Skip to content

Add dismissal descriptions to vulnerability report pages

Lorenz van Herwaarden requested to merge bulk-dismissal-reason-dropdown-descriptions into master

What does this MR do and why?

Related #432499 (closed)

This MR passes dismissal_descriptions to the instance, group, and project vulnerability report pages. In a next MR iteration, the frontend can extract these from the dataset and pass along to a child component to display the dismissal reason descriptions in a dropdown (see issue for design).

How to set up and validate locally

Prerequisites

  1. You need an EE license
  2. You need to have runners enabled (See $2408961 for setting up a runner)
  3. Import https://gitlab.com/gitlab-examples/security/security-reports
  4. Run a pipeline on master

Validate

Validate that you can find data-dismissal-descriptions with a json string of the descriptions in the page source (right-click > view Page Source) of the:

  1. instance vulnerability report page: http://gdk.test:3000/-/security/vulnerabilities (make sure the instance has vulnerabilities by selecting projects with vulnerabilities at http://gdk.test:3000/-/security/dashboard/settings)
  2. group vulnerability report page: http://gdk.test:3000/groups/<some-group>/-/security/vulnerabilities (make sure the group has vulnerabilities)
  3. project vulnerability report page: http://gdk.test:3000/root/security-reports/-/security/vulnerability_report

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Lorenz van Herwaarden

Merge request reports