Skip to content

RTV - Reduce CreateFromVulnerabilityDataService reliance on `metadata`

What does this MR do and why?

This MR "almost" manages to make the MergeRequest::CreateFromVulnerabilityDataService stop relying on finding.metadata. This is challenged by the relationship this has to the Vulnerability::Feedback model, which is also in the process of being deprecated.

Overall nothing should change, but there is a minor alteration in the resolve_vulnerability service to ensure that the merge request is appropriately linked to the vulnerability.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #430884 (closed)

Edited by Gregory Havenga

Merge request reports