CI view for SAST
We have SAST analysis in https://gitlab.com/gitlab-org/gitlab-ee/issues/3723. It creates a report, and some information is partially available in the MR widget (https://gitlab.com/gitlab-org/gitlab-ee/issues/3775).
Create a specific CI view for SAST output results.
Links / references
What is it? Why should someone use this feature? What is the underlying (business) problem? How do you use this feature?
Who is this for? Provide one or more use cases.
Make sure these are completed before closing the issue, with a link to the relevant commit.
As a first iteration, we will bring the SAST view from the MR widget to the Pipeline page. This view will appear under a new tab
If any vulnerabilities have been detected, the number of vulnerabilities will be shown on the tab's badge
A new row should be added to the 'Pipeline widget', which shows the result of the security report without having to access the tab.
The number of vulnerabilities detected will be a link to
http://DOMAIN/PROJECT/pipelines/XXX/security, so clicking it will open the Security report tab
|Vulnerabilities detected||No vulnerabilities detected|