fix(scorecard): Scorecard aggregated metrics UI integration

[Eswaraiahsapram]

Hey, I just made a Pull Request!

Fixes:

1. https://issues.redhat.com/browse/RHIDP-11157
2. https://issues.redhat.com/browse/RHIDP-10985

Description

• Integrated Backend Aggregated metrics API with Frontend
• In the existing entity scorecard component, we started using recharts pie chart
• Added Missing permission for Aggregated metrics

Screen Recording

Screen.Recording.2026-01-12.at.4.41.35.PM.mov

✔️ Checklist

• A changeset describing the change and affected packages. (more info)
• Added or Updated documentation
• Tests for new functionality and regression tests for bug fixes
• Screenshots attached (for UI changes)

[rhdh-gh-app]

Changed Packages

Package Name	Package Path	Changeset Bump	Current Version
app	workspaces/scorecard/packages/app	none	v0.0.0
@red-hat-developer-hub/backstage-plugin-scorecard	workspaces/scorecard/plugins/scorecard	patch	v2.2.0

[dzemanov]

Hmm, I noticed it just now when viewing the frontend code, why are we returning array from aggregations if it is always just 1 element in it with that concrete metric? cc @imykhno :D

[dzemanov]

I tested the PR with postgres and sqlite.

Screen.Recording.2026-01-14.at.15.14.22.mov

I was able to get Missing permission when all permissions missing or only for some scorecards with conditional permission, like here:

Translations worked fine for me.

When there is error in thresholds or in fetching metric, backend doesn't return the entity's result in response, this could be confusing to users if they own more entities but we return smaller total with no information that other entities had problems. When all entities have errors, backend returns [] and it leaves these empty spaces:

When there are no entities owned by user, backend also returns []. Maybe it would be good to return response also for 0 entities from backend, at least with metric metadata so it can be shown with 0 entities? If all entities have errors, it could help frontend if we return response with "status": "error".

[imykhno]

I’ve tested the same scenarios locally as Dominika and observed the same results. However, when a user does not have access to the catalogue, the error shown in the screenshot below is displayed. Is this the expected behavior?

[imykhno]

One more point regarding SonarQube. I think it would be great if we could resolve or at least minimize the issues highlighted in the report.

[ShiranHi]

I’ve tested the same scenarios locally as Dominika and observed the same results. However, when a user does not have access to the catalogue, the error shown in the screenshot below is displayed. Is this the expected behavior?

My understanding is that the interface should dynamically hide the card for any user who lacks authorized access to the related catalog entities.

[Eswaraiahsapram]

Thanks @christoph-jerolimov , @dzemanov , @imykhno for reviewing the PR. I addressed the review comments. PTAL

Screen.Recording.2026-01-16.at.6.33.54.AM.mov

[sonarqubecloud]

Quality Gate passed

Issues
10 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud