Skip to content

Conversation

@hima700
Copy link

@hima700 hima700 commented Nov 6, 2025

No description provided.

…ll name; auto-enable filters

- src/app/shared/services/toast.service.ts: add showInfoToast(title, message).
- src/app/shared/components/toast/toast.component.html: bind [ngClass]="type" on header/body.
- src/app/shared/components/toast/toast.component.scss: info=green (#4CAF50), warning=amber (#FFC107), error=red (#F44336); lighter bodies.
- src/app/shared/services/sbom.service.ts: when adding by ID, ensure SetSBOMFormat(...) and SetSBOMSchema(...) are set to true; minor typing/index-signature fixes.
- src/app/features/upload/upload.component.html: search matches alias OR id; add title="{{ getAlias(item) }}" to show full filename on hover.
- src/app/features/upload/upload.component.ts: ClearSearch() re-enables all discovered formats/schemas so rows aren’t hidden after clearing search.

Result: clear success/error visuals, immediate visibility of newly added SBOMs, and more effective search by name or id.
ui: allow selecting an existing .zip to skip client-side zipping
SVIP.service.ts: uploadProject now passes through File if already a File
generate-modal.component.ts: add SELECTING_SOURCE state, SelectFolderAndZip(), OnZipFileSelected(); update flow to upload selected .zip directly and fetch OSI tools
generate-modal.component.html: add “Select Source” step with “Select folder and zip” and “Use existing .zip”
no backend changes required (POST /svip/generators/osi/project already accepts zipped project)
…efore-upload

service: comment passthrough, restore wrapper File('temp.zip')
modal.ts: comment pre-zipped state/handlers; keep original zip+upload flow
modal.html: retain placeholder; optional full UI preserved as commented block
- Add VulnerabilitiesComponent with real-time alert tracking
  - Display vulnerability metrics (total, critical, high severity)
  - Project-based filtering and trend analysis
  - Auto-refresh every 60 seconds
  - Cache-busting for project list synchronization
- Add VulnerabilityDetailsComponent for detailed CVE information
  - Show CVSS scores, vectors, affected packages, and suggested fixes
  - Implement severity filtering and search functionality
  - Deduplicate and sanitize advisory URLs (fix dead NodeSecurity links)
  - Export vulnerability data to CSV
- Add Security navigation button to upload component
- Add routing service pages for VULNERABILITIES and VULNERABILITY_DETAILS
- Fix Electron app startup by using dynamic import for zip-a-folder ES module
- Improve DTO parsing for SBOM content API responses
- Remove Angular template warnings for optional chaining operators

BREAKING CHANGE: Requires backend API endpoints at /svip/vulnerabilities/*
Added clickable stat cards for all severity levels (critical, high, medium, low, total) in the vulnerabilities dashboard, enabling users to filter and view vulnerabilities by severity. Updated routing to pass severity filters and project context between components. Improved styling for stat cards and alert cards to visually distinguish severity levels. The vulnerability details component now supports loading the latest SBOM for a project and applies severity filters when navigating from the dashboard, preserving project selection on navigation.
Refactored the zipDirectory handler in app.js to use archiver and stream-buffers for zipping, excluding node_modules and common build artifacts for faster processing. Added warnings when node_modules is detected and updated dependencies to include archiver and stream-buffers.
@hima700 hima700 force-pushed the feat/ui-redesign branch 2 times, most recently from 2c353c5 to 84c182c Compare November 21, 2025 00:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant