Skip to content

Extend the interface of `Gitlab::Ci::Reports::Security::Finding` with the `RAW_METADATA_ATTRIBUTES`

Why are we doing this work

In StoreReportService and FindingMap(for ingestion flow), we are parsing the raw_metadata attribute of the Gitlab::Ci::Reports::Security::Finding to access the following attributes to create Vulnerabilities::Finding records with;

  • description
  • message
  • solution
  • cve
  • location

Ideally, we should parse the report artifact just once, therefore, we should make the description, message, and cve values as attributes of the Gitlab::Ci::Reports::Security::Finding.

The location and solution values should be populated by the related PORO value objects.

Non-functional requirements

  • Documentation:
  • Feature flag:
  • Performance:
  • Testing:

Implementation plan

Edited by Mehmet Emin INAC