Skip to content

Add subscriptions for `Sbom::ProcessTransferEventsWorker`

What does this MR do and why?

This MR is a follow-up to !143874 (merged). It adds subscriptions for Sbom::ProcessTransferEventsWorker now that the workers are deployed to production. This is so that we do not introduce errors in canary deployments.

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

How to set up and validate locally

Numbered steps to set up and validate the change are strongly suggested.

  1. Go to a project which has dependencies

  2. Go to Settings -> General

  3. Transfer the project to a different namespace

  4. Start the rails console and check that the vulnerability traversal_ids match the new namespace:

    [1] pry(main)> project = Project.find(<id>)
    [2] pry(main)> project.namespace.traversal_ids
    => [104]
    [5] pry(main)> project.sbom_occurrences.pluck(:traversal_ids).uniq
    => [[104]]
Edited by Brian Williams

Merge request reports