/vulnerabilityAudit - "Show inactive projects" filter is inverted

[proteus-russ]

Current Behavior

If you select "Show inactive projects", it only shows active projects. If you unselect "Show inactive projects", it shows inactive projects.

Steps to Reproduce

1. Filter by "Show inactive projects" and you will see the inverse of the selection

Expected Behavior

If you select "Show inactive projects", it should show inactive projects. If you unselect "Show inactive projects", it should not show inactive projects.

Dependency-Track Version

4.11.3

Dependency-Track Distribution

Container Image

Database Server

PostgreSQL

Database Server Version

13.10

Browser

Google Chrome

Checklist

• [X] I have read and understand the contributing guidelines
• [X] I have checked the existing issues for whether this defect was already reported

[proteus-russ]

I think the same issue may exist at /vulnerabilityAudit/grouped as well.

[proteus-russ]

It looks like this is the bit that is off in FindingsSearchQueryManager#getAllFindings

if (showInactive) {
    queryFilter.append(" WHERE (\"PROJECT\".\"ACTIVE\" = :active OR \"PROJECT\".\"ACTIVE\" IS NULL)");
    params.put("active", true);
}

similar in getAllFindingsGroupedByVulnerability.

[github-actions[bot]]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.