Skip to content

Add standalone modal to current pipeline report (behind feature flag)

What does this MR do and why?

  • Adds new feature flag: standalone_finding_modal
  • Renders standalone finding modal behind feature flag on pipeline security report

Screenshots or screen recordings

Screen_Recording_2023-04-11_at_2.56.54_pm

How to set up and validate locally

Setup

  1. You'll need an EE License
  2. You'll need to have runners enabled (See $2408961 for setting up a runner)
  3. Import https://gitlab.com/svedova/test-remediations-v2
  4. Run a pipeline on master

You will also need to enable two feature flags:

  1. echo "Feature.enable(:deprecate_vulnerabilities_feedback)" | rails c
  2. echo "Feature.enable(:standalone_finding_modal)" | rails c

Validation

  1. Go to the pipeline's security report tab
  2. Click on a finding
  3. Dismiss the finding
  4. Click "Undo dismiss" on the toast message - verify finding is not dismissed
  5. Dismiss finding again - verify finding is dismissed
  6. Toggle "hide dismissed" to be off
  7. Revert dismissal from the report
  8. Dismiss finding with a comment - verify that the finding renders as dismissed and with a comment within the report
  9. Delete the comment - verify that the finding only renders as dismissed and with no comment
  10. Revert dismissal - verify that the finding is no longer dismissed

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #404756 (closed)

Edited by Samantha Ming

Merge request reports