Skip to content

Update the actions project-level DAST sentence

Why are we doing this work

  • The DAST site/scanner profiles are input boxes when they could be dropdowns
  • The DAST sentence is a little confusing; reword it

Relevant links

See epic for designs

Implementation plan

MR 1

MR2

GraphQL queries/mutations

query ReadProfiles($fullPath: ID!) {
  project(fullPath: $fullPath) {
    dastSiteProfiles {
      nodes {
        profileName
      }
    }
    dastScannerProfiles {
      nodes {
        profileName
      }
    }
  }
}

mutation CreateProfiles($fullPath: ID!, $profileName: String!) {
  dastScannerProfileCreate(
    input: {fullPath: $fullPath, profileName: $profileName, scanType: PASSIVE}
  ) {
    dastScannerProfile {
      profileName
    }
  }
  dastSiteProfileCreate(
    input: {fullPath: $fullPath, profileName: $profileName, targetUrl: "https://example.com", targetType: WEBSITE}
  ) {
    dastSiteProfile {
      profileName
    }
  }
}

Verification steps

  1. Upload a GitLab Ultimate license
  2. Navigate to a group/project => Security & Compliance => Policies => New policy => Scan Execution Policy (e.g. gdk group/gdk project
  3. Verify changes
  4. Navigate to a group/project => Security & Compliance => Policies => New policy => Scan Result Policy (e.g. gdk group/gdk project
  5. Verify no changes have occured
Edited by Alexander Turinske