Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

"Outdated only" and "Direct only" buttons or disabled #3404

Closed
2 tasks done
visagansanthanam-unisys opened this issue Jan 23, 2024 · 3 comments · Fixed by DependencyTrack/frontend#725
Closed
2 tasks done
Labels
defect Something isn't working good first issue Good for newcomers p2 Non-critical bugs, and features that help organizations to identify and reduce risk
Milestone

Comments

@visagansanthanam-unisys

Current Behavior

The "Outdated only" & "Direct only" buttons are disabled in some projects and enabled in some other projects in the same instance of the dependency tracker. Below is the screenshot of a project where the buttons are disabled, even though there are outdated components listed

image

The issue is not consistent as some other projects in the same instance has the button working fine
image

Steps to Reproduce

  1. Navigate to the components tab in the projects
  2. Once the components are loaded check for "Outdated only" & "Direct only" toggle buttons.

Expected Behavior

"Outdated only" & "Direct only" toggle buttons should be enabled to filter the outdated components and also list only the direct dependencies.

Dependency-Track Version

4.10.1

Dependency-Track Distribution

Container Image

Database Server

PostgreSQL

Database Server Version

No response

Browser

Google Chrome

Checklist

@visagansanthanam-unisys visagansanthanam-unisys added defect Something isn't working in triage labels Jan 23, 2024
@dade-hms
Copy link

dade-hms commented Feb 2, 2024

We observe same behavior here. The difference seems to be that the one with deactivated icon was manually uploaded. One project was a json sbom uploaded using CURL to api and works properly
image
The other one was a xml uploaded using ui
image

@nscuro
Copy link
Member

nscuro commented Feb 2, 2024

The "Direct Only" toggle is only available when the project has a dependency graph, otherwise DT simply can not know which component is brought in directly vs. transitively.

The "Outdated Only" toggle should work even without dependency graph, so that is definitely a defect.

@nscuro nscuro added p2 Non-critical bugs, and features that help organizations to identify and reduce risk good first issue Good for newcomers and removed in triage labels Feb 2, 2024
nscuro added a commit to nscuro/dependency-track-frontend that referenced this issue Feb 3, 2024
@nscuro nscuro added this to the 4.11 milestone Feb 3, 2024
Copy link
Contributor

github-actions bot commented Mar 5, 2024

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Mar 5, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
defect Something isn't working good first issue Good for newcomers p2 Non-critical bugs, and features that help organizations to identify and reduce risk
Projects
None yet
3 participants