Skip to content

[frontend] load vulnerability management policies in compliance framework

Problem

Group-level policies can be scoped by compliance framework. The vulnerability management policies can now we linked with such compliance frameworks with the work done in #497820 (closed). But the vulnerability management policies specific to a framework are not appearing yet in the compliance center UI. We should make sure they do.

Implementation

  1. include the vulnerability management policy type in ee/app/assets/javascripts/compliance_dashboard/components/frameworks_report/graphql/fragments/compliance_frameworks_connection_details.fragment.graphql
  2. Add support for vulnerability management policies in ee/app/assets/javascripts/compliance_dashboard/components/frameworks_report/frameworks_table.vue
  3. Add support for vulnerability management polices in drawer

Verification steps

  1. Go to https://staging.gitlab.com/groups/govern-team-test/verify-vulnerability-management-policy/-/security/compliance_dashboard/frameworks – this is the compliance center frameworks tab for the verify-vulnerability-management-policy group. This group has a vulnerability management policy scoped to the "test" compliance framework.
  2. In the compliance center, frameworks tab, verify that the framework "test" contains "Resolve info severity DAST" policy in the policies cell in the table.
  3. Click on the "test" framework and verify that in the opened drawer, under the "Policies" heading, there is a link to the "Resolve info severity DAST" policy. Click the link and verify it goes to the correct policy.
Edited by Lorenz van Herwaarden