Technical Debt Manual Test Checklist
Please add this manual test to all clean up FF MRs:
:warning: Required Manual Check from a member of the TI team `@dpisek @sming-gitlab @darbyfrey @subashis @wandering_person` :warning:
- [ ] Copy the checklist from this issue: https://gitlab.com/gitlab-org/gitlab/-/issues/500642+
- [ ] Paste the items as a comment in this MR
- [ ] Complete all the manual checks
Checklist
## Manual Test Checklist
Pick one of this demo project to clone:
- https://gitlab.com/gitlab-org/govern/threat-insights-demos/verification-projects/cwe-tests (recommended)
- https://staging.gitlab.com/govern-team-test/oxeye-rulez
- https://gitlab.com/gitlab-examples/security/security-reports
- https://gitlab.com/gitlab-org/govern/threat-insights-demos/webgoat.net
**A. Vulnerability Explanation**
1. Click on a SAST vulnerability
2. Click on "Explain with AI"
3. It triggers the duo chat drawer calling the `/vulnerability_explain` command
4. It successfully display the AI response
5. [ ] Verified
For non-SAST vulnerability:
1. It is not available
2. [ ] Verified
**B. Vulnerability Resolution**
For [high confidence CWE](https://docs.gitlab.com/ee/user/application_security/vulnerabilities/#availability):
1. Click on a SAST vulnerability
3. It displays the button "Resolve with AI"
4. When clicked, it creates the AI generated MR
1. [ ] Verified
For all other SAST:
3. It displays the button "Resolve with AI"
4. It is in a disabled state and has a "Learn more" link
1. [ ] Verified
**C. VR Filter & Badge**
1. Enable the FF `vulnerability_report_vr_badge` & `vulnerability_report_vr_fiilter`
2. For VR available vulnerability, it will display the AI VR badge
2. GitLab Duo AI filter is available in the Activity filter
1. [ ] Verified
**D. MR Widgete**
1. Enable the FF `resolveVulnerabilityInMr`
2. It displays AI Badge for high confidence CWE
3. The modal displays "Resolve with AI" button
1. [ ] Verified
Edited by Samantha Ming