Create an API endpoint to receive a list of X-Ray dependencies

Contributes to Move X-Ray Description Lookup out of CI (#466050 - closed)

Create an internal API endpoint to receive a list of X-Ray dependencies.

In this context, a "dependency" is an external library used by a scanned project. For Ruby, this would be a gem; for Go, this would be a package, etc.

API endpoint details

The API endpoint should accept the following parameters:

  • language - a programming language of dependencies
  • dependencies - a list of dependencies

Implementation details

The received list of dependencies should be stored in DB as XrayReport. Similar to https://gitlab.com/gitlab-org/gitlab/-/blob/e6e717e53efaeefebf72ce6f897f1dace15efe5f/ee/app/services/ai/store_repository_xray_service.rb#L17-21

Edited by Vitali Tatarintev