Squashed commit of the following:

commit 1eaefe5 Merge: ed43676 e5da956 Author: Niklas <[email protected]> Date: Wed Sep 28 10:43:27 2022 +0200 Merge pull request DependencyTrack#262 from DependencyTrack/dependabot/github_actions/actions/setup-node-3.5.0 commit ed43676 Merge: f3b6a0c d33ce07 Author: Niklas <[email protected]> Date: Wed Sep 28 10:39:06 2022 +0200 Merge pull request DependencyTrack#261 from DependencyTrack/dependabot/docker/docker/nginxinc/nginx-unprivileged-de9ed41 commit f3b6a0c Merge: df995f5 2196f55 Author: Niklas <[email protected]> Date: Wed Sep 28 10:38:07 2022 +0200 Merge pull request DependencyTrack#259 from awegg/1948_cvss_on_components commit e5da956 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed Sep 28 01:37:44 2022 +0000 build(deps): bump actions/setup-node from 3.4.1 to 3.5.0 Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3.4.1 to 3.5.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v3.4.1...v3.5.0) --- updated-dependencies: - dependency-name: actions/setup-node dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> commit d33ce07 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue Sep 27 01:39:41 2022 +0000 build(deps): bump nginxinc/nginx-unprivileged in /docker Bumps nginxinc/nginx-unprivileged from `e916f63` to `de9ed41`. --- updated-dependencies: - dependency-name: nginxinc/nginx-unprivileged dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> commit 2196f55 Author: awegg <[email protected]> Date: Sun Sep 25 13:26:22 2022 +0200 Add CVSS, EPSS to Component Vulnerabilities Make more information available on the component vulnerability tab with default visibility false. Fixes DependencyTrack/dependency-track#1948 Signed-off-by: awegg <[email protected]>
sahibamittal · Oct 7, 2022 · d91c8c8 · d91c8c8
1 parent 4dfd59c
commit d91c8c8
Show file tree

Hide file tree

Showing 4 changed files with 29 additions and 4 deletions.
diff --git a/.github/workflows/_meta-build.yaml b/.github/workflows/_meta-build.yaml
@@ -36,7 +36,7 @@ jobs:
         uses: actions/[email protected]
 
       - name: Set up NodeJs
-        uses: actions/setup-node@v3.1.1
+        uses: actions/setup-node@v3.5.0
         with:
           node-version: ${{ matrix.node-version }}
           cache: 'npm'

diff --git a/.github/workflows/ci-release.yaml b/.github/workflows/ci-release.yaml
@@ -24,7 +24,7 @@ jobs:
         uses: actions/[email protected]
 
       - name: Set up NodeJs
-        uses: actions/setup-node@v3.4.1
+        uses: actions/setup-node@v3.5.0
         with:
           node-version: '16'
           cache: 'npm'

diff --git a/docker/Dockerfile.alpine b/docker/Dockerfile.alpine
@@ -1,4 +1,4 @@
-FROM nginxinc/nginx-unprivileged:1.23.1-alpine@sha256:e916f63adb8bf6b3b4238bcbadc5a3b2eb9761ca64c4fe6377b15183c4fcc27f
+FROM nginxinc/nginx-unprivileged:1.23.1-alpine@sha256:de9ed41efa9f99159144495ebcdbff5c4a2304b2184c124b9947da1a07b792ca
 
 # Arguments that can be passed at build time
 ARG COMMIT_SHA=unknown

diff --git a/src/views/portfolio/projects/ComponentVulnerabilities.vue b/src/views/portfolio/projects/ComponentVulnerabilities.vue
@@ -92,7 +92,32 @@
             formatter(value, row, index) {
               return value === true ? '<i class="fa fa-check-square-o" />' : "";
             },
-          }
+          },
+          {
+            title: this.$t('message.cvss'),
+            field: "cvssV3BaseScore",
+            sortable: true,
+            visible: false,
+            formatter(value, row, index) {
+              if (value && typeof value === 'number') {
+                return value.toFixed(1);
+              } else {
+                return null;
+              }
+            },
+          },
+          {
+            title: this.$t('message.epss'),
+            field: "epssScore",
+            sortable: true,
+            visible: false
+          },
+          {
+            title: this.$t('message.epss_percentile'),
+            field: "epssPercentile",
+            sortable: true,
+            visible: false
+          },
         ],
         data: [],
         options: {