Skip to content

Dependency list not showing for pipelines blocked by manual jobs

In !143046 (diffs) we added the feature to view vulnerability report when the pipeline is still blocked on manual jobs.

Along with that change we also modified code for SBOM and container scanning jobs but looks like the dependency list UI is not fetching the results when the pipeline is blocked by manual jobs while the container scanning / sbom jobs have already completed.

Steps to reproduce:

  1. Clone https://gitlab.com/gitlab-org/govern/threat-insights-demos/verification-projects/439691-dependency-reports-blocked-by-manual-jobs
  2. Run pipeline on the main branch, wait for the pipeline to be blocked by the last deploy job.
  3. View the pipeline security tab and the Secure -> vulnerability report page. They should show the vulnerabilities.
  4. View Secure -> Dependency list page. It does not show the dependencies. Example here.
Edited by Bala Kumar