Skip to content

Security Report Ingestion set `traversal_ids`, `archived` on vuln reads

What does this MR do and why?

In order to improve query performance by denormalizing the projects archived state and it's owning namespaces traversal_ids to the vulnerability_reads table, we need to add these values during the ingestion pipeline.

This MR does precisely that.

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

How to set up and validate locally

  1. Set up a project with vulnerability_reads associated with pipeline findings.
  2. Run a new pipeline.
  3. Confirm that all the vulnerability_reads records have their archived and traversal_ids matching the owning project and it's namespace.

Related to #437673 (closed)

Merge request reports