Archived Projects should not show in Security Inventory

Problem

When browsing subgroups in the Security Inventory, archived projects were being shown alongside active projects, which is inconsistent with the expected behavior and other parts of the application.


Reproduction steps

Prerequisites: An Ultimate license is set up to access security features.

  1. The feature flag is enabled for the specific group:

    Feature.enable(:security_inventory_dashboard, group)

    # Example: group = Group.find(33) - note: group.find(33) results in flightjs

  2. Visit directly: http://gdk.test:3000/groups/flightjs/-/security/inventory

    2a. If using flightjs you will need to create a subgroup and 2 projects inside that subgroup

  3. Archive at least 1 project

  4. Observe that archived project(s) are visible in the project list

    Expected behavior: Archived projects should no longer appear in the subgroup view


Customer report:

I have encountered unexpected behaviour with archived projects. When you are looking at a leaf group which contains archived projects these are shown in the list of projects but with no indication that their current state is archived. Archived projects and their vulnerabilities are however not shown in the rollup to their parent group.

See this thread for more details: #553062 (comment 2688646729)

Edited by Nicolae Rotaru