Experiment Cleanup: Productize security_actions_continuous_onboarding
What does this MR do and why?
Make the candidate experience of this experiment introduced here: !90478 (merged) the default code path and clean up the experiment.
That means replace the current Run a Security scan using CI/CD
task in the Deploy
section of Learn GitLab with the following three:
-
Scan dependencies for licenses
, link to: https://docs.gitlab.com/ee/user/compliance/license_scanning_of_cyclonedx_files/ -
Scan dependencies for vulnerabilities
, link to: /{project-name}/-/security/configuration#dependency-scanning -
Analyze your application for vulnerabilities
, link to: /{project-name}/-/security/configuration#dast
Screenshots or screen recordings
Before | After |
---|---|
How to set up and validate locally
- Start local GDK to simulate SaaS
- Register as a new user
- Sign in and select any 'role' and 'Just me' in the welcome form.
- Choose 'Create a new project'
- Click 'Continue'
- Fill out fields to create a group and project on the next page.
- Click 'Create project'
- Verify you get to the onboarding and page refreshes to provide a "Ok, let's go" button.
- Click on "Ok, let's go" and verify you are dropped into the learn gitlab page.
MR acceptance checklist
This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.
-
I have evaluated the MR acceptance checklist for this MR.
Related to #396330
Edited by Roy Liu