Skip to content

Show if additional vulnerability identifiers available from vulnerability list view

User experience goal

This piece was split from #210327 (closed)

For the Identifier column on the vulnerability list, if there is more than one identifier associated with a given vulnerability, show + X more below the primary identifier.

Proposal

If a vulnerability has multiple identifiers:

  • If a CVE is present, show that CVE identifier first as it should be both the most commonly recognized and most specific.
  • If no CVE, go with whatever identifier is first in the array.
  • Also show the count of other identifiers as pictured here:

Documentation

The Pipeline and Project-level dashboard screenshots will need to be updated: https://docs.gitlab.com/ee/user/application_security/security_dashboard/

Implementation Plan

  • frontend on the project security dashboard, if there is more than one identifier, show + X more below the primary identifier in the identifier column
  • frontend on the pipeline security tab, if there is more than one identifier, show + X more below the primary identifier in the identifier column
Edited by Alexander Turinske