Skip to content

Show DAST results in the MR widget

Description

Dynamic Application Security Testing (https://gitlab.com/gitlab-org/gitlab-ee/issues/3956) analyzes a live application searching for possible vulnerabilities. It can be run against Review Apps, and providing relevant information in the MR widget in the same way Code Quality and SAST do.

Proposal

Add a new panel (or a subpanel of the security panel, see https://gitlab.com/gitlab-org/gitlab-ee/issues/4310) to show DAST results in the MR widget.

Design

concept for modal, temp solution for speedy implementation

additional functionality:

  • instances with evidence will have an expand button to show a codeblock with the evidence

Limitations due to implementation:

  • Most of the description text cannot be formatted

modal_copy_2

Edited by Dimitrie Hoekstra