Add source of discovery selection for internal vulnerabilities

src/App.vue

@@ -23,21 +23,34 @@
       }
     };
 
+    const preloadCustomizationIfAuthenticated = (jwt) => {
+      if (
+        jwt &&
+        this.$customization &&
+        typeof this.$customization.preloadAll === 'function'
+      ) {
+        this.$customization.preloadAll();
+      }
+    };
+
     EventBus.$on('authenticated', (jwt) => {
       if (jwt) {
         sessionStorage.setItem('token', jwt);
       } else {
         sessionStorage.removeItem('token');
       }
       setJwtForAjax(jwt);
+      preloadCustomizationIfAuthenticated(jwt);
     });
 
     // ensure $.ajaxSettings.headers exists
     $.ajaxSetup({
       headers: {},
     });
 
-    setJwtForAjax(getToken());
+    const existingToken = getToken();
+    setJwtForAjax(existingToken);
+    preloadCustomizationIfAuthenticated(existingToken);
 
     // Send XHR cross-site cookie credentials
     if (this.$api.WITH_CREDENTIALS) {
@@ -84,7 +97,7 @@
           error.response.headers['content-type'] === 'application/json' &&
           error.response.data &&
           Array.isArray(error.response.data) &&
           error.response.data[0].hasOwnProperty('invalidValue')
         ) {
           let validationError = error.response.data
             .map((failure) => `${failure.path}: ${failure.message}`)

src/i18n/locales/de.json

@@ -6,6 +6,7 @@
   },
   "admin": {
     "access_management": "Zugriffsverwaltung",
+    "add_source": "Add Source",
     "alert_created": "Alarm erstellt",
     "alert_deleted": "Alarm gelöscht",
     "alert_log_successful_publish": "Erfolgreiche Alarmierung protokollieren",
@@ -78,6 +79,7 @@
     "create_team": "Team erstellen",
     "create_template": "Vorlage erstellen",
     "create_user": "Benutzer erstellen",
+    "customization": "Customization",
     "default": "Standard",
     "default_language": "Standardsprache",
     "default_language_desc": "Standardsprache, die für alle verwendet wird, wenn sie keine angegeben haben. \nWenn dies deaktiviert ist, wird die Sprache des Browsers verwendet.",
@@ -251,7 +253,12 @@
     "select_project": "Projekt auswählen",
     "select_team": "Team auswählen",
     "select_team_as_recipient": "Team als Empfänger auswählen",
+    "show_source_of_discovery_badge": "Show Source of Discovery badge on the vulnerability page",
     "snyk": "Snyk (Beta)",
+    "source_label": "Source Label",
+    "source_label_duplicate": "A source with this name already exists. Please use a unique name.",
+    "source_of_discovery": "Source of Discovery",
+    "source_of_discovery_placeholder": "Select source...",
     "subject_identifier": "Betreffkennung",
     "submit": "Einreichen",
     "suspended": "Ausgesetzt",
@@ -294,6 +301,7 @@
     "username": "Benutzername",
     "vuln_sources": "Schwachstellenquellen",
     "vulndb": "VulnDB",
+    "vulnerability_sources_desc": "Configure the selectable sources of discovery for internal vulnerabilities. When enabled, a Source of Discovery dropdown is shown on the create and edit forms and a badge on the vulnerability page.",
     "vulnsource_alias_sync_enable": "Synchronisierung von Schwachstellenaliasen aktivieren",
     "vulnsource_alias_sync_enable_tooltip": "Alias-Daten können dabei helfen, identische Schwachstellen in mehreren Datenbanken zu identifizieren. Wenn die Quelle diese Daten bereitstellt, synchronisieren Sie sie mit der Datenbank von Dependency-Track.",
     "vulnsource_github_advisories_desc": "GitHub Advisories (GHSA) ist eine Datenbank mit CVEs und von GitHub stammenden Sicherheitshinweisen, die die Open-Source-Welt betreffen. Dependency-Track integriert sich in GHSA, indem Hinweise über die öffentliche GraphQL-API von GitHub gespiegelt werden. Der Spiegel wird täglich oder beim Neustart der Dependency-Track-Instanz aktualisiert. Zur Authentifizierung bei GitHub ist ein persönlicher Zugriffstoken (PAT) erforderlich, ihm müssen jedoch keine Bereiche zugewiesen werden.",

src/i18n/locales/en.json

@@ -6,6 +6,7 @@
   },
   "admin": {
     "access_management": "Access Management",
+    "add_source": "Add Source",
     "alert_created": "Alert created",
     "alert_deleted": "Alert deleted",
     "alert_log_successful_publish": "Log successful publish",
@@ -78,6 +79,7 @@
     "create_team": "Create Team",
     "create_template": "Create Template",
     "create_user": "Create User",
+    "customization": "Customization",
     "default": "Default",
     "default_language": "Default Language",
     "default_language_desc": "Default language, which is used for everyone, when they didn't specify one. Language from Browser will be used, when this is disabled.",
@@ -251,7 +253,12 @@
     "select_project": "Select Project",
     "select_team": "Select Team",
     "select_team_as_recipient": "Select team as recipient",
+    "show_source_of_discovery_badge": "Show Source of Discovery badge on the vulnerability page",
     "snyk": "Snyk (Beta)",
+    "source_label": "Source Label",
+    "source_label_duplicate": "A source with this name already exists. Please use a unique name.",
+    "source_of_discovery": "Source of Discovery",
+    "source_of_discovery_placeholder": "Select source...",
     "subject_identifier": "Subject Identifier",
     "submit": "Submit",
     "suspended": "Suspended",
@@ -294,6 +301,7 @@
     "username": "Username",
     "vuln_sources": "Vulnerability Sources",
     "vulndb": "VulnDB",
+    "vulnerability_sources_desc": "Configure the selectable sources of discovery for internal vulnerabilities. When enabled, a Source of Discovery dropdown is shown on the create and edit forms and a badge on the vulnerability page.",
     "vulnsource_alias_sync_enable": "Enable vulnerability alias synchronization",
     "vulnsource_alias_sync_enable_tooltip": "Alias data can help in identifying identical vulnerabilities across multiple databases. If the source provides this data, synchronize it with Dependency-Track's database.",
     "vulnsource_github_advisories_desc": "GitHub Advisories (GHSA) is a database of CVEs and GitHub-originated security advisories affecting the open source world. Dependency-Track integrates with GHSA by mirroring advisories via GitHub's public GraphQL API. The mirror is refreshed daily, or upon restart of the Dependency-Track instance. A personal access token (PAT) is required in order to authenticate with GitHub, but no scopes need to be assigned to it.",

src/i18n/locales/es.json

@@ -6,6 +6,7 @@
   },
   "admin": {
     "access_management": "Gestión de Acceso",
+    "add_source": "Add Source",
     "alert_created": "Alerta creada",
     "alert_deleted": "Alerta eliminada",
     "alert_log_successful_publish": "Registrar publicación exitosa",
@@ -78,6 +79,7 @@
     "create_team": "Crear equipo",
     "create_template": "Crear plantilla",
     "create_user": "Crear usuario",
+    "customization": "Customization",
     "default": "Por defecto",
     "default_language": "Idioma predeterminado",
     "default_language_desc": "Idioma predeterminado, que se usa para todos, cuando no especificaron uno. \nSe utilizará el idioma del navegador cuando esté deshabilitado.",
@@ -251,7 +253,12 @@
     "select_project": "Seleccionar Proyecto",
     "select_team": "Selecciona un equipo",
     "select_team_as_recipient": "Seleccionar equipo como destinatario",
+    "show_source_of_discovery_badge": "Show Source of Discovery badge on the vulnerability page",
     "snyk": "Snyk (Beta)",
+    "source_label": "Source Label",
+    "source_label_duplicate": "A source with this name already exists. Please use a unique name.",
+    "source_of_discovery": "Source of Discovery",
+    "source_of_discovery_placeholder": "Select source...",
     "subject_identifier": "Identificador de sujeto",
     "submit": "Entregar",
     "suspended": "Suspendido",
@@ -294,6 +301,7 @@
     "username": "Nombre de usuario",
     "vuln_sources": "Fuentes de vulnerabilidad",
     "vulndb": "VulnDB",
+    "vulnerability_sources_desc": "Configure the selectable sources of discovery for internal vulnerabilities. When enabled, a Source of Discovery dropdown is shown on the create and edit forms and a badge on the vulnerability page.",
     "vulnsource_alias_sync_enable": "Habilitar la sincronización de alias de vulnerabilidad",
     "vulnsource_alias_sync_enable_tooltip": "Los datos de alias pueden ayudar a identificar vulnerabilidades idénticas en múltiples bases de datos. Si la fuente proporciona estos datos, sincronícelos con la base de datos de Dependency-Track.",
     "vulnsource_github_advisories_desc": "GitHub Advisories (GHSA) es una base de datos de CVE y avisos de seguridad originados en GitHub que afectan al mundo del código abierto. Dependency-Track se integra con GHSA reflejando avisos a través de la API pública GraphQL de GitHub. El espejo se actualiza diariamente o al reiniciar la instancia de Dependency-Track. Se requiere un token de acceso personal (PAT) para autenticarse con GitHub, pero no es necesario asignarle ámbitos.",

src/i18n/locales/fr.json

@@ -6,6 +6,7 @@
   },
   "admin": {
     "access_management": "Gestion des accès",
+    "add_source": "Add Source",
     "alert_created": "Alerte créée",
     "alert_deleted": "Alerte supprimée",
     "alert_log_successful_publish": "Journaliser les publications réussies",
@@ -78,6 +79,7 @@
     "create_team": "Créer une équipe",
     "create_template": "Créer un modèle",
     "create_user": "Créer un utilisateur",
+    "customization": "Customization",
     "default": "Défaut",
     "default_language": "Langue par défaut",
     "default_language_desc": "Langue par défaut, qui est utilisée par tout le monde, lorsqu'ils n'en ont pas spécifié. \nLa langue du navigateur sera utilisée lorsqu'elle est désactivée.",
@@ -251,7 +253,12 @@
     "select_project": "Sélectionner un projet",
     "select_team": "Sélectionner une équipe",
     "select_team_as_recipient": "Sélectionner une équipe comme destinataire",
+    "show_source_of_discovery_badge": "Show Source of Discovery badge on the vulnerability page",
     "snyk": "Snyk (bêta)",
+    "source_label": "Source Label",
+    "source_label_duplicate": "A source with this name already exists. Please use a unique name.",
+    "source_of_discovery": "Source of Discovery",
+    "source_of_discovery_placeholder": "Select source...",
     "subject_identifier": "Identifiant du sujet",
     "submit": "Soumettre",
     "suspended": "Suspendu",
@@ -294,6 +301,7 @@
     "username": "Nom d'utilisateur",
     "vuln_sources": "Sources de vulnérabilité",
     "vulndb": "VulnDB",
+    "vulnerability_sources_desc": "Configure the selectable sources of discovery for internal vulnerabilities. When enabled, a Source of Discovery dropdown is shown on the create and edit forms and a badge on the vulnerability page.",
     "vulnsource_alias_sync_enable": "Activer la synchronisation des alias de vulnérabilité",
     "vulnsource_alias_sync_enable_tooltip": "Les données d'alias peuvent aider à identifier des vulnérabilités identiques dans plusieurs bases de données. Si la source fournit ces données, synchronisez-les avec la base de données de Dependency-Track.",
     "vulnsource_github_advisories_desc": "GitHub Advisories (GHSA) est une base de données de CVE et d'avis de sécurité provenant de GitHub affectant le monde open source. Dependency-Track s'intègre à GHSA en reflétant les avis via l'API publique GraphQL de GitHub. Le miroir est actualisé quotidiennement ou au redémarrage de l'instance Dependency-Track. Un jeton d'accès personnel (PAT) est requis pour s'authentifier auprès de GitHub, mais aucun périmètre ne doit lui être attribuée.",

src/i18n/locales/hi.json

@@ -6,6 +6,7 @@
   },
   "admin": {
     "access_management": "उपयोग प्रबंधन",
+    "add_source": "Add Source",
     "alert_created": "अलर्ट बनाया गया",
     "alert_deleted": "अलर्ट हटा दिया गया",
     "alert_log_successful_publish": "लॉग सफल प्रकाशन",
@@ -78,6 +79,7 @@
     "create_team": "टीम बनाएं",
     "create_template": "टेम्पलेट बनाएं",
     "create_user": "उपयोगकर्ता बनाइये",
+    "customization": "Customization",
     "default": "गलती करना",
     "default_language": "डिफ़ॉल्ट भाषा",
     "default_language_desc": "डिफ़ॉल्ट भाषा, जिसका उपयोग सभी के लिए किया जाता है, जब उन्होंने किसी एक को निर्दिष्ट नहीं किया हो। \nइसे अक्षम करने पर ब्राउज़र से लैंग्वेज का उपयोग किया जाएगा।",
@@ -251,7 +253,12 @@
     "select_project": "प्रोजेक्ट चुनें",
     "select_team": "टीम का चयन",
     "select_team_as_recipient": "प्राप्तकर्ता के रूप में टीम का चयन करें",
+    "show_source_of_discovery_badge": "Show Source of Discovery badge on the vulnerability page",
     "snyk": "स्निक (बीटा)",
+    "source_label": "Source Label",
+    "source_label_duplicate": "A source with this name already exists. Please use a unique name.",
+    "source_of_discovery": "Source of Discovery",
+    "source_of_discovery_placeholder": "Select source...",
     "subject_identifier": "विषय पहचानकर्ता",
     "submit": "जमा करना",
     "suspended": "निलंबित",
@@ -294,6 +301,7 @@
     "username": "उपयोगकर्ता नाम",
     "vuln_sources": "भेद्यता स्रोत",
     "vulndb": "वुल्नडीबी",
+    "vulnerability_sources_desc": "Configure the selectable sources of discovery for internal vulnerabilities. When enabled, a Source of Discovery dropdown is shown on the create and edit forms and a badge on the vulnerability page.",
     "vulnsource_alias_sync_enable": "भेद्यता उपनाम सिंक्रनाइज़ेशन सक्षम करें",
     "vulnsource_alias_sync_enable_tooltip": "उपनाम डेटा कई डेटाबेस में समान कमजोरियों की पहचान करने में मदद कर सकता है। यदि स्रोत यह डेटा प्रदान करता है, तो इसे डिपेंडेंसी-ट्रैक के डेटाबेस के साथ सिंक्रनाइज़ करें।",
     "vulnsource_github_advisories_desc": "GitHub एडवाइज़रीज (GHSA) CVE और GitHub द्वारा उत्पन्न सुरक्षा सलाह का एक डेटाबेस है जो ओपन सोर्स दुनिया को प्रभावित करता है। डिपेंडेंसी-ट्रैक GitHub के सार्वजनिक GraphQL API के माध्यम से सलाह को मिरर करके GHSA के साथ एकीकृत होता है। मिरर को प्रतिदिन या डिपेंडेंसी-ट्रैक इंस्टेंस के पुनरारंभ होने पर रिफ्रेश किया जाता है। GitHub के साथ प्रमाणीकरण के लिए एक व्यक्तिगत एक्सेस टोकन (PAT) की आवश्यकता होती है, लेकिन इसके लिए कोई स्कोप असाइन करने की आवश्यकता नहीं होती है।",

src/i18n/locales/it.json

@@ -6,6 +6,7 @@
   },
   "admin": {
     "access_management": "gestione degli accessi",
+    "add_source": "Add Source",
     "alert_created": "Avviso creato",
     "alert_deleted": "Avviso eliminato",
     "alert_log_successful_publish": "Registra la pubblicazione riuscita",
@@ -78,6 +79,7 @@
     "create_team": "Crea squadra",
     "create_template": "Crea modello",
     "create_user": "Creare un utente",
+    "customization": "Customization",
     "default": "Predefinito",
     "default_language": "Lingua predefinita",
     "default_language_desc": "Lingua predefinita, utilizzata da tutti quando non ne è stata specificata una. \nQuando questa opzione è disabilitata, verrà utilizzata la lingua del browser.",
@@ -251,7 +253,12 @@
     "select_project": "Seleziona Progetto",
     "select_team": "Selezionare squadra",
     "select_team_as_recipient": "Seleziona la squadra come destinatario",
+    "show_source_of_discovery_badge": "Show Source of Discovery badge on the vulnerability page",
     "snyk": "Snyk (Beta)",
+    "source_label": "Source Label",
+    "source_label_duplicate": "A source with this name already exists. Please use a unique name.",
+    "source_of_discovery": "Source of Discovery",
+    "source_of_discovery_placeholder": "Select source...",
     "subject_identifier": "Identificatore del soggetto",
     "submit": "Invia",
     "suspended": "Sospeso",
@@ -294,6 +301,7 @@
     "username": "Nome utente",
     "vuln_sources": "Fonti di vulnerabilità",
     "vulndb": "VulnDB",
+    "vulnerability_sources_desc": "Configure the selectable sources of discovery for internal vulnerabilities. When enabled, a Source of Discovery dropdown is shown on the create and edit forms and a badge on the vulnerability page.",
     "vulnsource_alias_sync_enable": "Abilita la sincronizzazione degli alias di vulnerabilità",
     "vulnsource_alias_sync_enable_tooltip": "I dati alias possono aiutare a identificare vulnerabilità identiche su più database. Se la fonte fornisce questi dati, sincronizzali con il database di Dependency-Track.",
     "vulnsource_github_advisories_desc": "GitHub Advisories (GHSA) è un database di CVE e avvisi di sicurezza originati da GitHub che interessano il mondo open source. Dependency-Track si integra con GHSA eseguendo il mirroring degli avvisi tramite l'API GraphQL pubblica di GitHub. Il mirror viene aggiornato quotidianamente o al riavvio dell'istanza Dependency-Track. Per eseguire l'autenticazione con GitHub è necessario un token di accesso personale (PAT), ma non è necessario assegnargli alcun ambito.",