Ensure we sort all vulnerabilities by Severity then Confidence
Description
To help users handle the vulnerabilities more efficiently we need to sort them by Severity and then Confidence when doable.
Proposal
As Security Reports are generated in different ways the implementation will vary:
- SAST: implement the sort in the sast project and also in the common library (for standalone usage)
- Dependency Scanning: implement the sort in the dependency scanning project
-
Container Scanning: implement the sort in the front end until we have our own intermediate layer. NB: There is no
Confidenceproperty provided by Container Scanning, we'll sort onSeverityonly. - DAST: implement the sort in the front end until we have our own intermediate layer
Implementation Plan
-
Sort all vulnerabilities by Severity then Confidence for dashboard and Pipeline views #34114 (closed) -
Sort all vulnerabilities by Severity then Confidence for MR widget #34115 (closed)
Edited by Olivier Gonzalez