Skip to content

Put OWASP Top Ten behind a feature flag for group level

Savas Vedova requested to merge svedova-enable-owasp-group-level into master

What does this MR do and why?

Put OWASP Top Ten behind a feature flag for group level

Use the vulnerability_owasp_top_10_group feature flag to allow displaying owasp top 10 grouping option in the group level vulnerability report.

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Screenshots or screen recordings

image

How to set up and validate locally

  1. Enable the feature flags:

echo "Feature.enable(:vulnerability_owasp_top_10_group)" | rails c

echo "Feature.enable(:group_level_vulnerability_report_grouping)" | rails c

  1. Fork https://gitlab.com/gitlab-examples/security/security-reports/ and add it under a group
  2. Run the pipeline against the default branch to populate vulnerabilities
  3. Visit Group > Secure > Vulnerability Report
Edited by Savas Vedova

Merge request reports