dependency-track

dependency-track copied to clipboard

### Current Behavior: When surpressing a vulnerability, a corresponding policy violation is not surpressed and needs to be surpressed manually too. ### Steps to Reproduce: 1. Create a policy targeting...

rkg-mm

Consider supporting generic vulnerability scanners

16

We currently support multiple sources of vulnerability intelligence, among them the NVD, OSS Index, GHSA and VulnDB. In some cases, we perform the actual vulnerability scanning (e.g. NVD, GHSA), in...

nscuro

Add Group ID or comments to groups in OIDC Groups

1

The enhancement may already be reported! Please search for the enhancement before creating one. ### Current Behavior: You have to use object-ID's to specify which groups you want, for example...

YurrytVermeire

Component update is broken

1

### Current Behavior: Currently hashes for some components are stored in uppercase format and it's accepted by UI  In case you need to update component API call is failing...

vmvarga

GitHub Advisories: Test Connection Button

2

### Current Behavior: GitHub Advisory mirroring is refreshed daily, or upon restart of the Dependency-Track instance. #1542 is currently scheduled for milestone 4.6 and will allow the user to configure...

msymons

BOM upload fails without feedback due to field max length

6

A BOM file that contains a component with a "publisher" field with more than 255 character fails due to the constraints of the field. However, there is no feedback or...

ecaisse

An unexpected error occurred performing a vulnerability analysis task

4

### Current Behavior: Loading an SBOM that used to process and find several hundreds of vulnerabilities, now fails to process and creates an error of 'An unexpected error occurred performing...

kbolander

Parallel analysis BomUploadProcessTask

2

### Current Behavior: Currently, everything works as an event. The problem is when I send X reviews (bom upload) at the same time, it starts to create events and send...

fuentecilla86

Issues with componets comments in Projects

1

### Current Behavior: In "Audit Vulnerabilities" tab of a project, when I set something in Comment textarea of a component, when I click on "Add Comment" the comment is erased...

amergey

stevespringett