Niklas

Note to self: Slightly related to #1682 as it involves calculation of metrics on-the-fly instead of relying on pre-calculated metrics.

The *Comment* textbox is not supposed to hold your comment after submission. Commenting is intended to be "fire and forget". Comments are not lost, as they're recorded in the audit...

More generally, this can be an architectural opportunity to decouple vulnerability detection from the API server. Even existing scanners like OSS Index could be decoupled in this way.

Thanks for the PR @Mvld3r! I agree that tag naming and searching should be streamlined. However, this will be a breaking change for folks who currently rely on case sensitivity....

Marked as enhancement b/c "handling withdrawn vulnerabilities" appears more like a feature than a defect. In any case, definitely something we should take into account.

Closing this issue as basic functionality has been shipped with 4.6. I raised some issues for further improvements and introduced the [vuln-aliases](https://github.com/DependencyTrack/dependency-track/labels/vuln-aliases) label to track them. I'll also throw some...

I think I posted this in Slack a while back already, but another good approach we can take is to [generate](https://github.com/OpenAPITools/openapi-generator) resource definitions (read: interfaces with all sorts of validation...

This is yet another area where different SSO providers have different behaviors. In Keycloak for example, there is no such thing as Group ID. So we can't make that additional...

Threw a quick POC together and migrated a few pages here: https://nscuro.github.io/dependency-track/4.6.0-SNAPSHOT/ Docs are automatically deployed using GitHub Actions: https://github.com/nscuro/dependency-track/blob/mkdocs/.github/workflows/deploy-docs.yml Using [`mike`](https://github.com/jimporter/mike), we can serve multiple versions of the documentation:...

Build failures are due to `InaccessibleObjectException`s in tests. This will be automatically resolved once https://github.com/stevespringett/Alpine/pull/410 is merged, which includes the necessary surefire arguments (https://github.com/stevespringett/Alpine/pull/410/commits/88b9762e9d170b12ac721baf2c0f6fb4dec5b5cd).