Skip to content

fedcode-next: Link from DejaCode to curate VCIO advisory and indicate curated advisory as special advisory #562

Closed
Closed
fedcode-next: Link from DejaCode to curate VCIO advisory and indicate curated advisory as special advisory#562
Assignees
tdruez

Description

@keshav-space
keshav-space
opened on Aug 18, 2026

Link from DejaCode to curate a VCIO problematic advisory

Use todo_count present in VCIO Advisory API response to indicate the number of problems associated with the advisory, and add a link to curate such advisory at https://<vulnerablecode>/advisories/todos/?avid=<advisory_uid>.

Integration of curated VCIO advisory as something special in DejaCode

Use curating_advisories in VCIO Advisory API response to indicate curated advisory as something special.

Activity

  1. keshav-space
    added a parent issue on Aug 18, 2026
  2. keshav-space
    added this to 00-AboutCodePlanneron Aug 18, 2026
  3. tdruez
    self-assigned this
    on Sep 24, 2026
  4. tdruez
    moved this to In progress in 00-AboutCodePlanneron Sep 24, 2026

  5. keshav-space commented on Sep 29, 2026

    @keshav-space
    keshav-space
    on Sep 29, 2026
    MemberAuthor

    @tdruez details about the newly introduced todo_count, is_curation, and curating_advisories are here: aboutcode-org/vulnerablecode#2405 (comment)

  6. tdruez
    added a commit that references this issue on Sep 30, 2026

    fedcode-next: Indicate curated advisory and link to curate on VCIO #562…

    926da1d

  7. tdruez commented on Sep 30, 2026

    @tdruez
    tdruez
    on Sep 30, 2026
    Contributor

    Implemented in:

    Changes

    • New is_curation, curating_advisories, and todo_count advisory fields
    • "Curated" badge with the list of curated advisories
    • "N ToDos" badge linking to VulnerableCode curation
    • Curation badges shown in the product tab, package/component tab, and global vulnerability list
    • Vulnerabilities tab: one collapsible card per package, with risk, "Fixed in", vulnerability and known exploit counts, and analysis progress
    • Fully analyzed packages collapsed by default, with "Expand all" / "Collapse all"
    • Summary shown under the vulnerability ID
    • Info icon opens a menu with clickable aliases and SSVC decision
    • Fixed "Not analyzed" filter: now matches partially analyzed packages
    • Docs updated
    • Tests added and updated

    Screens

    Screenshot 2026-09-29 at 16 11 44
    Screenshot 2026-09-29 at 16 11 52
    Screenshot 2026-09-29 at 16 12 06
    Screenshot 2026-09-29 at 16 12 20
    Screenshot 2026-09-29 at 16 12 41
    Screenshot 2026-09-29 at 16 12 47
  8. tdruez
    closed this as completedon Sep 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions