Merge pull request #189 from officerNordberg/feature/fuzzy-matching-configuration

Add Fuzzy Config to frontend

Author: nscuro

src/i18n/locales/en.json

@@ -439,6 +439,9 @@
     "internal_identification_queued": "Internal component identification queued",
     "internal_identification_error": "An error occurred queueing internal component identification. Check server logs for details",
     "analyzer_internal_enable": "Enable internal analyzer",
+    "analyzer_internal_fuzzy_enable": "Enable fuzzy CPE matching. Helps with inconsistent NVD data, highlighting missing risks but also increasing false positives",
+    "analyzer_internal_fuzzy_exclude_purl": "Enable fuzzy CPE matching on components that have a Package URL (PURL) defined",
+    "analyzer_internal_fuzzy_exclude_internal": "Enable fuzzy CPE matching on internal components",
     "analyzer_internal_desc": "The internal analyzer evaluates components against an internal vulnerability database derived from the National Vulnerability Database, GitHub Advisories (if enabled) and VulnDB (if enabled). This analyzer makes use of the Common Platform Enumeration (CPE) defined in components. Components with a valid CPE will be evaluated with this analyzer.",
     "analyzer_ossindex_enable": "Enable OSS Index analyzer",
     "analyzer_ossindex_desc": "OSS Index is a service provided by Sonatype which identifies vulnerabilities in third-party components. Dependency-Track integrates natively with the OSS Index service to provide highly accurate results. Use of this analyzer requires a valid PackageURL for the components being analyzed.",

src/views/administration/analyzers/InternalAnalyzer.vue

@@ -2,12 +2,12 @@
   <b-card no-body :header="header">
     <b-card-body>
       <c-switch id="scannerEnabled" color="primary" v-model="scannerEnabled" label v-bind="labelIcon" />{{$t('admin.analyzer_internal_enable')}}
-      <!--
       <br/>
       <c-switch id="scannerCpeFuzzyEnableInput" color="primary" v-model="scannerCpeFuzzyEnableInput" label v-bind="labelIcon" />{{$t('admin.analyzer_internal_fuzzy_enable')}}
       <br/>
       <c-switch id="scannerCpeFuzzyExcludePurlInput" color="primary" v-model="scannerCpeFuzzyExcludePurlInput" label v-bind="labelIcon" />{{$t('admin.analyzer_internal_fuzzy_exclude_purl')}}
-      -->
+      <br/>
+      <c-switch id="scannerCpeFuzzyExcludeInternalInput" color="primary" v-model="scannerCpeFuzzyExcludeInternalInput" label v-bind="labelIcon" />{{$t('admin.analyzer_internal_fuzzy_exclude_internal')}}
       <hr/>
       {{ $t('admin.analyzer_internal_desc') }}
     </b-card-body>
@@ -34,7 +34,8 @@
       return {
         scannerEnabled: false,
         scannerCpeFuzzyEnableInput: false,
-        scannerCpeFuzzyExcludePurlInput: false,
+        scannerCpeFuzzyExcludePurlInput: true,
+        scannerCpeFuzzyExcludeInternalInput: true,
         labelIcon: {
           dataOn: '\u2713',
           dataOff: '\u2715'
@@ -44,11 +45,15 @@
     methods: {
       saveChanges: function() {
         this.updateConfigProperties([
-          {groupName: 'scanner', propertyName: 'internal.enabled', propertyValue: this.scannerEnabled}
-          // TODO: Future
-          // {groupName: 'scanner', propertyName: 'internal.fuzzy.enabled', propertyValue: this.fuzzyEnabled}
-          // {groupName: 'scanner', propertyName: 'internal.fuzzy.exclude.purl', propertyValue: this.fuzzyExcludePurl}
+          {groupName: 'scanner', propertyName: 'internal.enabled', propertyValue: this.scannerEnabled},
+          {groupName: 'scanner', propertyName: 'internal.fuzzy.enabled', propertyValue: this.scannerCpeFuzzyEnableInput},
+          {groupName: 'scanner', propertyName: 'internal.fuzzy.exclude.purl', propertyValue: !this.scannerCpeFuzzyEnableInput || !this.scannerCpeFuzzyExcludePurlInput},
+          {groupName: 'scanner', propertyName: 'internal.fuzzy.exclude.internal', propertyValue: !this.scannerCpeFuzzyEnableInput || !this.scannerCpeFuzzyExcludeInternalInput}
         ]);
+        if (!this.scannerCpeFuzzyEnableInput){
+          this.scannerCpeFuzzyExcludePurlInput = false;
+          this.scannerCpeFuzzyExcludeInternalInput = false;
+        }
       }
     },
     created () {
@@ -62,7 +67,9 @@
             case "internal.fuzzy.enabled":
               this.scannerCpeFuzzyEnableInput = common.toBoolean(item.propertyValue); break;
             case "internal.fuzzy.exclude.purl":
-              this.scannerCpeFuzzyExcludePurlInput = common.toBoolean(item.propertyValue); break;
+              this.scannerCpeFuzzyExcludePurlInput = !common.toBoolean(item.propertyValue); break;
+            case "internal.fuzzy.exclude.internal":
+              this.scannerCpeFuzzyExcludeInternalInput = !common.toBoolean(item.propertyValue); break;
           }
         }
       });