DependencyTrack / dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
https://dependencytrack.org/
Apache License 2.0
2.71k stars 580 forks source link

GitHub Advisory Mirroring task triggers too many notifications #4400

Open antoinbo opened 3 days ago

antoinbo commented 3 days ago

Current Behavior

With system informational data-source mirroring notifications enabled. When GitHub Advisories are mirrored, a couple hundred of notifications are sent.

Steps to Reproduce

Not tested, but I guess:

  1. Configure notifications for
  2. Configure and Enable GitHub Advisories Mirroring

Investigation: method retrieveAdvisories is called recursively, dispatching multiple notifications.

Expected Behavior

Only one notification is sent when the GitHub Advisory Mirroring task is executed.

Dependency-Track Version

4.12.1

Dependency-Track Distribution

Container Image

Database Server

Microsoft SQL Server

Database Server Version

No response

Browser

Microsoft Edge

Checklist