search

trustification / trustify-ui

Trustify UI component.
2 stars 8 forks source link

Advisories list is confusing #87

Open ctron opened 2 months ago

ctron commented 2 months ago

The Vulnerabilities -> Advisories (Tab) feels confusing:

image

I see two advisories, with the same ID as the vulnerability. With different information.

Now I do know exactly why it has the same ID and different information. However, we should explain to the user that situation.

One way to deal with this could be to show the "source" of that information. We could e.g. add two badges: a type, and a source. Like type=cve, and type=csaf, source=redhat.com.

carlosthe19916 commented 1 month ago

Sounds like a good idea. We just don't have type nor source fields on each Vulnerability yet. But once they are available, that would be useful, I agree

gildub commented 1 month ago

@ctron, could you please detail why several vulnerabilities with same ID do exist ?

ctron commented 1 month ago

The ID isn't a system generated ID. But a user (document provider) provided piece of information. Naming an advisory after the CVE it describes seems a common pattern.