Product Metrics (Active | Verified findings) doesn't reflect actual findings

[sachas2]

Hello,

The product metrics doesn't match the real finding this product has

See below
Test done in demo.defectdojo.org

Reproduction steps:

1. Go to https://demo.defectdojo.org/product/1/metrics

2. See 0 Verified Findings, 0 Open findings
3. Click on the link (Open findings or Verified Findings) https://demo.defectdojo.org/product/1/finding/verified?test__engagement__product=1
4. See all of the findings that doesn't count on the metrics that should be on it

Did I misunderstood the purpose of these metrics ?
Thanks !

[valentijnscholten]

The default time period for the product metrics page is Past 30 days. This is defined in MetricsDateRangeFilter in dojo/filters.py — when no date filter is selected, it uses past_thirty_days, which restricts results to findings whose date (discovery date) falls within the last 30 days.

This likely explains the mismatch: the metrics page shows 0 Verified/Open findings because it filters by discovery date (past 30 days by default), while the "Open findings" and "Verified Findings" links use different or no date filters, so they show all findings for the product.

Workaround: Change the date filter on the metrics page to "Any date" to see counts that align with the findings list.

Possible improvement: Consider making the default more inclusive (e.g., "Any date" or "Past year"), or ensuring the metrics page and the linked findings list use consistent date filtering.

[valentijnscholten]

We are working on making the dates in the sample data more current: #14336