Skip to content

feat: new toggle to hide/show aliased project vulnerability findings #1280

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

setchy
Copy link
Contributor

@setchy setchy commented Jun 18, 2025

Description

Add a new toggle to the Project Audit Vulnerabilities tab which will show/hide aliased component vulnerabilities within the list.

By default the behavior will remain the same, but the end-user has the option to toggle off the aliased results and see a non-repeating list of component vulns

Screenshot 2025-06-17 at 11 02 42 PM

Addressed Issue

This enhancement aims to avoid end-user confusion around the list of audit vulnerabilities + severities not matching the project vulnerability summary metrics which can occur when mirroring multiple vulnerability sources such as NVD and GHSA.

Additional Details

To avoid any backend API changes, the filtering is performed client-side

Checklist

@Copilot Copilot AI review requested due to automatic review settings June 18, 2025 03:05
@owasp-dt-bot
Copy link

owasp-dt-bot commented Jun 18, 2025

🎉 Snyk checks have passed. No issues have been found so far.

security/snyk check is complete. No issues have been found. (View Details)

Copy link

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR introduces a UI toggle for audit vulnerabilities that allows users to show or hide aliased component findings, helping to clarify vulnerability metrics.

  • Adds a new c-switch toggle in the Project Findings view.
  • Implements client-side filtering of findings using a new filtering algorithm.
  • Updates localized messages across several language files to support the new toggle.

Reviewed Changes

Copilot reviewed 14 out of 14 changed files in this pull request and generated no comments.

File Description
src/views/portfolio/projects/ProjectFindings.vue Introduces a new toggle (c-switch) for aliased findings, implements filtering logic, and persists user preference in localStorage.
src/i18n/locales/* Adds translations for the new toggle label in multiple languages.
Comments suppressed due to low confidence (1)

src/views/portfolio/projects/ProjectFindings.vue:621

  • The method name 'showAliasedFindings' conflicts with the data property of the same name. Consider renaming the method (for example, 'toggleShowAliasedFindings') to avoid ambiguity.
    showAliasedFindings() {

@setchy setchy changed the title feat: audit vuln toggle for hide/show aliased findings feat: new toggle to hide/show aliased project vulnerability findings Jun 18, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants