Skip to content

Show dismissal reason badge in vulnerability report

Lorenz van Herwaarden requested to merge show-dismissal-reason-vuln-report into master

What does this MR do and why?

Show dismissal reason badge in the vulnerability report.

Relates to #408909 (closed)

Screenshots or screen recordings

Screenshots are required for UI changes, and strongly recommended for all other merge requests.

Before After
Screenshot_2023-07-19_at_14.18.33 Screenshot_2023-07-19_at_14.18.55
Screenshot_2023-07-19_at_14.23.07 Screenshot_2023-07-19_at_14.22.53

How to set up and validate locally

You'll need an EE license & runners set up.

  1. enable expose_dismissal_reason ff: echo "Feature.enable(:expose_dismissal_reason)" | rails c
  2. import security-reports
  3. run a pipeline on master branch
  4. dismiss various vulnerabilities with different reasons
  5. validate that dismissal reason is being shown for the correct vulnerabilities in a neutral small badge

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Lorenz van Herwaarden

Merge request reports