Instrumentation for Vulnerability Status Change

Why are we doing this work

From https://gitlab.com/gitlab-data/product-analytics/-/issues/2588 Instrumentation is needed to track manually changing vulnerability Status

Documentation

• https://docs.gitlab.com/user/application_security/vulnerability_report/#change-status-of-vulnerabilities

Relevant links

Implementation plan

• backend Implement tracking of state changes using the vulnerability_change event as introduced in Instrumentation for Vulnerability Severity Change (#537873 - closed).
  • Use the label vulnerability_change_state for the event.
  • Integrate this within the Vulnerabilities::BaseStateTransitionService, leveraging the Vulnerabilities::ChangesTrackingService to track the changes.

Example implementation: Tracks the merge request created from vulnerabi... (!170152 - merged) • Subashis Chakraborty • 17.6

Verification steps

• Verify the presence of the vulnerability_changed event with the label vulnerability_change_state in Tableau.