Files
git.stella-ops.org/docs/features/unchecked/web/vex-trust-column-in-findings-and-triage-lists.md

1.4 KiB

VEX Trust Column in Findings and Triage Lists

Module

Web

Status

IMPLEMENTED

Description

New sortable Trust column added to findings-list and triage-list grids. Shows a VexTrustChipComponent with color-coded confidence level (high/medium/low/unknown) and a VexTrustPopoverComponent on hover with detailed breakdown of issuer trust, statement quality, and coverage scores. Includes Storybook stories for design documentation.

Implementation Details

  • Feature directory: src/Web/StellaOps.Web/src/app/shared/components/vex-trust-chip/
  • Components:
    • vex-trust-chip (src/Web/StellaOps.Web/src/app/shared/components/vex-trust-chip/vex-trust-chip.component.ts)
  • Source: SPRINT_1227_0004_0002_FE_trust_column.md

E2E Test Plan

  • Setup:
    • Log in with a user that has appropriate permissions
    • Navigate to the relevant page/section where this feature appears
    • Ensure test data exists (scanned artifacts, SBOM data, or seed data as needed)
  • Core verification:
    • Verify the triage list loads with findings/items to review
    • Verify triaging actions (accept, dismiss, override) update item status
    • Verify keyboard shortcuts work for rapid triage navigation
  • Edge cases:
    • Verify graceful handling when backend API is unavailable (error state)
    • Verify responsive layout at different viewport sizes
    • Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)