Nix-Security-WG / nix-security-tracker

Web service for managing information on vulnerabilities in software distributed through Nixpkgs
33 stars 8 forks source link

View an activity log #169

Open fricklerhandwerk opened 1 month ago

fricklerhandwerk commented 1 month ago

As a user of the tracker I want to be able to inspect the history of activity on a security issue (or, before a record is issued: a suggestion matching CVEs to packages), including who made a change and when it was made.

For example:

flowchart TD
    A[Matching suggestion created automatically] -->|"Select"| B[Suggestion under refinement]
    A -->|"Dismiss"| C[Dismissed suggestion]
    C -->|"Restore"| B
    B -->|"Create draft"| D[Issue draft]
    B --> |"Dismiss"| C

    style A fill:#e1f5fe
    style B fill:#fff3e0
    style C fill:#ffebee
    style D fill:#

The above only cover interactions with suggestions, and we currently haven't fully scoped out later workflows. Before an issue is published, the draft may get edited, with various structured modifications For reference, this is what could happen in the future:

Depends on:

fricklerhandwerk commented 4 days ago

Note: We may want the activity log only to show on a suggestion's detail view.

fricklerhandwerk commented 4 days ago

Here's a noncommittal sketch for reference, detailing the activity log of a matching suggestion:

image

erictapen commented 16 hours ago

@fricklerhandwerk and I discussed this:

tmp 25ioYUgVBB