Use solution not summary for auto-remediation
Problem to solve
if there's a remediation, then the solution that shows up in the UI on Vulnerability page is the remediation summary, and not the vulnerability solution ; it looks like the latter is more accurate though.
Proposal
What is displayed as the vulnerability solution is controled on frontend in Solution card
Proposal is to change it to
solutionText() {
return this.solution;
},
As a result, we show solution
field in both cases (with existing remediation on not). In the case of existing remediation, we show additionally the suggestion to create MR or download the patch (this is already implemented).
Further details
Documentation
will docs need to be updated?
Availability & Testing
will tests need to be updated?
What does success look like, and how can we measure that?
What is the type of buyer?
Is this a cross-stage feature?
~"group::container security" [auto-remediation] groupthreat insights [ui] groupvulnerability research [database]
Links / references
Edited by Tetiana Chupryna