Correctly visualize "audit" and "non-fwd" categories

Open
#24 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
3/5
Estimated time
1-2 days
Newbie friendliness
62/100
Issue type
Bug
Clarity
Mostly clear
Activity status
Active
Tech stack
javascript
Domain
frontend

Research direction

Trace the visualization entry point that creates the current “untriaged” thread and inspect how category data is grouped for each PMC. Verify the existing audit and non-fwd handling and identify the relevant tests or fixtures to run. Done means audit results show only their open CVEs, while non-fwd reports appear at the bottom with accompanying text and no incorrect untriaged thread.

Written by the indexing model from the issue text.

Description

bug

The Security Team has two 'special' categories: "audit", i.e. findings that were part of a larger audit, such as a glasswing scan, and not part of 'regular' incoming reports) and "non-fwd" (reports that were 'held back' and not yet forwarded to the PMC, for example because the reporter has an exceptionally low success rate and we first want to coordinate with them on that).

For PMCs for which such a category exists, an incorrect 'untriaged' thread currently appears. We should correctly display this information:

  • for audit results, only give an overview of the open CVEs allocated as part of that audit
  • for non-fwd reports, show them at the bottom with accompanying text
Dominant language
JavaScript
Stars
0
Forks
6
Avg merge
1d 7h
Merged PRs (30d)
8

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from apache/security-dash

All issues in apache/security-dash

Similar issues

More JavaScript issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.