DependencyTrack / DependencyTrack/dependency-track
Global Search: Missing in 3.8.0 and Usability Issues in 3.7.0
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
### Current Behavior:
Dependency Track v3.7.0 (and earlier versions) provides a global search feature in the top-right corner of the UI. This feature does not seem to be present in v3.8.0 (caveat...test installation using H2 database). There is no mention in the Changelog, so I assume that this is an oversight (ie, defect) or specific to H2.
I have found that the global search provides capabilities which are not otherwise possible in DT. For instance, with over 22,000 components in my system, using search on the components page to search for component "q" returns 500 hits (Aside: #313 might help here).
However, the global search returns results which are almost just what are needed...

There are a couple of usability issues (and I can split this out into a separate enhancement request if need be and if removal of global search in 3.8.0 was not deliberate).
- Component version is not given... so it's hard to tell which is which. Suggest that adding version to listing would help.
- No differentiation between used/unused. In my case, only one of the "q" versions is used in a project. Suggest differentiating using grey text or italics.
A separate usability issue is seen when searching for a threat. Searching for a specific CVE, such as CVE-2011-5000, will return:
- CVE-2011-5000
- CVE-2009-5000
- CVE-2006-5000
- CVE-2008-5000
- CVE-2010-5000
The desired result is included. But so are CVE that were not searched for. Just a minor quibble...
### Steps to Reproduce:
See above
### Expected Behavior:
See above
### Environment:
- Dependency-Track Version: 3.8.0 and 3.7.0
- Distribution: [ Executable WAR ]
- BOM Format & Version: CyloneDX 1.1
- Database Server: [ PostgreSQL ] (and H2 for 3.8.0)
- Browser: Firefox
Contributor guide
Assessment
This issue has not been assessed yet.