Skip to content

Truncate vulnerability locations

We need a way to truncate the vulnerability locations in security reports. I've shifted the effort into a GitLab UI component as it makes sense to allow others to use it too.

Once that compnent is created, we should impliment it in security reports. This issue tracks that effort.

See below for the original issue description for clarity:

We should discuss how we do truncate Vulnerability locations.

@djadmin has found these nice different cases: @andyvolpe talked about it a bit and come to the conclusion that we should add docs to the Design system.

SAST - location.file

    file: "src/main/java/com/gitlab/security_products/tests/App.java"
    start_line: 47
    end_line: 47
    class: "com.gitlab.security_products.tests.App"
    method: "generateSecretToken2"

DAST - location.path

    hostname: "https://gitlab-review-33467-disp-1vgs6t.gitlab-review.app"
    path :/assets/highlight/themes/white-3144068cf4f603d290f553b653926358ddcd02493b9728f62417682657fc58c0.css

Container Scanning - location.image

    image: "registry.gitlab.com/groulot/container-scanning-test/master:5f21de6956aee99ddb68ae49498662d9872f50ff"
    operating_system: "debian:9"
    dependency: {package: {name: "glibc"}, version: "2.24-11+deb9u3"}
    package: {name: "glibc"}
    version: "2.24-11+deb9u3"

Dependency Scanning - location.file

    file: "package.json"
    dependency: {package: {name: "extend"}, version: "3.0.1"}

The following discussion from !22376 (merged) should be addressed:

Edited by Sam Beckham