Skip to content

No line number when vulnerability is converted to issue

Summary

When a vulnerability is converted to an issue, we don't use all the metadata available, especially the link to related code. This makes the issue completely useless and unactionable.

Steps to reproduce

  1. Go to a security dashboard, like https://gitlab.com/gitlab-org/gitlab-ee/security/dashboard
  2. Select a vulnerability, and open the corresponding modal (click on the vulnerability text)
  3. Select "Create an Issue"
  4. Try to investigate on created issue

What is the current bug behavior?

Not enough information to actually investigate.

What is the expected correct behavior?

At least a link to the corresponding code.

Relevant logs and/or screenshots

Security_Dashboard___GitLab_org___GitLab_Enterprise_Edition___GitLab

Security_Dashboard___GitLab_org___GitLab_Enterprise_Edition___GitLab-2

Investigate_vulnerability__Model_attribute_used_in_regex___8155____Issues___GitLab_org___GitLab_Enterprise_Edition___GitLab

Possible fixes

Add more data to the issue template.

/cc @bikebilly

Edited by Philippe Lafoucrière