DependencyTrack / DependencyTrack/frontend

Include suppression status on vulnerability "affected project" tab

Open
#102 0 comments 0 reactions 0 assignees View on GitHub
enhancement p2
Dominant language
Vue
Stars
171
Forks
250
Avg merge
11h 12m
Merged PRs (30d)
82

Description

### Current Behavior:
Individual vulnerabilities are listed with an "Overview" tab and an "Affected Projects" tab. The latter has two columns... name and version. ie, name of project and version of project. When a vulnerability is suppressed then it is removed from this listing.

Thus, for a vulnerability that is suppressed in 60 projects we see:

![image](https://user-images.githubusercontent.com/4938718/143463627-f13d4def-4fa5-4573-aeb1-ea1cee1d9d21.png)

Empty!

This makes it harder to "audit the auditing".

### Proposed Behavior:

Add a column to show when an occurrence of the vulnerability has been suppressed. For consistency, this might be accompanied by the same "Show suppressed findings" checkbox as used on the project screen.

It might also be desirable to link the display of the column (and the checkbox) to the permission VULNERABILITY_ANALYSIS. This could be extended later to include VIEW_VULNERABILITY (if such is created via [dependency-track/338](https://github.com/DependencyTrack/dependency-track/issues/338))

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.