mitre-attack / mitre-attack/attack-workbench-frontend
[BUG] "Export Latest" button calls REST API with erroneous query parameter
@seansica is already working on this.
Since Sep 2, 2026.
- Dominant language
- TypeScript
- Stars
- 438
- Forks
- 79
- Avg merge
- 1d 21h
- Merged PRs (30d)
- 3
Description
When you click "Export Latest" and select either "STIX 2.0 Bundle" or "STIX 2.1 Bundle" the client/frontend makes a call to the REST API:
POST /api/release-tracks/:id/snapshots/latest?include=all&stixVersion=2.1&format=bundle
resulting in a 400 response:
{"message":"Invalid include parameter","parameterName":"include"}
This option was intended to be a tier selector to specify whether members, staged, candidates, quarantine, or all objects should be included in the bundle.
The query parameter is still appearing in the rendered Swagger/OpenAPI documentation.
This should be removed from both the frontend and backend. Deterministic graph manifest generation does not currently account for conditionally pulling in additional non-member objects. Bringing in candidates and/or staged objects would require dynamically recomputing secondary objects which is exactly what we are trying to move away from.
This will require a corresponding change to the backend code.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.