BE: Implement auto-dismiss integration with vulnerability ingestion
Why are we doing this work
We need to hook up AutoDismissService to vulnerability ingestion so that it triggers when new vulnerabilities are created in the project. The vulnerabilities can be created via:
- Security report ingestion
- SBOM vulnerability creation
- CVS (continuous vulnerability scanning)
Relevant links
Non-functional requirements
-
Feature flag: The services should be guarded by a feature flag: #581169
Implementation plan
- Subscribe the
AutoDismissWorkertoSbom::VulnerabilitiesCreatedEvent- This should cover pipeline-based SBOM creation (Dependency Scanning v2) and Continuous Vulnerability Scanning flows
- For security report ingestion, there is no event triggered. We might need to call
AutoDismissServicedirectly inIngestReportsServicelike we do withAutoResolveService
Verification steps
Edited by 🤖 GitLab Bot 🤖