DependencyTrack / DependencyTrack/dependency-track

Add UI for observing outcome when deploying policies in "dry run" mode

Open
#6,199 3 comments 0 reactions 0 assignees View on GitHub
enhancement p3 size/XL
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

As part of https://github.com/DependencyTrack/hyades/issues/957, we identified that it would be good to have a "dry run" mode for policies. This mode would evaluate policies, but not apply their associated action.

Initially, this functionality is implemented using application logs. However, long-term, we can't expect users to observe logs. We should have a UI integration that provides this information instead.

The granularity of the information being displayed is still subject for discussion. But generally, the following would be nice to have:

* Number of affected projects
* Number of affected components
* Number of affected findings
* Potentially with additional aggregates, as in "avg. findings affected per component / project"

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.