DependencyTrack / DependencyTrack/frontend
Show epss fields as columns in Vulnerability Audit view
- Dominant language
- Vue
- Stars
- 171
- Forks
- 250
- Avg merge
- 10h 56m
- Merged PRs (30d)
- 84
Description
### Current Behavior
The Vulnerability Audit view shows all vulnerabilities, but there is no EPSS columns.
### Proposed Behavior
Add an (optional?) column to display the EPSS values of a vulnerability. This will help when triaging / deduplication of vulnerablities.
I noticed the EPSS values are not yet present in the API response.
@rbt-mm Do you think this is feasible? It's been a while since I looked at the datamodel, so I am not sure. I am actually impressed that we can now finally sort on `affectedProjects` for vulnerabilities :-)
### Checklist
- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/frontend/issues) for whether this enhancement was already requested
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by tracing the Vulnerability Audit view and the vulnerability API response, then inspect the related data model to understand whether EPSS values are available. Done means the API exposes EPSS values and the view can display them in an optional column for triage and deduplication.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- frontend
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100