FE: Add filters and icon to Vulnearbility Report for vulnerabilities with policy violations
Why are we doing this work
This frontend component adds filtering capability to the Vulnerability Report to identify and display vulnerabilities that violate security policies. When policies are in warn mode, vulnerabilities that trigger policy violations need to be easily discoverable for security teams to assess policy impact and effectiveness.
Relevant links
Implementation
-
Add a new filter option "Policy Violations" to the existing Vulnerability Report filter dropdown~~ -
Create filter logic to query vulnerabilities that have associated policy violation metadata~~ -
Display policy violation indicator/badge on vulnerability entries that violate policies -
Add hover state or tooltip showing which specific policy was violated -
Update vulnerability counts to account for filter
Technical notes
- Requires backend support to track policy violation metadata on vulnerability records
- Should integrate with existing vulnerability report filtering system
- May need feature flag protection during initial rollout
- Compatible with warn mode functionality where policies generate violations without blocking merges
Validation Steps
Users can filter the vulnerability report to show only vulnerabilities that violate one or more security policies. When the filter is applied, the report displays vulnerabilities with clear visual indicators showing policy violations. Users can see which policy was violated and understand the relationship between detected vulnerabilities and their configured security policies.
Edited by Alexander Turinske