Skip to content

Explore: expand events, attributes and indicators in place - #509

Merged
righel merged 2 commits into
mainfrom
explore-expandable-results
Oct 29, 2026
Merged

righel merged 2 commits into
mainfrom
explore-expandable-results

Conversation

@righel

@righel righel commented Oct 29, 2026

Copy link
Copy Markdown
Collaborator

Why

In Explore, seeing more than a result card shows meant leaving the page. The Indicators index already opens a row's details in place on a click; Explore's cards didn't.

What changes

A click on a result card (anywhere but its links, buttons and text being selected) opens its details below it. A chevron in the card does the same from the keyboard.

  • Indicators: the same IndicatorDetails as the Indicators index (score breakdown, attributes, organisations, sources, sightings, tags, warninglists, events).
  • Attributes:
    • the fields the card leaves out: event, object, comment, distribution, first and last seen, correlation enabled;
    • the indicator behind the value, found with POST /indicators/scores and then GET /indicators/{uuid};
    • the first 5 correlations, with links to their events.
  • Events:
    • date, source, distribution and sharing group, publication time, and the event it extends;
    • the first 10 attributes, with a link to all of them. The total is the event's own attribute_count, so it isn't capped at 10,000.

Details load only when a card is opened. There are no backend changes; the indicators store gains a get(uuid) action.

Testing

I checked it in a browser against a dev instance on all three tabs: opening and closing cards, and clicking the copy and action buttons inside a card without toggling it.

🤖 Generated with Claude Code

A click on a result card (anywhere but its links and controls, or a
chevron for the keyboard) opens its details below it, as the Indicators
index opens a row:

- indicators: the same details as the Indicators index (score breakdown,
  sources, sightings, tags, warninglists, events);
- attributes: their fields, the indicator behind the value and their
  first correlations;
- events: their metadata and first 10 attributes, with a link to all.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@righel righel added the UI label Oct 29, 2026
@codecov

codecov Bot commented Oct 29, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.74%. Comparing base (40deab6) to head (b7688fa).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #509   +/-   ##
=======================================
  Coverage   88.74%   88.74%           
=======================================
  Files         295      295           
  Lines       35114    35114           
=======================================
  Hits        31163    31163           
  Misses       3951     3951           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@righel
righel merged commit d17a8b5 into main Oct 29, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant