DependencyTrack / DependencyTrack/frontend

Show epss fields as columns in Vulnerability Audit view

Open
#1,126 1 comment 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Vue
Stars
171
Forks
250
Avg merge
10h 56m
Merged PRs (30d)
84

Description

### Current Behavior

The Vulnerability Audit view shows all vulnerabilities, but there is no EPSS columns.

### Proposed Behavior

Add an (optional?) column to display the EPSS values of a vulnerability. This will help when triaging / deduplication of vulnerablities.

I noticed the EPSS values are not yet present in the API response.

@rbt-mm Do you think this is feasible? It's been a while since I looked at the datamodel, so I am not sure. I am actually impressed that we can now finally sort on `affectedProjects` for vulnerabilities :-)

### Checklist

- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/frontend/issues) for whether this enhancement was already requested

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by tracing the Vulnerability Audit view and the vulnerability API response, then inspect the related data model to understand whether EPSS values are available. Done means the API exposes EPSS values and the view can display them in an optional column for triage and deduplication.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
frontend
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.