Change vulnerabilityFindingDismiss mutation to accept uuid argument
Why are we doing this work
We need to be able to dismiss pipeline findings. There is a mutation vulnerabilityFindingDismiss, but this does not work for pipelines. The only ID available to security findings is the UUID. We need to accept the UUID of a finding to dismiss the vulnerability finding and/or the security finding. We also need to deprecate the use of id as a parameter. However, that deprecation should come in a separate issue.
Relevant links
N/A
Non-functional requirements
-
Documentation: Update GraphQL docs -
Testing: Add relevant tests
Implementation plan
-
backend Add uuidas an input for thevulnerabilityFindingDismissmutation -
backend Remove the requirement on idas an input -
backend Add check to make sure at least idoruuidis present
Verification steps
- Run a pipeline on the main branch of a test project
- Get the UUID of a finding via GraphQL
query { project(fullPath:"jschafer/security-reports") { pipelines(first:1) { nodes { securityReportFindings(first:1) { nodes { uuid } } } } } } - Dismiss the finding via GraphQL
mutation { vulnerabilityFindingDismiss(input:{uuid:"<uuid>"}){ finding { title } } } - GraphQL should return with the title of the security finding
- The Security tab on the pipeline should show the security finding as dismissed.
Edited by Jonathan Schafer