jramos/cve-dashboard
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix BU reassignment detail — fetch by count instead of time window

Browse Source 
The BU history records may have been written days before the anomaly
detected them leaving scope. Instead of a fragile time window, fetch
the N most recent BU change records where N matches the classification
count shown in the banner. This ensures the detail always matches
the summary.
This commit is contained in:
Jordan Ramos
2026-06-29 12:04:18 -06:00
parent 5037d68613
commit 93d68bccfe
1 changed files with 5 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
frontend/src/components/pages/AnomalyBanner.js
View File

@@ -247,18 +247,11 @@ export default function AnomalyBanner() {
setBuLoading(true);
setBuExpanded(true);
try {
// Fetch BU change records relevant to this anomaly.
// Use a 25-hour window before sync_timestamp to capture changes from
// the previous sync cycle (syncs run once per 24h).
const since = anomaly?.sync_timestamp || '';
let url;
if (since) {
const sinceDate = new Date(since);
sinceDate.setHours(sinceDate.getHours() - 25);
url = `${API_BASE}/ivanti/findings/bu-changes?since=${encodeURIComponent(sinceDate.toISOString())}`;
} else {
url = `${API_BASE}/ivanti/findings/bu-changes?limit=50`;
}
// Fetch the most recent BU change records, limited to the count shown
// in the classification. This ensures the detail always matches the
// banner summary regardless of when the changes were originally detected.
const buCount = (anomaly?.classification?.bu_reassignment) || 10;
const url = `${API_BASE}/ivanti/findings/bu-changes?limit=${buCount}`;
const res = await fetch(url, { credentials: 'include' });
if (res.ok) {
const data = await res.json();