Generate approval notification without a pipeline in MR

Why are we doing this work

When there is no CI configuration in a project and there are policies requiring approvals, no bot comment is generated on MRs. Users are missing guidance in this case with respect to the approvals required by the policies. This is true for all scan result policy types:

  • scan_finding
  • license_scanning
  • any_merge_request

Relevant links

Non-functional requirements

  • Documentation:
  • Feature flag:
  • Performance:
  • Testing:

Implementation plan

Verification steps

  1. Create a new project without .gitlab-ci.yml configuration
  2. Create a policy requiring approvals with scan_finding or any_merge_request type
  3. Update README in MR
  4. Ensure the approvals are required and a bot comment is generated
Edited by Sashi Kumar Kumaresan