Skip to content

Filter by dismissal reason on the Vulnerability Report

Lorenz van Herwaarden requested to merge filter-dismissal-reason-status into master

What does this MR do and why?

Relates to #408983 (closed)

This allows more fine-grained filtering in the vulnerability report by adding options for dismissal reason. The "Dismissed" status as we now know it, is moved to a group "Dismissed as" with the "All dismissal reasons" option (equivalent to "Dismissed" status now) and all the specific dismissal reasons.

note: depends on Allow filtering Vulnerabilties by dismissal reason (!127652 - merged) • Michał Zając • 16.3 to allow for filtering by dismissal reason

Screenshots or screen recordings

FF Off FF On
Project image image
Group image image
Security (Instance) image image

How to set up and validate locally

You'll need an EE license & runners set up.

  1. enable expose_dismissal_reason ff: echo "Feature.enable(:expose_dismissal_reason)" | rails c
  2. import security-reports
  3. run a pipeline on master branch
  4. ensure dismissal reasons are shown and filters the report accordingly

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Samantha Ming

Merge request reports