DependencyTrack / DependencyTrack/frontend

Count only unique vulnerabilities in collection projects

Open
#1,519 2 comments 1 reaction 0 assignees View on GitHub
enhancement
Dominant language
Vue
Stars
171
Forks
250
Avg merge
10h 56m
Merged PRs (30d)
84

Description

### Current Behavior

We're using collection projects to organize different versions of the same project. Collection projects set to **aggregate direct children** count and display only the sum of vulnerabilities in the child projects without checking for duplicates. So, for example, if you create a parent project and push the same sbom twice (e.g. with different versions) creating two identical child projects, the parent would aggregate both of them and show x2 number of vulnerabilities in the GUI even though all CVEs are duplicated.

### Proposed Behavior

It would be great to have an option to adjust collection project behavior and have an option to ignore duplicate CVEs to have clearer overview of the amount of vlns.

### Checklist

- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/frontend/issues) for whether this enhancement was already requested

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.