Update test project expectations when new vulnerability is published

Problem to solve

We constantly introduce new vulnerabilities into gemnasium-db as a result of this, our test project's expectations gets outdated constantly and it keeps our pipelines failing since fixture doesn't match with generated report by analyzer.

Desired behaviour

Whenever we new vulnerability merged into master related projects tests

Intended users

Persona: Software developer

Further details

Proposal

We could leverage multi project pipeline feature of Gitlab and trigger a job to create MR in order to update expectations whenever we publish vulnerability. Example,

  1. New vulnerability merged into /gem folder
  2. Job is triggered for creating MR in ruby-bundler project

Permissions and Security

N/A

Documentation

N/A

Links / references

#10658 (closed)

Assignee Loading
Time tracking Loading