-
Notifications
You must be signed in to change notification settings - Fork 1.8k
Description
Bug description
In the Metrics dashboard, closed findings are shown/grouped according to the date the finding was initial discovered, not the date that it was closed/mitigated. So if a finding was discovered 2023/07/01 and closed on 2024/03/13, the "Closed Findings" metrics (both line chart and bar chart) are empty when choosing a date range of say 90 days, even though the finding was closed within that range. If the date range is changed to include the discovered/created date, the finding is included in the "Closed Findings" metrics.
This makes the Closed Findings metric inaccurate and mostly useless, as you can't see how many were closed within a given period unless the finding was created AND reported within the searched period.
Steps to reproduce
Steps to reproduce the behavior:
- Within a product, create a finding and set the Date to 2023/07/01
- Close the finding.
- In the product, go to Metrics. The default view won't show any closed findings in that period.
- Edit the filter and under Date, choose something like 90 days, which would definitely include the date (today) that the finding was closed. It will still show 0 closed findings.
- Edit the Date filter to include the creation date period (last year or any date). The closed finding metric will then be populated.
Expected behavior
The "Closed Findings" metric should include findings that were closed within the given Date filter/timeframe, instead of being based on the finding creation date.
Deployment method (select with an X)
- [X ] Docker Compose
- Kubernetes
- GoDojo