Make vulnerability permissions and resolution checks available in GraphQL

In order to scope the features correctly in the MR vulnerability finding modal, the permissions and resolution checks should be available to the frontend so that the button(s) are displayed correctly. The attributes are:

Exposed via gon.abilities (currently still WIP)

  • resolveVulnerabilityWithAi (user and project are authorized to use the resolve vulnerability with AI feature)

Exposed via GraphQL (available in GraphQL today)

  • aiResolutionAvailable (true if SAST)
  • aiResolutionEnabled (true if SAST AND CWE in high confidence list)

Screenshot_2024-09-18_at_10.27.50_AM

Edited by Darby Frey