DependencyTrack / DependencyTrack/dependency-track

Ability to change severity

Open
#581 4 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior:
Currently, it is only possible to mark a vulnerability as a false positive or exploitable.

### Proposed Behavior:
Give the user the ability to change the severity of a given vulnerability. Perhaps this could be a separate analysis state of "SEVERITY_CHANGE" or something similar. I'm envisioning this being used in situations where environmental or temporal factors change the severity.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.