BE: Implement auto-dismiss integration with vulnerability ingestion

Why are we doing this work

We need to hook up AutoDismissService to vulnerability ingestion so that it triggers when new vulnerabilities are created in the project. The vulnerabilities can be created via:

  • Security report ingestion
  • SBOM vulnerability creation
  • CVS (continuous vulnerability scanning)

Relevant links

Non-functional requirements

  • Feature flag: The services should be guarded by a feature flag: #581169

Implementation plan

  • Subscribe the AutoDismissWorker to Sbom::VulnerabilitiesCreatedEvent
    • This should cover pipeline-based SBOM creation (Dependency Scanning v2) and Continuous Vulnerability Scanning flows
  • For security report ingestion, there is no event triggered. We might need to call AutoDismissService directly in IngestReportsService like we do with AutoResolveService

Verification steps

Edited by 🤖 GitLab Bot 🤖