Skip to content

Test to Ensure all dependencies across analysers are shown

As per #213224 (closed)

Steps to reproduce

  1. Open a project that contains JavaScript packages
  2. Run dependency_scanning job on master branch
  3. Observe logs of this job and make sure that there are vulnerabilities reported by not Gemnasium analyzer. (for example, Retire.JS)
  4. Go to Security Dashboard, check a number of Dependency Scanning reported vulnerabilities.
  5. Go to the Dependency List page.

Example Project

https://gitlab.com/gitlab-org/security-products/tests/js-yarn/-/dependencies

What is the current bug behavior?

Vulnerabilities reported by Retire.JS ain't visible from the Dependency list

What is the expected correct behavior?

Vulnerabilities reported by Retire.JS should be visible from the Dependency list