Viewing security issues

Filtering security issues

In the Security issues section, as well as within issues for an individual project, you can filter the issue list to manage issues more easily.

You can filter issues by the following parameters:

1. General parameters:
   • Category—the security issue category name;
   • Severity—the security issue severity level;
   • Exploitability—the security issue exploitability level;
   • Status—the security issue status;
   • Assignee—users or user groups assigned as assignees;
   • Created—the date when the security issue was detected and created in the system;
   • Last detection—the date when the security issue was last detected.
2. Location:
   • Project—the name of the project that contains the security issues;
   • Layer type—the layer type within the project;
   • Layer—project layers and their nested layers.
3. Tagged issues:
   • AI false-positive analysis—security issues identified as false positives based on AI analysis;
   • Covered by a security rule—security issues covered by a security rule;
   • False positives—false-positive security issues;
   • Duplicates—duplicate vulnerabilities.
4. CVSS:
   • CVSS v.2;
   • CVSS v.3x;
   • CVSS v.4;
5. Detection:
   • Tool—the name of the vulnerability detection tool;
   • CWE—the CWE parameter name;
   • CVE—the CVE parameter name.
6. Code:
   • Library name—the library name;
   • Library version—the library version;
   • Source—the name of the scanned object;
   • Source branch/tag—the branch or tag of the scan source;
   • File—the name of the file that contains the source code;
   • Matching code—the source code contained in the security issue.
7. Comments:
   • Text content—the text contained in comments on security issues;
   • Authors—comment authors;
   • Number of authors—the number of authors of comments on security issues;
   • Unread comments—unread comments that mention the user;
   • Last comment by another author—the latest comment from another user;
   • No comments by me—security issues without comments from the current user;
   • I was replied to—contains replies to the current user's comments;
   • I was mentioned—the current user was mentioned in comments.

Creating filter presets

System users can use previously configured filter presets, add new presets, or reset them.

caution

The system limits personal presets to 10 per user.

To create a preset, follow these steps:

1. Go to the Security issues section.

2. Select the filter icon.

3. In the form that opens, set the required filter values.

4. Select Save as preset.

5. Enter the following preset parameters:

   • Name;
   • Access (personal/shared).
   tip

   When you select shared access, you must also add the user group that will use the preset in the required Group field.

6. Select Save.