Skip to content

Reconfigure `Vulnerabilities::FindingEntity` to not use Feedbacks

What does this MR do and why?

Implement the missing relationships and serialisers to provide the Issue, Merge Request and Dismissal information to the merge request security diff widget which is presently facilitated by the Vulnerability::Feedback model.

This MR attempts does not actively remove the vulnerability feedback information presented as this might be necessary to revert to if there are issues after the enablement of the :deprecate_vulnerability_feedback model.

How to set up and validate locally

  1. Configure a project with a set of security scanners enabled and code which will result in detected vulnerabilities.
  2. Set up Merge Request from a separate branch.
  3. Make sure that the security report comparisons behave as expected.
  4. Merge the MR.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #378353 (closed)

Edited by Gregory Havenga

Merge request reports