Skip to content

Add analysis in Vulnerabilities-> Affected Projects Report #5576

@jenspopp

Description

@jenspopp

Current Behavior

I do a vulnerability Audit for my project, I click on the vulnerability -> Affected Projects to see, if other projects are affected. I see: Name, version, active as columns

Proposed Behavior

It would improve usability if there would be an additional column: Analysis. That would enable me to see immediately if another project already analyzed the issue. Right now I need to click through all projects to find that answer. So basically combining:

/v1/vulnerability/source/:source/vuln/:vuln --> vulnerabilityUuid, affecedComponentUuid (s)

and

/v1/analysis?component={affectedComponentUuids}&vulnerability={vulnerabilityUuid}

to get at least analysisState as additional column.

Advanced: It would also be good, to have a report of all analyses, that were made for one vulnerability. That way I could review all analyses and select an existing one (copy analysisState, analysisJustification, analysisResponse, analysisDetails with new audit trail. ) if it matches.

Checklist

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions