Skip to content

Implement Owasp Top 10 Search using Elastic Search on the FE

In order to facilitate Vulnerability Search by Owasp Top 10 identifiers, the Vulnerability Report will need to be updated to allow this as an additional search characteristic that the user can make use of, and the values provided as parameters to the vulnerabilities GraphQL query.

This may require some additional effort to get the list of Owasp Top 10 values that can be searchable. This could either be hard-coded to a list somewhere, or defined in a DB table. @bala.kumar may be able to provide recommendations here.

If we can't yet support this capability in Postgres, this setting should not be present when the Inherited NamespaceSetting for Vulnerability Advanced Search is not true.

Implementation Plan

  • frontend Accept a list of owasp_top_ten identifiers to search vulnerabilities by, provide it to the vulnerabilites GraphQL query.
Edited by Gregory Havenga