MixewayBackend icon indicating copy to clipboard operation
MixewayBackend copied to clipboard

Vulnerability History - extend to history of severities

Open siewer opened this issue 2 years ago • 0 comments

As is

Currently vulnerability trend chart is generated based on records in VulnHistory table.

This table is generated based on scheduler in GlobalScheduler.createHistoryForVulns()

to be

VulnHistory table to be extended -> to contain information about severities e.g.: codeVulnHistory to -> codeVulnHistory, codeVulnCriticalHistory, codeVulnHighHistory, codeVulnMediumHistory, codeVulnLowHistory (where codeVulnHistory = codeVulnCriticalHistory+codeVulnHighHistory+codeVulnMediumHistory+codeVulnLowHistory)

note: it is important that the overall (e.g. codeVulnHistory) still exists as it is used in many places by the frontend.

Additional: new API Endpoint that will print history for project with severities has to be created

To do

  • [ ] Create new columns in VulnHistory table (via changelog)
  • [ ] Modify createVulnHistoryService.createScheduled(project) to populate new columns
  • [ ] Create API endpoint in ProjectRestController that show history for project including information about severities
  • [ ] Create tests for newly created methods

siewer avatar Jul 17 '23 10:07 siewer