Show DAST results in the Group Security Dashboard
Problem to solve
The Group Security Dashboard currently shows a subset of results. This is a good starting point, but we need to add more source of vulnerabilities and cover all the reports we have.
This issue is about adding DAST results to the dashboard.
Further details
This issue requires https://gitlab.com/gitlab-org/gitlab-ee/issues/7062 to be merged in a previous iteration.
Proposal
Those are the requirements:
- add DAST as an option in the Group Security Dashboard to filter DAST results, in a similar way we do for SAST
- the results will be shown in the list, and action items available, in the most similar way to SAST
- the summary and metrics must consider DAST results
Implementation
-
Add DAST to the authorized list of report types displayed in the group dashboard (rel https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/9626) -
Enable the parse_dast_reports
feature flag
What does success look like, and how can we measure that?
Number of times DAST
vulnerabilities are clicked in the dashboard.
Edited by Mark Florian