DependencyTrack / DependencyTrack/frontend
Notify when a vulnerability changes
- Dominant language
- Vue
- Stars
- 171
- Forks
- 250
- Avg merge
- 11h 12m
- Merged PRs (30d)
- 82
Description
Frontend part of https://github.com/DependencyTrack/dependency-track/issues/2361
### Current Behavior
If a vulnerability changes after it has been created (such as having its severity changed from Unassigned to Critical), it currently doesn't trigger a notification
### Proposed Behavior
Create a new notification group called VULNERABILITY_CHANGED.
Such a notification should be sent when a vulnerability is changed after it has been created, at least for changes that can trigger a change in the risk score (severity, CPE, ...), and list not only that something has changed, but also what changed.
If it is decided to also send notifications for changes in the vulnerability that don't impact the risk score (eg its description), users should be able to opt out of this subset of notifications (eg, having 2 groups : VULNERABILITY_CHANGED and VULNERABILITY_RISK_CHANGED).
### Checklist
- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/frontend/issues) for whether this enhancement was already requested
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.