Viewing security issues

Filtering security issues

In the Security issues section, as well as within issues for an individual project, you can filter the list of issues to manage them more easily.

You can filter by the following parameters:

1. General parameters:
   • Category—the security issue category name;
   • Severity—the security issue severity level;
   • Exploitability—the security issue exploitability level;
   • Status—the security issue status;
   • Assignee—users or user groups assigned as assignees;
   • Created—the date the security issue was created in the system;
   • Last detection—the date the security issue was last detected.
2. Location:
   • Project—the name of the project that contains the security issues;
   • Layer type—the layer type within the project;
   • Layer—project layers and layers nested within them.
3. Tagged issues:
   • AI FP analysis—security issues identified as false positives based on AI analysis;
   • Covered by a security rule—security issues covered by a security rule;
   • False positives—false-positive security issues;
   • Duplicates—duplicate vulnerabilities.
4. CVSS:
   • CVSS v.2;
   • CVSS v.3x;
   • CVSS v.4;
   • CVSS v.?.
5. Detection:
   • Tool—the name of the vulnerability detection tool;
   • CWE—the CWE parameter name;
   • CVE—the CVE parameter name.
6. Code:
   • Library name—the library name;
   • Library version—the library version;
   • Source—the name of the scanned object;
   • Source branch/tag—the branch or tag of the scan source;
   • File—the name of the file that contains the source code;
   • Matching code—the source code contained in the security issue.
7. Comments:
   • Text content—the text contained in comments on security issues;
   • Authors—the comment authors;
   • Number of authors—the number of authors of comments on security issues;
   • Unread comments—unread comments that mention the user;
   • Last comment—from another author—the last comment from another user;
   • No comments from me—security issues with no comments from the current user;
   • I received a reply—contains replies to comments from the current user;
   • I was mentioned—the current user was mentioned in comments.

Creating filter presets

System users can use previously configured filter presets, add new presets, or reset them.

caution

The system limits personal presets—users can add up to 10 presets.

To create a preset, follow these steps:

1. Go to the Security issues section.

2. Select the filter icon.

3. In the form that opens, set the required filter values.

4. Select Save as preset.

5. Enter the following preset parameters:

   • Name;
   • Access (personal/shared).
   tip

   When you select shared access, you must also add the user group that will use the preset in the required Group field.

6. Select Save.