PDF Report how to interpret read the monthly graph for portfolio security vulnerabilities

SonarQube Server / Community Build
1

Must-share information (formatted with Markdown):

  • which versions are you using (SonarQube Enterprise Edition)
    *** what are you trying to achieve.** Dont understand what the axis mean on the security review, security vulnerability graphs.

can soemone guide me on how to interpret the graphs? thanks

2

Hi,

Welcome to the community!

Could you provide a screenshot of the graph in question?

 
Ann

3

Hi Ann
thanks for the reply.
See attached
Both charts
So Blue line is number of projects (increasing) related to the scale right hand side axis
So Purple line is number of vulnerabilities (seen here static) related to the scale right hand side axis

So my question is how do I interpret the left hand axis. A-E. I was expecting to see a count of A Ratings B Rating C Rating etc…

By the way this is from the Portfolio PDF report as supported in Enterprise Edition which is automtically generated but there seems to be no documentation online on how to interpret. thanks!

SReview
SReview820×354 96 KB
Svulnerabilities
Svulnerabilities808×358 80.1 KB

4

Hi,

Thanks for the pictures. The left-hand, rating graph shows the history of your portfolio as a whole/in aggregate. The portfolio as a whole has had an A rating for Security Review since inception and a B rating for Vulnerabilities since inception.

The third page of that PDF gives definitions. For Security Vulnerabilities:

Portfolio security is the average security of the portfolio’s projects.

Does this help?

 
Ann