Failed fetching expanded findings

TRIMM / plugin-dependencytrack

Plugin for retrieving Dependencytrack metrics in Backstage

Apache License 2.0

16 stars 2 forks source link

Failed fetching expanded findings #98

Open mikkeschiren opened 1 month ago

mikkeschiren commented 1 month ago

I added the plugin to Backstage, and the "Dependencytrack Metrics" works fine, but for "Dependencytrack Findings" I am getting "Failed fetching expanded findings", it seems that the request against dependency track fails with "Unauthorized access attempt made by API Key ****"

ronaldtb commented 1 month ago

Can you check the API Key permissions underneath the Administration > Teams > [Team] section to make sure the API Key has permissions to retrieve the findings?

We ourselves have granted the following permissions to the Team for the API Key we are using:

BOM_UPLOAD
POLICY_VIOLATION_ANALYSIS
PROJECT_CREATION_UPLOAD
VIEW_POLICY_VIOLATION
VIEW_PORTFOLIO
VIEW_VULNERABILITY
VULNERABILITY_ANALYSIS

mikkeschiren commented 1 month ago

It seemed I was missing some of the suggested permissions, now on the other hand I am getting into a new issue after corrected the permissions, if I add that card, I am getting: "Missing required config value at 'dependencytrack.baseUrl' in 'app-config.yaml'" and "this.tableContainerDiv.current is null" - the config is there and the "Dependencytrack Metrics" works fine when I remove "Dependencytrack Findings". I wonder if I have something unrelated causing this, and will also update some packages, I come back to this after that.