feat(heureka): adds false positive actions and image version details page by hodanoori · Pull Request #1421 · cloudoperators/juno

hodanoori · 2026-01-20T13:38:15Z

Summary

Adds false positive remediation to Heureka and introduces an image version details page. Users can mark vulnerabilities as false positive from the image details page and revert false positives from the remediated tab, with success/error feedback via inline messages and toasts. The image version details page shows occurrences and vulnerabilities for a specific version. SHA256 identifiers are shortened to 7 characters in breadcrumbs and page titles for readability in the image version details page. Active and remediated vulnerabilities are reflected in the URL, and the remediation history panel state is encoded in the query string.

Changes Made

False positive remediation
- Added false positive action to the vulnerabilities list on the image details page
- Implemented FalsePositiveModal with required description field and validation
- Integrated with remediation API to create false positive remediations
- Success message for “mark as false positive” shown via inline Message and local state
Revert false positive
- Added “Revert False Positive” action in the remediation history panel (remediated tab)
- Integrated with delete-remediation API
- Success/error feedback via Toast in the panel (aligned with mark-as-false-positive message style)
- After revert or mark as false positive, triggers refetch of getRemediations and getImages so active and remediated lists stay in sync
URL routing for image details
- Query params: vulnerabilitiesList=active | remediated (default active), and vulRemediations=<CVE> when the remediation history panel is open for a CVE
- Tab selection and open remediation panel are reflected in the URL and restored on load
Image version details page
- New route /services/$service/images/$image/versions/$version
- ImageVersionDetails with version-specific information
- ImageVersionOccurrences for component instances and ImageVersionIssuesList for vulnerabilities of that version
- Integrated with fetchImageVersions for version-specific data
Image details page
- Image versions list with navigation to version details on version click
- Tabs: “Active Vulnerabilities” and “Remediated Vulnerabilities”
SHA256 display
- getShortSha256() utility (first 7 characters after sha256:)
- Breadcrumb and page title in image version details use shortened SHA; full SHA kept in URL
Tests
- Tests added for FalsePositiveModal, RemediatedIssueDataRow, RemediationHistoryPanel, and RemediatedIssuesDataRows component which are the main components related to support false positive actions implemented in this PR.

Related Issues

closes
[Bug](heureka): replace Technical Filter Keys with Display Names in Filter Pills #935
[Task](heureka): Add image version details page #1407
[Task](heureka): Perform false positive action to vulnerabilities in image details page #1408
[Task](heureka): Delete remediated status of vulnerabilities #1409
[Task](heureka): Add remediated vulnerability details panel with the list of remediation action history #1437

Screenshots (if applicable)

Testing Instructions

pnpm i
pnpm TASK

Checklist

I have performed a self-review of my code.
I have commented my code, particularly in hard-to-understand areas.
I have added tests that prove my fix is effective or that my feature works.
New and existing unit tests pass locally with my changes.
I have made corresponding changes to the documentation (if applicable).
My changes generate no new warnings or errors.
I have created a changeset for my changes.

PR Manifesto

Review the PR Manifesto for best practises.

* feat(heureka): adds image details page * chore(heureka): removes image details panel * feat(heureka): navigate from service panel to image details page * chore(heureka): adds changeset * chore(heureka): adjusts tests * chore(heureka): makes navigation checks generic * chore(heureka): makes navigation checks generic * fix(heureka): fixes prettier issue * feat(heureka): improves navigation and url definition * chore(heureka): adjusts test

…gation item

…pattern for breadcrumb

changeset-bot · 2026-01-20T13:38:19Z

🦋 Changeset detected

Latest commit: f6a4faa

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages

Name	Type
@cloudoperators/juno-app-heureka	Major
@cloudoperators/juno-app-greenhouse	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

github-actions · 2026-01-20T14:04:58Z

PR Preview Action v1.6.3
🚀 View preview at https://cloudoperators.github.io/juno/pr-preview/pr-1421/
Built to branch `gh-pages` at 2026-02-13 11:10 UTC. Preview will be ready when the GitHub Pages deployment is complete.

ArtieReus

Great job! this PR is quite lorge 😅. Added some comments

.gitignore

apps/heureka/.gitignore

apps/heureka/package.json

apps/heureka/src/api/fetchImageVersions.tsx

...rvice/ImageDetails/ImageIssuesList/RemediatedIssuesDataRows/RemediatedIssueDataRow/index.tsx

apps/heureka/src/components/Service/ImageVersionDetails/ImageVersionOccurrences.tsx

apps/heureka/src/components/Service/ImageVersionDetails/index.tsx

apps/heureka/src/components/Services/utils.ts

ArtieReus

What about to add tests for all of those new components?

…e is empty

… and remediations panel

…edIssueDataRow

…stanceEdge in utils

…onOccurrences

…params

…fter false-positive actions

…sitive

…el after revert

ArtieReus

very great job!!! lets discuss which of the following comments do you want to address??

apps/heureka/src/components/Service/ImageDetails/FalsePositiveModal/index.tsx

...a/src/components/Service/ImageDetails/ImageIssuesList/IssuesDataRows/IssuesDataRow/index.tsx

...rvice/ImageDetails/ImageIssuesList/RemediatedIssuesDataRows/RemediatedIssueDataRow/index.tsx

...ureka/src/components/Service/ImageDetails/ImageIssuesList/RemediatedIssuesDataRows/index.tsx

...eureka/src/components/Service/ImageDetails/ImageIssuesList/RemediationHistoryPanel/index.tsx

apps/heureka/src/components/Service/ImageDetails/ImageVersionsList/index.tsx

apps/heureka/src/components/Service/ImageDetails/ImageVersionOccurrences.tsx

packages/url-state-provider/package.json

…ready fixed in zod upgrade PR

ArtieReus

approved with just some FYIs :)

apps/heureka/src/api/fetchImageVersions.tsx

...rvice/ImageDetails/ImageIssuesList/RemediatedIssuesDataRows/RemediatedIssueDataRow/index.tsx

...eureka/src/components/Service/ImageDetails/ImageIssuesList/RemediationHistoryPanel/index.tsx

hodanoori and others added 6 commits January 20, 2026 09:18

feat(heureka): put the search box inside the vulnerabilities top navi…

5d21f3d

…gation item

chore(heureka): extends codegen to be adjusted with apollo client V4

864acdb

chore(heureka): display the seven chars after sha256 based on github …

35ab5a0

…pattern for breadcrumb

feat(heureka): adds messages to remediation actions

4bc758b

chore(heureka): fix typescheck

d48b237

hodanoori requested a review from a team as a code owner January 20, 2026 13:38

hodanoori self-assigned this Jan 20, 2026

hodanoori added the heureka Heureka related issues label Jan 20, 2026

hodanoori added 2 commits January 20, 2026 14:52

Merge main into hoda-heureka-false-positive

5768fc1

chore(heureka): resolve conflicts

0242166

hodanoori added 3 commits January 20, 2026 15:06

chore(heureka): adds changeset

43b8fb6

chore: ignore TanStack Router cache directory (.tanstack)

17260fd

chore(heureka): improves changeset text

6325218

ArtieReus reviewed Jan 22, 2026

View reviewed changes

ArtieReus reviewed Jan 23, 2026

View reviewed changes

hodanoori added 12 commits February 4, 2026 10:18

Merge main into hoda-heureka-false-positive

8e69870

fix(carbon): remove unnecessary type assertion in ErrorFallback

eeddd1f

fix(heureka): fixes type issues

984048d

chore(heureka): fixes test

dea3eb9

fix(heureka): show default message in ErrorFallback when error.messag…

eaf680a

…e is empty

fix(heureka): assert vulFilter as VulnerabilityFilter in ImageIssuesList

b0916cc

fix(heureka): assert vulFilter as VulnerabilityFilter in ImageIssuesList

62f3085

fix(heureka): assert vulFilter as VulnerabilityFilter in ImageIssuesList

319c3a2

feat(heureka): adds remediation action panel

56fbdeb

feat(heureka): add success error msg after revert false positive

69ba82c

Merge main into hoda-heureka-false-positive

eacb22c

feat(heureka): adds routing for active and remediated vulnerabilities…

aae5fde

… and remediations panel

hodanoori added 12 commits February 11, 2026 18:51

chore(heureka): use functional setState for expand toggle in Remediat…

71afcb7

…edIssueDataRow

chore(heureka): use functional setState for expand toggle in Remediat…

03000ca

…edIssueDataRow

fix(heureka): drop rel on internal anchor in ImageVersionOccurrences

1f94616

fix(heureka): type edge params with VulnerabilityEdge and ComponentIn…

3d76a8a

…stanceEdge in utils

fix(heureka): type image version normalizers with GetImageVersionsQuery

3b6ad5c

chore(heureka): uses Stack with gap for tooltip content in ImageVersi…

9d2c08a

…onOccurrences

fix(heureka): disable all revert actions while any revert is in progress

808429c

fix(heureka): clear search on version-details nav and decode version …

d85da31

…params

feat(heureka): show first 30 versions with Show more for the rest

3bcd194

feat(heureka): show first 30 versions with Show more for the rest

2f8a510

fix(heureka): refetches image and vulnerability scoped remediations a…

2b63753

…fter false-positive actions

Merge remote-tracking branch 'origin/main' into hoda-heureka-false-po…

5d7e70d

…sitive

hodanoori requested a review from ArtieReus February 12, 2026 11:15

hodanoori added 4 commits February 12, 2026 13:14

Merge remote-tracking branch 'origin/main' into hoda-heureka-false-po…

35fec10

…sitive

fix(heureka): adds missing end of file line

3a59b53

chore(heureka): displays success and error msg on the remediation pan…

53cd4db

…el after revert

chore(heureka): displays success and error msg on the remediation pan…

927460f

…el after revert

ArtieReus reviewed Feb 12, 2026

View reviewed changes

hodanoori added 3 commits February 13, 2026 11:33

chore(heureka): improves error handling and address code review comments

e11fd88

chore(heureka): improves error handling and address code review comments

f343dd2

fix(heureka): fixes prettier issues

3d83535

hodanoori force-pushed the hoda-heureka-false-positive branch from 10ca3e9 to 3d83535 Compare February 13, 2026 11:00

hodanoori requested a review from franzheidl as a code owner February 13, 2026 11:00

chore(heureka): remove unnecessary carbon changes as type error is al…

c87e416

…ready fixed in zod upgrade PR

hodanoori force-pushed the hoda-heureka-false-positive branch from 7d1b14f to c87e416 Compare February 13, 2026 11:08

chore: merge main into hoda-heureka-false-positive

f6a4faa

ArtieReus approved these changes Feb 13, 2026

View reviewed changes

taymoor89 approved these changes Feb 13, 2026

View reviewed changes

hodanoori merged commit 48156b0 into main Feb 13, 2026
15 checks passed

hodanoori deleted the hoda-heureka-false-positive branch February 13, 2026 14:19

Conversation

hodanoori commented Jan 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Changes Made

Related Issues

Screenshots (if applicable)

Testing Instructions

Checklist

PR Manifesto

Uh oh!

changeset-bot bot commented Jan 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🦋 Changeset detected

Uh oh!

github-actions bot commented Jan 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Built to branch gh-pages at 2026-02-13 11:10 UTC. Preview will be ready when the GitHub Pages deployment is complete.

Uh oh!

ArtieReus left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

ArtieReus left a comment

Choose a reason for hiding this comment

Uh oh!

ArtieReus left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

ArtieReus left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

hodanoori commented Jan 20, 2026 •

edited

Loading

changeset-bot bot commented Jan 20, 2026 •

edited

Loading

github-actions bot commented Jan 20, 2026 •

edited

Loading

Built to branch `gh-pages` at 2026-02-13 11:10 UTC.
Preview will be ready when the GitHub Pages deployment is complete.