mercedes-benz / sechub-plugin-intellij

intellij plugin for sechub
MIT License
5 stars 4 forks source link

Idea: Handle false positives in reports in view #153

Open de-jcup opened 1 month ago

de-jcup commented 1 month ago

Situation

Loading a report in plugin again were we have already added a false positive via #130 , the report will show up the false positive entries again

Wanted

False positive handlings

Solution

Variant A: synch button

Provide button "sync with sechub server" - when having a connection to a sechub instance fetch false positive list and mark all entries from report being mentioned as false-positive in meta model so shown correctly inside view. This is interesting when an already partly reviewed/&handled report is loaded again in report view and developers want to see only non "true-positives"

Variant B: synch on report load

Every load of report asks the server for current project false positive config with meta data

Variant C: getReport with new false positive handling from server side

Like B, but the false positive filtering is done afterwards for the report again.