A
AnilKumarReddy Gajulapalli
Port should compute current vulnerabilities from only the latest completed scan per project + branch + scan type, not from all scans in the time window.
Problem: When multiple historical scans are processed, vulnerabilities fixed in newer scans can still appear from older scans, creating stale entities.
Proposal:
  • Group scans by project + branch + scan type.
  • Select the latest completed scan in each group.
  • Sync findings from that scan only.
  • Optionally delete findings missing vs previous latest scan in the same group.
With this, More accurate current-state vulnerability data and fewer stale findings in Port.