Skip to content

Commit

Permalink
Applied changes suggested in the review and added search scenarios.
Browse files Browse the repository at this point in the history
  • Loading branch information
vobratil committed Jan 17, 2025
1 parent e85ba2f commit a7cae26
Show file tree
Hide file tree
Showing 2 changed files with 64 additions and 22 deletions.
44 changes: 32 additions & 12 deletions tests/features/advisory-explorer.feature
Original file line number Diff line number Diff line change
Expand Up @@ -9,25 +9,46 @@ Background:
And User has successfully uploaded an advisory dataset

# Advisory Explorer
Scenario: Display an overview of all advisories
Scenario: Navigating to the Advisory Explorer page by selecting it from the list of all advisories
Given User is on the Home page
When User navigates to the Advisory Explorer page
Then The ID and Title of each advisory is visible on each row
And "Show more" button is visible for advisories with a long title
And Advisory metadata (Severity, Revision, Vulnerabilites) is visible on each row
And A context menu icon is visible on each row
When User clicks on the Search button in the menu
And User selects the Advisories tab
And User selects an advisory from the list
Then The Advisory Explorer page should display

Scenario: Navigating to the Advisory Explorer page by searching for it in the search bar
Given User is on the Home page
When User clicks on the Search textbox
And User enters the ID of an advisory
And User searches for the advisory
And User selects the advisory returned by the search
Then The Advisory Explorer page should display

Scenario: Navigating to the Advisory Explorer page by filtering advisories in the list of all advisories
Given User is on the Home page
When User clicks on the Search button in the menu
And User selects the Advisories tab
And User selects a filter
And User selects an advisory returned by the filter
Then The Advisory Explorer page should display

Scenario: Display an overview of an advisory
Given User is on the Home page
When User navigates to a Advisory Explorer page
Then The ID and description of the advisory should be visible
And "Show more" button should be visible for advisories with a long title
And Download button should be visible

Scenario: Download an advisory from the Advisory Explorer page
Given User is on the Home page
When User navigates to the Advisory Explorer page
And User clicks the Download button in the context menu of an advisory
And User clicks the Download button
Then The advisory should download as a JSON file

# Advisory Overview
Scenario: Display detailed information about a single advisory
Given User is on the Home page
When User navigates to the Advisory Explorer page
And User selects an advisory on the Advisory Explorer page
Then The Overview, Publisher, Tracking, References and Product Info panels should display
And The Product Info panel should display a list of impacted products
And The Product Info panel items should be collapsable
Expand All @@ -36,14 +57,13 @@ Scenario: Display detailed information about a single advisory
Scenario: Display notes about a single advisory
Given User is on the Home page
When User navigates to the Advisory Explorer page
And User selects an advisory on the Advisory Explorer page
And User navigates to the Notes tab on the Advisory Overview page
Then All notes on an advisory should display

# Advisory Vulnerabilities
Scenario: Display vulnerabilities tied to a single advisory
Given User is on the Home page
When User selects an advisory on the Advisory Explorer page
When User navigates to the Advisory Explorer page
And User navigates to the Vulnerabilites tab on the Advisory Overview page
Then A list of all active vulnerabilites tied to the advisory should display
And The ID, Title, Discovery, Release, Score and CWE information should be visible for each vulnerability
Expand All @@ -52,9 +72,9 @@ Scenario: Display vulnerabilities tied to a single advisory

Scenario: Display detailed information about a single vulnerability tied to a single advisory
Given User is on the Home page
When User selects an advisory on the Advisory Explorer page
When User navigates to the Advisory Explorer page
And User navigates to the Vulnerabilites tab on the Advisory Overview page
And User expands the row of a selected vulnerability
Then A list of all affected products, separated by status, should display
And Each fixed product should display a link to a remediation
And Each product should display a link to a remediation
And All notes on a vulnerability should be displayed underneath the list of products
42 changes: 32 additions & 10 deletions tests/features/vulnerability-explorer.feature
Original file line number Diff line number Diff line change
Expand Up @@ -9,41 +9,63 @@ Background:
And User has successfully uploaded an advisory dataset

# Vulnerabilities Explorer
Scenario: Display an overview of all vulnerabilities
Scenario: Navigating to the Vulnerability Explorer page by selecting it from the list of all vulnerabilities
Given User is on the Home page
When User clicks on the Search button in the menu
And User selects the Vulnerabilities tab
And User selects an Vulnerability from the list
Then The Vulnerability Explorer page should display

Scenario: Navigating to the Vulnerability Explorer page by searching for it in the search bar
Given User is on the Home page
When User clicks on the Search textbox
And User enters an ID of a Vulnerability
And User searches for the Vulnerability
And User selects the Vulnerability returned by the search
Then The Vulnerability Explorer page should display

Scenario: Navigating to the Vulnerability Explorer page by filtering vulnerabilities in the list of all vulnerabilities
Given User is on the Home page
When User clicks on the Search button in the menu
And User selects the Vulnerabilities tab
And User selects a filter
And User selects an Vulnerability returned by the filter
Then The Vulnerability Explorer page should display

Scenario: Display an overview of a vulnerability
Given User is on the Home page
When User navigates to the Vulnerabilities Explorer page
Then The ID and Title of each vulnerability is visible on each row
And "Show more" button is visible for vulnerabilities with a long title
And Advisory metadata (CVSS, Date published, Related documents) is visible on each row
And A context menu icon is visible on each row
Then CVE name, CVSS score and CVE description should be visible
And "Show more" button is visible for vulnerabilities with a long descriptions
And Advisory metadata (CVE name, Date published, Related documents) should be visible
And Download button should be visible

# This is how it's described in the User Stories document, but no such button actually appears in either the screenshot or the Trustify app
Scenario: Download a vulnerability CVE from the Vulnerability Explorer page
Given User is on the Home page
When User navigates to the Vulnerabilities Explorer page
And User clicks the Download button in the context menu of a vulnerability
And User clicks the Download button
Then The vulnerability CVE should download as a JSON file

# Vulnerability-related Products
Scenario: Display a list of products related to a single vulnerability
Given User is on the Home page
When User navigates to the Vulnerabilities Explorer page
And User selects a vulnerability
And User clicks on the Related Products tab
Then The Name, Version, Status, Dependencies, Supplier and Created On data is visible for each product
And The name of each product should be a link to the overview of a corresponding SBOM Overview page
And The dependencies column should be expandable

Scenario: Display a list of dependencies of a product related to a single vulnerability
Given User is on the Home page
When User navigates to the Vulnerabilities Explorer page
And User selects a vulnerability
And User clicks on the Related Products tab
And User clicks on the Dependencies column of a product
Then The Type, Namespace, Name, Version, Path, Qualifiers and Dependency tree position data should display for each dependency

# Vulnerability-related Advisories
Scenario: Display advisories tied to a single vulnerability
Given User is on the Home page
When User navigates to the Vulnerabilities Explorer page
And User then navigates to the Related Advisories tab
And User clicks on the Related Advisories tab
Then The ID, Title, Aggregated severity, Revision and Vulnerabilities data should display for each advisory tied to the vulnerability
And The ID should be a link a corresponding Advisory Overview page

0 comments on commit a7cae26

Please sign in to comment.