Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow metrics filtering based on IQ "stage" #117

Open
PayBas opened this issue Jun 29, 2023 · 2 comments
Open

Allow metrics filtering based on IQ "stage" #117

PayBas opened this issue Jun 29, 2023 · 2 comments

Comments

@PayBas
Copy link

PayBas commented Jun 29, 2023

One of the main reasons why we never use the success metrics, is because there is no way to scope/limit the results to a particular (set of) Nexus IQ stage(s).

In our organization we use very different scan patterns for Source/Build/Stage-Release/Release, since the analysis focus of each stage is different. For (Stage-)Release we are only interested in "production" dependencies, whereas in earlier stages we are also interested in test/dev dependencies (for LCM).

So in our case, the "Source" stage is incredibly noisy with vulnerabilities, because it contains just about every library we use for absolutely everything.
For our success metrics, we are primarily interested in our "production" dependencies, but since we cannot filter by stage, the succes metrics always look terrible and can swing wildly over time.

We would very much appreciate a way to filter the "Source" stage reports from our success metrics.

@rpanman-sonatype
Copy link
Collaborator

Hi @PayBas - I can certainly see a use case for that, unfortunately that's something that Sonatype Product Management would need to address (this is just an open source tool for viewing the metrics from the IQ product). There's a product improvement idea here which you could vote on, the more votes, the more traction an idea will get.

@OutOfDo
Copy link

OutOfDo commented Dec 20, 2023

I second this!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants