Skip to content

Move Secure test projects to Secure analyzer projects

Proposal

Move the Secure test projects to Secure analyzer projects, for ease of maintenance. This can probably be achieved using dynamic child pipelines - to be proven in a PoC.

Pros:

  • community contributors can run full QA for the analyzer projects they contribute too
  • new test projects can be introduced in feature branches of the analyzer project; the test project is reviewed when reviewing the feature, and it's added when merging the feature branch; it's a one-step process, as opposed to the current back and forth b/w the analyzer project and the test projects
  • similarly, new variants to the existing test projects are introduced in branches of the analyzer projects that change or fix the behavior
  • there's no need to disable other analyzers that are not being tested; there's no need for SAST_DEFAULT_ANALYZERS, DS_DEFAULT_ANALYZERS, SAST_DISABLED, DS_DISABLED, etc.
  • when updating a test project used by an analyzer, we no longer take the risk of breaking QA for another analyzer; there's no unintended side-effect

/cc @willmeek @theoretick @gonzoyumo

Auto-Summary 🤖

Discoto Usage

Points

Discussion points are declared by headings, list items, and single lines that start with the text (case-insensitive) point:. For example, the following are all valid points:

  • #### POINT: This is a point
  • * point: This is a point
  • + Point: This is a point
  • - pOINT: This is a point
  • point: This is a **point**

Note that any markdown used in the point text will also be propagated into the topic summaries.

Outcomes

Outcomes define the decisions or resolutions of a discussion. Once outcomes are defined, sub-topics and points are collapsed underneath the outcomes.

Outcomes are declared in a similar manner as points:

  • #### OUTCOME: This is an outcome
  • * outcome: This is an outcome
  • + Outcome: This is an outcome
  • - oUTCOME: This is an outcome
  • outcome: This is an outcome

Note that multiple outcomes may be declared for each topic.

Topics

Topics can be stand-alone and contained within an issuable (epic, issue, MR), or can be inline.

Inline topics are defined by creating a new thread (discussion) where the first line of the first comment is a heading that starts with (case-insensitive) topic:. For example, the following are all valid topics:

  • # Topic: Inline discussion topic 1
  • ## TOPIC: **{+A Green, bolded topic+}**
  • ### tOpIc: Another topic

Quick Actions

Action Description
/discuss sub-topic TITLE Create an issue for a sub-topic. Does not work in epics
/discuss link ISSUABLE-LINK Link an issuable as a child of this discussion

Discussion-Size Indicators

The relative size of the discussion occurring within a topic and its sub-topics is indicated via braille dots.

More dots means that more points or sub-topics exist within a given topic.

Examples:

  • TOPIC ⣿⣿⡆ A large discussion occurred here
  • TOPIC ⣇ A smaller discussion occurred here

Last updated by this job

Discoto Settings 
---
summary:
  max_items: -1
  sort_by: created
  sort_direction: ascending

See the settings schema for details.

Edited by 🤖 GitLab Bot 🤖