DependencyTrack / DependencyTrack/frontend

Add Support for Display of ExternalReference Hashes

Open
#804 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Vue
Stars
171
Forks
250
Avg merge
11h 12m
Merged PRs (30d)
82

Description

### Current Behavior

Dependency Track UI displays External References for project/component/service via a tab on the "View Details" dialog.

The dialog in v4.10.1 displays "URL" and "Type" and support for "Comment" was added via issue #802 and will be in v4.11

The only element of External References that are NOT yet displayed are hashes.

### Proposed Behavior

When hashes exist for an ExternalReference then they should be displayed in the Frontend.
Hashes are an array containing algorithm (alg) and content, so the display should be capable of handling multiple hashes for a single External Reference, and also identifying what algs are used.

See relevant specification documentation [here](https://cyclonedx.org/docs/1.5/json/#externalReferences_items_comment) and [here](https://cyclonedx.org/docs/1.5/json/#components_items_externalReferences_items_comment)

This enhancement is specific to "display-only" and is thus an MVP. Future functionality might include (optionally) checking the hashes (eg using integrity checking to be implemented in DT v5.0 (Hyades)).

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/frontend/issues) for whether this enhancement was already requested

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.