Skip to content

Add `Dismissal Reason` to the vulnerability csv report

Michael Becker requested to merge 434076-vulnerability-report-add-dismissal-reason-column-to-csv-export into master

What does this MR do and why?

The epic for adding Dismissal Reasons to vulnerabilities is complete.

We want to include these dismissal reasons in the CSV report to make it easier for customers to ingest this data into their own systems.

resolves: #434076 (closed)

Changelog: changed
EE: true

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

CSV Reports

  1. With no dismissed vulnerabilities: no-dismissals.csv
  2. With a dismissal of each type: all-dismissals.csv
  3. With un-dismissed vulnerabilities:

How to set up and validate locally

prerequisites

  1. an EE enabled local instance
  2. a project with vulnerabilites

steps

  1. go to the vulnerability report for a project or group that has vulnerabilities
  2. dismiss several vulnerabilities with whatever dismissal reason
  3. export the vulnerability report
  4. you should see your dismissal reasons populated in the relevant rows/columns in the csv image
  5. go back to the dashboard and un-dismiss the vulnerabilities
  6. export the report again
  7. you should see the previously populated dismissal reasons now blank image

Related to #434076 (closed)

Edited by Michael Becker

Merge request reports