DependencyTrack / DependencyTrack/dependency-track

Add analysis in Vulnerabilities-> Affected Projects Report

Open
#5,576 0 comments 1 reaction 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior

I do a vulnerability Audit for my project, I click on the vulnerability -> Affected Projects to see, if other projects are affected. I see: Name, version, active as columns

### Proposed Behavior

It would improve usability if there would be an additional column: Analysis. That would enable me to see immediately if another project already analyzed the issue. Right now I need to click through all projects to find that answer. So basically combining:

`/v1/vulnerability/source/:source/vuln/:vuln` --> vulnerabilityUuid, affecedComponentUuid (s)

and

`/v1/analysis?component={affectedComponentUuids}&vulnerability={vulnerabilityUuid}`

to get at least `analysisState` as additional column.

Advanced: It would also be good, to have a report of all analyses, that were made for one vulnerability. That way I could review all analyses and select an existing one (copy analysisState, analysisJustification, analysisResponse, analysisDetails with new audit trail. ) if it matches.

### Checklist

- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.