Skip to content

Added a Secure E2E test for auto-remediation

Aleksandr Soborov requested to merge 9192-secure-e2e-tests-auto-remediation into master

What does this MR do?

Added a Secure End-to-End test for auto-remediation of vulnerabilities in merge requests.

Updated the Secure test fixture to add a dependency that can be auto-remediated, and updated vulnerability and dependency counts in security_reports_spec.rb.

Added QA selectors where necessary.

Note: This MR builds on https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/14847 and the commit may need to be cherry-picked back to master to keep history aligned.

This will accomplish one of the six tasks within gitlab-org/quality/testcases#7 (closed).

Moves forward OKR: gitlab-com/www-gitlab-com#4344 (closed).

Does this MR meet the acceptance criteria?

Conformity

Performance and testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team

Closes #9192 (moved)

Edited by Aleksandr Soborov

Merge request reports