Show epss fields as columns in Vulnerability Audit view

[valentijnscholten]

Current Behavior

The Vulnerability Audit view shows all vulnerabilities, but there is no EPSS columns.

Proposed Behavior

Add an (optional?) column to display the EPSS values of a vulnerability. This will help when triaging / deduplication of vulnerablities.

I noticed the EPSS values are not yet present in the API response.

@rbt-mm Do you think this is feasible? It's been a while since I looked at the datamodel, so I am not sure. I am actually impressed that we can now finally sort on affectedProjects for vulnerabilities :-)

Checklist

• I have read and understand the contributing guidelines
• I have checked the existing issues for whether this enhancement was already requested

[rbt-mm]

As far as I remember, the EPSS values are already contained in the data of the vulnerabilities that the backend is sending to the Vulnerability Audit View. Atleast for the Vulnerabilities By Occurrence tab. So this column should be relatively easy to add in the frontend (adding sorting and filtering via EPSS may take some more time).

For the other tab, the Grouped Vulnerabilities, the EPSS values are currently not included in the data model, but this is something which should be possible to add by just copying and slightly adjusting the logic from the data model used for the other tab. Afterwards the values would just need to be added to the frontend as well.