={affectedComponentUuids}&vulnerability={vulnerabilityUuid}`
to get at least `analysisState` as additional column.
Advanced: It would also be good, to have a report of all analyses, that were made for one vulnerability. That way I could review all analyses and select an existing one (copy analysisState, analysisJustification, analysisResponse, analysisDetails with new audit trail. ) if it matches.
### Checklist
- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested
Contributor guide
Assessment
This issue has not been assessed yet.