Making sense of Remediation: Net Resolve Rate

[maurice-huellein-unbiased-co-uk]

Select Topic Area

Question

Body

Hi all,

I love the dashboard overview of the security section that shows me how we're tackling dependabot dependency vulnerabilities. However, either I am not interpreting it correctly, or the Net Resolve Rate is just wrong.
The Net Resolve Rate (NRR) is defined as "Percentage of closed alerts to newly created alerts", so e.g.
(60 closed / 40 new) * 100 = 150% or in other words, for each new alert detected, I fixed 1.5 others.

I chose three different time periods to follow the calculation by adding the new and closed alerts from the Alert Activity graph:

New: 1, Closed: 11 => 1100% (as shown by GitHub)

New: 2, Closed: 26 => 1300% (367% shown by GitHub??)

New: 26, Closed: 26 => 100% (147 % shown by GitHub??)

Could anyone explain, please?

[JohnnyArachnid]

You are interpreting the Net Resolve Rate (NRR) correctly, as it's defined by the formula: (Closed Alerts / New Alerts) × 100. For example, with 60 closed alerts and 40 new alerts, the calculation yields an NRR of 150%, indicating that for every new alert, you closed 1.5 alerts, which is positive. If you suspect the NRR is reported incorrectly, verify the accuracy of the data for both closed and new alerts, ensure the platform is applying the same calculation method, check for any filters or thresholds affecting the counts, and confirm that you're comparing the same time frames. If everything appears correct but the NRR still seems inconsistent, consider reaching out to the dashboard's support team for clarification on their calculation method.

[ghostinhershell]

Hi @maurice-huellein-unbiased-co-uk 👋🏾 Adding on to @JohnnyArachnid's comment here, if you do believe that there are any discrepancies in how your NRR is being calculated, I suggest opening a ticket on our Support page so that this can be investigated further.

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬