splunk / github_app_for_splunk

A collection of dashboards and knowledge objects for Github data
MIT License
32 stars 25 forks source link

Dependabot Dashboard #32

Closed leftrightleft closed 2 years ago

leftrightleft commented 2 years ago

Is your feature request related to a problem? Please describe. No problem; related to a feature request. Would like to have a Dependabot finding dashboard similar to Code Scanning and Secret Scanning dashboards

Describe the solution you'd like A dashboard which populates the findings that were surfaced by Dependabot. Dependabot is an SCA tool which gives users visibility into vulnerabilities found in 3rd party open source packages. Providing an overview dashboard which illustrates the current status of Dependabot findings helps users understand their current security posture.

The dashboard should be filterable by org and repo. It should include a chart that shows counts of CVE (debatable). It should also contain a matrix of all findings related to the filters applied.

Please reference the Code Scanning and Secret Scanning dashboards to match the general user experience.