Skip to content

Add tooltip to resolve with ai button

Samantha Ming requested to merge 435763-add-ai-tooltip into master

What does this MR do and why?

This MR adds a legal requirement to include the text as a tooltip to our Resolve with AI button

This is an experiment feature that uses AI to provide recommendations for resolving this vulnerability. Use this feature with caution.

Note: I'm tackling the split button in a follow-up > !140198 (merged)

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Screenshots or screen recordings

image

How to set up and validate locally

  1. Have the related FF enabled: echo "Feature.enable(:resolve_vulnerability_ai)" | rails c
  2. In order to run a pipeline to generate a Vulnerability report, you'll need an EE license.
  3. Fork https://gitlab.com/gitlab-org/security-products/tests/webgoat.net
  4. Run a pipeline against the default branch. It will generate vulnerabilities.
  5. Go to the project vulnerability report page
  6. Click on the SAST vulnerability
  7. Hover on the "Resolve with AI" button to display the tooltip
  8. The tooltip should display the correct text

Related to #435763 (closed)

Edited by Samantha Ming

Merge request reports