diff --git a/doc/user/application_security/dependency_list/img/dependency_list_v12_10.png b/doc/user/application_security/dependency_list/img/dependency_list_v12_10.png new file mode 100644 index 0000000000000000000000000000000000000000..2755b42f1e4ecd32a0040d63bfead7cd1e7bfa3d Binary files /dev/null and b/doc/user/application_security/dependency_list/img/dependency_list_v12_10.png differ diff --git a/doc/user/application_security/dependency_list/index.md b/doc/user/application_security/dependency_list/index.md index b9c3b6521d6b6a7b5b5e23b7ce18a5e1625b9136..73d2cfeaf0066ea2e259e1fcab2a7a1ad266cd9f 100644 --- a/doc/user/application_security/dependency_list/index.md +++ b/doc/user/application_security/dependency_list/index.md @@ -17,32 +17,25 @@ sidebar. This information is sometimes referred to as a Software Bill of Materia ## Viewing dependencies -![Dependency List](img/dependency_list_v12_4.png) +![Dependency List](img/dependency_list_v12_10.png) Dependencies are displayed with the following information: | Field | Description | | --------- | ----------- | -| Status | Displays whether or not the dependency has any known vulnerabilities | -| Component | The dependency's name | -| Version | The exact locked version of the dependency your project uses | +| Component | The dependency's name and version | | Packager | The packager used to install the depedency | | Location | A link to the packager-specific lockfile in your project that declared the dependency | | License | Links to dependency's software licenses | -Dependencies shown are initially sorted by their names. They can also be sorted -by the packager they were installed by, or by the severity of their known -vulnerabilities. - -There is a second list under the `Vulnerable components` tab displaying only -those dependencies with known vulnerabilities. If there are none, this tab is -disabled. +Dependencies shown are initially sorted by the severity of their known vulnerabilities, if any. They +can also be sorted by name or by the packager that installed them. ### Vulnerabilities -If a dependency has known vulnerabilities, they can be viewed by clicking on the -`Status` cell of that dependency. The severity and description of each -vulnerability will then be displayed below it. +If a dependency has known vulnerabilities, you can view them by clicking the arrow next to the +dependency's name or the badge that indicates how many known vulnerabilities exist. For each +vulnerability, its severity and description then appears below it. ## Licenses diff --git a/ee/app/assets/javascripts/dependencies/components/dependencies_table.vue b/ee/app/assets/javascripts/dependencies/components/dependencies_table.vue index 43eb75057f1c8a940502c7c2114ff21ffd933cc8..d4b68e8cf1909a0ebbdfd84f9f8c2379aec57f27 100644 --- a/ee/app/assets/javascripts/dependencies/components/dependencies_table.vue +++ b/ee/app/assets/javascripts/dependencies/components/dependencies_table.vue @@ -93,6 +93,8 @@ export default {