DependencyTrack / DependencyTrack/frontend

Vulnerability Audit: Display Risk Score Column For Grouped Vulnerabilities

Open
#914 0 comments 0 reactions 0 assignees View on GitHub
enhancement good first issue hacktoberfest p3 size/S
Dominant language
Vue
Stars
171
Forks
250
Avg merge
10h 56m
Merged PRs (30d)
84

Description

### Current Behavior

The Vulnerability Audit Screen has a column that displays the count of affected projects for each vulnerability. It really is useful to see (say) that vulnerability A affects 150 projects and vulnerabilities B and C each affect 20.

However, this does not take weighted risk score into account, ie, where A and C are both low severity (score = 1) and B is critical (score = 10).

In this example, risks scores would be 150 for A, 200 for B, 20 for C.

Having this information missing from the "Grouped Vulnerabilities" Audit screen thus makes it harder to audit based on risk.

### Proposed Behavior

Add Risk Score Column to the "Grouped Vulnerabilities" Audit Screen. The column needs to be sortable.

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/frontend/issues) for whether this enhancement was already requested

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.