feat(heureka): adds false positive actions and image version details page #1421

hodanoori · 2026-01-20T13:38:15Z

Summary

Adds false positive remediation to Heureka and introduces an image version details page. Users can mark vulnerabilities as false positive from the image details page and revert false positives from the remediated tab, with success/error feedback via inline messages and toasts. The image version details page shows occurrences and vulnerabilities for a specific version. SHA256 identifiers are shortened to 7 characters in breadcrumbs and page titles for readability in the image version details page. Active and remediated vulnerabilities are reflected in the URL, and the remediation history panel state is encoded in the query string.

Changes Made

False positive remediation
- Added false positive action to the vulnerabilities list on the image details page
- Implemented FalsePositiveModal with required description field and validation
- Integrated with remediation API to create false positive remediations
- Success message for “mark as false positive” shown via inline Message and local state
Revert false positive
- Added “Revert False Positive” action in the remediation history panel (remediated tab)
- Integrated with delete-remediation API
- Success/error feedback via Toast in the panel (aligned with mark-as-false-positive message style)
- After revert or mark as false positive, triggers refetch of getRemediations and getImages so active and remediated lists stay in sync
URL routing for image details
- Query params: vulnerabilitiesList=active | remediated (default active), and vulRemediations=<CVE> when the remediation history panel is open for a CVE
- Tab selection and open remediation panel are reflected in the URL and restored on load
Image version details page
- New route /services/$service/images/$image/versions/$version
- ImageVersionDetails with version-specific information
- ImageVersionOccurrences for component instances and ImageVersionIssuesList for vulnerabilities of that version
- Integrated with fetchImageVersions for version-specific data
Image details page
- Image versions list with navigation to version details on version click
- Tabs: “Active Vulnerabilities” and “Remediated Vulnerabilities”
SHA256 display
- getShortSha256() utility (first 7 characters after sha256:)
- Breadcrumb and page title in image version details use shortened SHA; full SHA kept in URL
Tests
- Tests added for FalsePositiveModal, RemediatedIssueDataRow, RemediationHistoryPanel, and RemediatedIssuesDataRows component which are the main components related to support false positive actions implemented in this PR.

Related Issues

closes
[Bug](heureka): replace Technical Filter Keys with Display Names in Filter Pills #935
[Task](heureka): Add image version details page #1407
[Task](heureka): Perform false positive action to vulnerabilities in image details page #1408
[Task](heureka): Delete remediated status of vulnerabilities #1409
[Task](heureka): Add remediated vulnerability details panel with the list of remediation action history #1437

Screenshots (if applicable)

Testing Instructions

pnpm i
pnpm TASK

Checklist

I have performed a self-review of my code.
I have commented my code, particularly in hard-to-understand areas.
I have added tests that prove my fix is effective or that my feature works.
New and existing unit tests pass locally with my changes.
I have made corresponding changes to the documentation (if applicable).
My changes generate no new warnings or errors.
I have created a changeset for my changes.

PR Manifesto

Review the PR Manifesto for best practises.

* feat(heureka): adds image details page * chore(heureka): removes image details panel * feat(heureka): navigate from service panel to image details page * chore(heureka): adds changeset * chore(heureka): adjusts tests * chore(heureka): makes navigation checks generic * chore(heureka): makes navigation checks generic * fix(heureka): fixes prettier issue * feat(heureka): improves navigation and url definition * chore(heureka): adjusts test

…gation item

…pattern for breadcrumb

changeset-bot · 2026-01-20T13:38:19Z

🦋 Changeset detected

Latest commit: 2f8a510

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages

Name	Type
@cloudoperators/juno-app-heureka	Major
@cloudoperators/juno-app-greenhouse	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

github-actions · 2026-01-20T14:04:58Z

PR Preview Action v1.6.3
🚀 View preview at https://cloudoperators.github.io/juno/pr-preview/pr-1421/
Built to branch `gh-pages` at 2026-02-09 09:26 UTC. Preview will be ready when the GitHub Pages deployment is complete.

ArtieReus

Great job! this PR is quite lorge 😅. Added some comments

.gitignore

apps/heureka/.gitignore

apps/heureka/package.json

apps/heureka/src/api/fetchImageVersions.tsx

...rvice/ImageDetails/ImageIssuesList/RemediatedIssuesDataRows/RemediatedIssueDataRow/index.tsx

apps/heureka/src/components/Service/ImageVersionDetails/ImageVersionOccurrences.tsx

apps/heureka/src/components/Service/ImageVersionDetails/index.tsx

apps/heureka/src/components/Services/utils.ts

ArtieReus

What about to add tests for all of those new components?

…e is empty

… and remediations panel

…edIssueDataRow

…stanceEdge in utils

…onOccurrences

…params

hodanoori and others added 6 commits January 20, 2026 09:18

feat(heureka): put the search box inside the vulnerabilities top navi…

5d21f3d

…gation item

chore(heureka): extends codegen to be adjusted with apollo client V4

864acdb

chore(heureka): display the seven chars after sha256 based on github …

35ab5a0

…pattern for breadcrumb

feat(heureka): adds messages to remediation actions

4bc758b

chore(heureka): fix typescheck

d48b237

hodanoori requested a review from a team as a code owner January 20, 2026 13:38

hodanoori self-assigned this Jan 20, 2026

hodanoori added the heureka Heureka related issues label Jan 20, 2026

hodanoori added 2 commits January 20, 2026 14:52

Merge main into hoda-heureka-false-positive

5768fc1

chore(heureka): resolve conflicts

0242166

hodanoori added 3 commits January 20, 2026 15:06

chore(heureka): adds changeset

43b8fb6

chore: ignore TanStack Router cache directory (.tanstack)

17260fd

chore(heureka): improves changeset text

6325218

ArtieReus reviewed Jan 22, 2026

View reviewed changes

ArtieReus reviewed Jan 23, 2026

View reviewed changes

hodanoori added 12 commits February 4, 2026 10:18

Merge main into hoda-heureka-false-positive

8e69870

fix(carbon): remove unnecessary type assertion in ErrorFallback

eeddd1f

fix(heureka): fixes type issues

984048d

chore(heureka): fixes test

dea3eb9

fix(heureka): show default message in ErrorFallback when error.messag…

eaf680a

…e is empty

fix(heureka): assert vulFilter as VulnerabilityFilter in ImageIssuesList

b0916cc

fix(heureka): assert vulFilter as VulnerabilityFilter in ImageIssuesList

62f3085

fix(heureka): assert vulFilter as VulnerabilityFilter in ImageIssuesList

319c3a2

feat(heureka): adds remediation action panel

56fbdeb

feat(heureka): add success error msg after revert false positive

69ba82c

Merge main into hoda-heureka-false-positive

eacb22c

feat(heureka): adds routing for active and remediated vulnerabilities…

aae5fde

… and remediations panel

hodanoori and others added 20 commits February 11, 2026 17:18

Merge branch 'main' into hoda-heureka-false-positive

a677e18

chore(heureka): remove ./tanstack from gitignore

ba8898e

chore(heureka): remove message provider lib and its usage

be26b61

feat(heureka): adds tests on image details page components

f871a67

chore(heureka): updates pnpm-lock.yaml

d4df3eb

fix(heureka): type assertions for RemediatedIssuesDataRows test mocks

5b47f5a

chore(heureka): updates the changeset text

7c13802

fix(heureka): use React Query cache for fetchImageVersions

39b5e7f

chore(heureka): uses descriptionTrimmed once in FalsePositiveModal

eefbc58

fix(heureka): avoid setState after unmount in FalsePositiveModal

fdaa134

chore(heureka): use functional setState for expand toggle in Remediat…

71afcb7

…edIssueDataRow

chore(heureka): use functional setState for expand toggle in Remediat…

03000ca

…edIssueDataRow

fix(heureka): drop rel on internal anchor in ImageVersionOccurrences

1f94616

fix(heureka): type edge params with VulnerabilityEdge and ComponentIn…

3d76a8a

…stanceEdge in utils

fix(heureka): type image version normalizers with GetImageVersionsQuery

3b6ad5c

chore(heureka): uses Stack with gap for tooltip content in ImageVersi…

9d2c08a

…onOccurrences

fix(heureka): disable all revert actions while any revert is in progress

808429c

fix(heureka): clear search on version-details nav and decode version …

d85da31

…params

feat(heureka): show first 30 versions with Show more for the rest

3bcd194

feat(heureka): show first 30 versions with Show more for the rest

2f8a510

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(heureka): adds false positive actions and image version details page #1421

feat(heureka): adds false positive actions and image version details page #1421

hodanoori commented Jan 20, 2026 •

edited

Loading

Uh oh!

changeset-bot bot commented Jan 20, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Jan 20, 2026 •

edited

Loading

Built to branch `gh-pages` at 2026-02-09 09:26 UTC.
Preview will be ready when the GitHub Pages deployment is complete.

Uh oh!

ArtieReus left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

ArtieReus left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

feat(heureka): adds false positive actions and image version details page #1421

Are you sure you want to change the base?

feat(heureka): adds false positive actions and image version details page #1421

Conversation

hodanoori commented Jan 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Changes Made

Related Issues

Screenshots (if applicable)

Testing Instructions

Checklist

PR Manifesto

Uh oh!

changeset-bot bot commented Jan 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🦋 Changeset detected

Uh oh!

github-actions bot commented Jan 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Built to branch gh-pages at 2026-02-09 09:26 UTC. Preview will be ready when the GitHub Pages deployment is complete.

Uh oh!

ArtieReus left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

ArtieReus left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

hodanoori commented Jan 20, 2026 •

edited

Loading

changeset-bot bot commented Jan 20, 2026 •

edited

Loading

github-actions bot commented Jan 20, 2026 •

edited

Loading

Built to branch `gh-pages` at 2026-02-09 09:26 UTC.
Preview will be ready when the GitHub Pages deployment is complete.