Skip to content

Commit 63243f9

Browse files
stevespringettstevespringett
committed
Added UI support for working with CycloneDX VEX data.
DependencyTrack/dependency-track#1365
1 parent 8c26335 commit 63243f9

File tree

3 files changed

+133
-10
lines changed

3 files changed

+133
-10
lines changed

‎src/i18n/locales/en.json‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -114,6 +114,7 @@
114114
"project_cloning_in_progress": "The project is being created with the cloning options specified",
115115
"vulnerability": "Vulnerability",
116116
"analysis": "Analysis",
117+
"justification": "Justification",
117118
"title": "Title",
118119
"subtitle": "Subtitle",
119120
"recommendation": "Recommendation",
@@ -129,10 +130,26 @@
129130
"approved": "Approved",
130131
"rejected": "Rejected",
131132
"not_set": "Not Set",
133+
"resolved": "Resolved",
132134
"exploitable": "Exploitable",
133135
"in_triage": "In Triage",
134136
"false_positive": "False Positive",
135137
"not_affected": "Not Affected",
138+
"code_not_present": "Code not present",
139+
"code_not_reachable": "Code not reachable",
140+
"requires_configuration": "Requires configuration",
141+
"requires_dependency": "Requires dependency",
142+
"requires_environment": "Requires environment",
143+
"protected_by_compiler": "Protected by compiler",
144+
"protected_at_runtime": "Protected at runtime",
145+
"protected_at_perimeter": "Protected at perimeter",
146+
"protected_by_mitigating_control": "Protected by mitigating control",
147+
"can_not_fix": "Can not fix",
148+
"will_not_fix": "Will not fix",
149+
"rollback": "Rollback",
150+
"workaround_available": "Workaround available",
151+
"response": "Vendor Response (project)",
152+
"analysis_details": "Details (explanation, workaround details, and other impact information)",
136153
"updated": "Updated",
137154
"add_component": "Add Component",
138155
"remove_component": "Remove Component",

‎src/shared/common.js‎

Lines changed: 55 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -118,22 +118,71 @@ $common.formatAnalyzerLabel = function formatAnalyzerLabel(analyzer, vulnId, alt
118118
};
119119

120120
/**
121-
*
121+
*
122122
* @param {*} i18n - VueI18n instance with $t translate function available
123-
* @returns a specialized label for an analysis state (NOT_SET, APPROVED, REJECTED, etc).
124-
* It must have a corresponding entry in the locales files (e.g. src/locales/en.json)
123+
* @returns a specialized label for an analysis state (NOT_SET, APPROVED, REJECTED, etc).
124+
* It must have a corresponding entry in the locales files (e.g. src/locales/en.json)
125125
* (not_set, approved, rejected, etc.)
126126
*/
127127
$common.makeAnalysisStateLabelFormatter = (i18n) => {
128128
return function (value) {
129129
switch (value) {
130130
case 'NOT_SET':
131-
case 'APPROVED':
132-
case 'REJECTED':
133131
case 'EXPLOITABLE':
134132
case 'IN_TRIAGE':
135133
case 'FALSE_POSITIVE':
136134
case 'NOT_AFFECTED':
135+
case 'RESOLVED':
136+
return i18n.$t(`message.${value.toLowerCase()}`)
137+
default:
138+
return null;
139+
}
140+
}
141+
};
142+
143+
/**
144+
*
145+
* @param {*} i18n - VueI18n instance with $t translate function available
146+
* @returns a specialized label for an analysis justification (CODE_NOT_REACHABLE, etc).
147+
* It must have a corresponding entry in the locales files (e.g. src/locales/en.json)
148+
* (code_not_reachable, etc.)
149+
*/
150+
$common.makeAnalysisJustificationLabelFormatter = (i18n) => {
151+
return function (value) {
152+
switch (value) {
153+
case 'NOT_SET':
154+
case 'CODE_NOT_PRESENT':
155+
case 'CODE_NOT_REACHABLE':
156+
case 'REQUIRES_CONFIGURATION':
157+
case 'REQUIRES_DEPENDENCY':
158+
case 'REQUIRES_ENVIRONMENT':
159+
case 'PROTECTED_BY_COMPILER':
160+
case 'PROTECTED_AT_RUNTIME':
161+
case 'PROTECTED_AT_PERIMETER':
162+
case 'PROTECTED_BY_MITIGATING_CONTROL':
163+
return i18n.$t(`message.${value.toLowerCase()}`)
164+
default:
165+
return null;
166+
}
167+
}
168+
};
169+
170+
/**
171+
*
172+
* @param {*} i18n - VueI18n instance with $t translate function available
173+
* @returns a specialized label for an analysis response (WILL_NOT_FIX, etc).
174+
* It must have a corresponding entry in the locales files (e.g. src/locales/en.json)
175+
* (will_not_fix, etc.)
176+
*/
177+
$common.makeAnalysisResponseLabelFormatter = (i18n) => {
178+
return function (value) {
179+
switch (value) {
180+
case 'NOT_SET':
181+
case 'CAN_NOT_FIX':
182+
case 'WILL_NOT_FIX':
183+
case 'UPDATE':
184+
case 'ROLLBACK':
185+
case 'WORKAROUND_AVAILABLE':
137186
return i18n.$t(`message.${value.toLowerCase()}`)
138187
default:
139188
return null;
@@ -241,6 +290,7 @@ module.exports = {
241290
formatCweLabel: $common.formatCweLabel,
242291
formatAnalyzerLabel: $common.formatAnalyzerLabel,
243292
makeAnalysisStateLabelFormatter: $common.makeAnalysisStateLabelFormatter,
293+
makeAnalysisJustificationLabelFormatter: $common.makeAnalysisJustificationLabelFormatter,
244294
formatTimestamp: $common.formatTimestamp,
245295
concatenateComponentName: $common.concatenateComponentName,
246296
valueWithDefault: $common.valueWithDefault,

‎src/views/portfolio/projects/ProjectFindings.vue‎

Lines changed: 61 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -195,6 +195,26 @@
195195
<bootstrap-toggle v-model="isSuppressed" :options="{ on: 'Suppressed', off: 'Suppress', onstyle: 'warning', offstyle: 'outline-disabled'}" :disabled="false" />
196196
</b-input-group>
197197
</b-form-group>
198+
<b-row>
199+
<b-col sm="6">
200+
<b-form-group id="fieldset-10" :label="this.$t('message.justification')" label-for="input-10">
201+
<b-input-group id="input-10">
202+
<b-form-select v-model="analysisJustification" :options="justificationChoices" @change="makeAnalysis" :disabled="analysisState !== 'NOT_AFFECTED'"/>
203+
</b-input-group>
204+
</b-form-group>
205+
</b-col>
206+
<b-col sm="6">
207+
<b-form-group id="fieldset-11" :label="this.$t('message.response')" label-for="input-11">
208+
<b-input-group id="input-11">
209+
<b-form-select v-model="analysisResponse" :options="responseChoices" @change="makeAnalysis"/>
210+
</b-input-group>
211+
</b-form-group>
212+
</b-col>
213+
</b-row>
214+
<b-form-group id="fieldset-12" :label="this.$t('message.details')" label-for="analysisDetailsField">
215+
<b-form-textarea id="analysisDetailsField" v-model="analysisDetails" rows="7" class="form-control"
216+
v-debounce:750ms="makeAnalysis" :debounce-events="'keyup'"/>
217+
</b-form-group>
198218
</b-col>
199219
</b-row>
200220
`,
@@ -208,17 +228,41 @@
208228
{ value: 'NOT_SET', text: this.$t('message.not_set') },
209229
{ value: 'EXPLOITABLE', text: this.$t('message.exploitable') },
210230
{ value: 'IN_TRIAGE', text: this.$t('message.in_triage') },
231+
{ value: 'RESOLVED', text: this.$t('message.resolved') },
211232
{ value: 'FALSE_POSITIVE', text: this.$t('message.false_positive') },
212-
{ value: 'NOT_AFFECTED', text: this.$t('message.not_affected') }
233+
{ value: 'NOT_AFFECTED', text: this.$t('message.not_affected') },
234+
],
235+
justificationChoices: [
236+
{ value: 'NOT_SET', text: this.$t('message.not_set') },
237+
{ value: 'CODE_NOT_PRESENT', text: this.$t('message.code_not_present') },
238+
{ value: 'CODE_NOT_REACHABLE', text: this.$t('message.code_not_reachable') },
239+
{ value: 'REQUIRES_CONFIGURATION', text: this.$t('message.requires_configuration') },
240+
{ value: 'REQUIRES_DEPENDENCY', text: this.$t('message.requires_dependency') },
241+
{ value: 'REQUIRES_ENVIRONMENT', text: this.$t('message.requires_environment') },
242+
{ value: 'PROTECTED_BY_COMPILER', text: this.$t('message.protected_by_compiler') },
243+
{ value: 'PROTECTED_AT_RUNTIME', text: this.$t('message.protected_at_runtime') },
244+
{ value: 'PROTECTED_AT_PERIMETER', text: this.$t('message.protected_at_perimeter') },
245+
{ value: 'PROTECTED_BY_MITIGATING_CONTROL', text: this.$t('message.protected_by_mitigating_control') }
246+
],
247+
responseChoices: [
248+
{ value: 'NOT_SET', text: this.$t('message.not_set') },
249+
{ value: 'CAN_NOT_FIX', text: this.$t('message.can_not_fix') },
250+
{ value: 'WILL_NOT_FIX', text: this.$t('message.will_not_fix') },
251+
{ value: 'UPDATE', text: this.$t('message.update') },
252+
{ value: 'ROLLBACK', text: this.$t('message.rollback') },
253+
{ value: 'WORKAROUND_AVAILABLE', text: this.$t('message.workaround_available') }
213254
],
214255
analysisState: null,
256+
analysisJustification: null,
257+
analysisResponse: null,
258+
analysisDetails: null,
215259
projectUuid: projectUuid
216260
}
217261
},
218262
watch: {
219263
isSuppressed: function (currentValue, oldValue) {
220264
if (oldValue != null) {
221-
this.callRestEndpoint(this.analysisState, null, currentValue);
265+
this.callRestEndpoint(this.analysisState, null, null, null, null, currentValue);
222266
}
223267
}
224268
},
@@ -247,27 +291,39 @@
247291
if (Object.prototype.hasOwnProperty.call(analysis, "analysisState")) {
248292
this.analysisState = analysis.analysisState;
249293
}
294+
if (Object.prototype.hasOwnProperty.call(analysis, "analysisJustification")) {
295+
this.analysisJustification = analysis.analysisJustification;
296+
}
297+
if (Object.prototype.hasOwnProperty.call(analysis, "analysisResponse")) {
298+
this.analysisResponse = analysis.analysisResponse;
299+
}
300+
if (Object.prototype.hasOwnProperty.call(analysis, "analysisDetails")) {
301+
this.analysisDetails = analysis.analysisDetails;
302+
}
250303
if (Object.prototype.hasOwnProperty.call(analysis, "isSuppressed")) {
251304
this.isSuppressed = analysis.isSuppressed;
252305
} else {
253306
this.isSuppressed = false;
254307
}
255308
},
256309
makeAnalysis: function() {
257-
this.callRestEndpoint(this.analysisState, null, null);
310+
this.callRestEndpoint(this.analysisState, this.analysisJustification, this.analysisResponse, this.analysisDetails, null, null);
258311
},
259312
addComment: function() {
260313
if (this.comment != null) {
261-
this.callRestEndpoint(this.analysisState, this.comment, null);
314+
this.callRestEndpoint(this.analysisState, this.analysisJustification, this.analysisResponse, this.analysisDetails, this.comment, null);
262315
}
263316
},
264-
callRestEndpoint: function(analysisState, comment, isSuppressed) {
317+
callRestEndpoint: function(analysisState, analysisJustification, analysisResponse, analysisDetails, comment, isSuppressed) {
265318
let url = `${this.$api.BASE_URL}/${this.$api.URL_ANALYSIS}`;
266319
this.axios.put(url, {
267320
project: projectUuid,
268321
component: this.finding.component.uuid,
269322
vulnerability: this.finding.vulnerability.uuid,
270323
analysisState: analysisState,
324+
analysisJustification: analysisJustification,
325+
analysisResponse: analysisResponse,
326+
analysisDetails: analysisDetails,
271327
comment: comment,
272328
isSuppressed: isSuppressed
273329
}).then((response) => {

0 commit comments

Comments
 (0)