[Notifications] Empty Affected project(s) in JIRA when limit to parent project and Group NEW_VULNERABILITY

[snieguu]

Current Behavior

The Child project is not listed in created JIRA ticket in the Affected project(s) section when Alert is limited to the Parent Project. Technically it seems that the template field subject.affectedProjects is empty, however, it is filled correctly when Limit to projects is removed from JIRA alert configuration.

Steps to Reproduce

1. Create a Parent project
2. Create Jira Alert with:
   • Publisher set to Jira
   • Scope set to PORTFOLIO
   • Group set to NEW_VULNERABILITY
   • limit to->Limit to projects set to Parent project
   • Notification Level set to INFORMATIONAL
   • Configure Destination and Jira ticket type

3. Create a Child project which is a child of Parent project
4. Upload sbom(With vulnerability) to Child project
5. Observe that created ticket in JIRA has an empty section Affected project(s) in the description

Expected Behavior

Created Ticket in JIRA should contain the Child project in the Affected project(s) section in the description.

Dependency-Track Version

4.8.2

Dependency-Track Distribution

Container Image

Database Server

PostgreSQL

Database Server Version

11.13.0

Browser

Other

Checklist

• [X] I have read and understand the contributing guidelines
• [X] I have checked the existing issues for whether this defect was already reported

[jovanz-getbgd]

Can confirm we are seeing the same behavior. Leaving the comment to bump the issue so the fix hopefully gets prioritized.

[lgrguricmileusnic]

Also detected same behaviour.

[rogu-beta]

This issue still appears in version 4.10.1. It would be great if child projects would be included in the listing. Our use case is to group different versions under a parent project so that notification for the parent can be sent to one corresponding Jira project. Hence, it is relevant to know which version / which child project is the one affected by the vulnerability.

Is there perhaps a workaround to access child projects in the template syntax?