Instance admin feature

[seb-kw]

Ensure CleanupOrphanedRecordsSQL is also callable

[seb-kw]

Ensure that setting an admin for a sso org is covered

[seb-kw]

Watch out because of badge api as we would remove the admin token

[seb-kw]

Ensure to add a feature to change asset slugs

[seb-kw]

We also need an admin authed endpoint that confirms a given org exists and return the owner email address of that org.

We additionally need an admin authed endpoint that returns for an owner all other orgs this owner owns.

[Hubtrick-Git]

maybe we should also be able to reset the admin session timer somehow

[Hubtrick-Git]

• Manage Admins (Add, revoke, list)
• Change Asset Slugs manually
• Get owner information about org (if exists)
• Get orgs with owner role for user
• Usage statistics

TODO

• Disable Org Creation
• Instance Statistics (Vulns, Components, etc)
  • Average Remediation time for vulns inside org
  • Average amount of open vulns per severity
  • Vuln Classification (total amount per severity)
  • Most vulnerable projects
  • Most vulnerable assets
  • Most vulnerable asset_versions
• Cache Statistics !!!

TBD

• Database dump (sanitized)

[Hubtrick-Git]

@seb-kw currently we pass a limit to the backend when we want e.g. the ecosystem package distribution inside an org. What about if we change the limit to a threshold (relative or absolute?). Instead of "give me the top 10", give me the top 95% or at least 1k components . What do you think about that?