[frontend] load vulnerability management policies in compliance framework
Problem
Group-level policies can be scoped by compliance framework. The vulnerability management policies can now we linked with such compliance frameworks with the work done in #497820 (closed). But the vulnerability management policies specific to a framework are not appearing yet in the compliance center UI. We should make sure they do.
Implementation
- include the vulnerability management policy type in
ee/app/assets/javascripts/compliance_dashboard/components/frameworks_report/graphql/fragments/compliance_frameworks_connection_details.fragment.graphql - Add support for vulnerability management policies in
ee/app/assets/javascripts/compliance_dashboard/components/frameworks_report/frameworks_table.vue - Add support for vulnerability management polices in drawer
Verification steps
- Go to https://staging.gitlab.com/groups/govern-team-test/verify-vulnerability-management-policy/-/security/compliance_dashboard/frameworks – this is the compliance center frameworks tab for the
verify-vulnerability-management-policygroup. This group has a vulnerability management policy scoped to the "test" compliance framework. - In the compliance center, frameworks tab, verify that the framework "test" contains "Resolve info severity DAST" policy in the policies cell in the table.
- Click on the "test" framework and verify that in the opened drawer, under the "Policies" heading, there is a link to the "Resolve info severity DAST" policy. Click the link and verify it goes to the correct policy.
Edited by Lorenz van Herwaarden