Cannot create issue from Security Reports in MR widget

IMPORTANT NOTE!

This ~bug is only present in GitLab 11.1. We will not work on this issue until a patch release for GitLab 11.1 will be announced.

Every other GitLab release is not affected by this bug, or has already been patched.

We could close the issue when a patch for 11.1 will be out, or 11.1 will be "closed" and no patch releases will be done.

Summary

Open the details of a security vulnerability in the Merge Request widget. The Create issue button is missing. It works in the pipeline view and in the security dashboard though.

Example Project

gitlab-org/security-products/tests/java-maven!6 (closed)

Relevant logs and/or screenshots

image

Possible fixes

The MR widget does not seem to have the proper value for can_create_issue.

A fix has already been developed for GitLab 11.2, it should be ported to GitLab 11.1 (see the note at the top of the issue description).

Edited by Fabio Busatto