[Bug]: ui/vulnerabilities: how many vulnerabilities are there? can we get a summary by severity?

[mikemccracken]

zot version

v1.4.3

Describe the bug

the vulns list doesn't have a total count as far as I can tell, and it does dynamic scrolling so the scroll bar is no help.
How many am I looking at?

To reproduce

1. Configuration
2. Client tool used
3. Seen error

Expected behavior

there should be a way to know how many issues we are looking at and how many are of each severity

Screenshots

No response

Additional context

No response

[bennesp]

Shouldn't this has an impact also on the backend? I mean, results are currently paginated. As such, the frontend alone cannot show meaningful counters for each severity. Should we also think of changing the GetCVEListForImage graphql query?

[andaaron]

Ah, I missed the how many are of each severity in the description.
The total for all severities is already returned.

[mikemccracken]

where is the total for all severities? I just looked again at the internal aci-zot02 instance and don't see it.

[andaaron]

The information on the page returned in the request includes the total number of items as TotalCount.
See this example: https://github.com/project-zot/zot/blob/main/pkg/extensions/search/search.md#list-cves-of-given-image
The UI doesn't show it as far as I know.

[andaaron]

Backend side: #2131

[andaaron]

Shouldn't this has an impact also on the backend? I mean, results are currently paginated. As such, the frontend alone cannot show meaningful counters for each severity. Should we also think of changing the GetCVEListForImage graphql query?

I think it's better to update the existing ImageSummary property Vulnerabilities. Since we already have the maximum severity and total CVE count there as well. And that way we can show this data in other places except the CVE list (thinking the "tag" tiles under a repository, for example). We also make the Image query for the image details views, so we could reuse it in the vulnerabilities tab if needed.

[andaaron]

Done in project-zot/zui#416.
@mikemccracken please let us know your feedback.

[mikemccracken]

nice! this is a big improvement. I have a minor further request, I'll file it separately

[andaaron]

Let me close this one.