Skip to content

Extend tool filter to support simple case

Savas Vedova requested to merge 460216-extend-tool-filter into master

What does this MR do and why?

Extend the Tool Filter to display 2 variants:

  • Simple case: Display only report types (SAST, DAST, Container Scanning etc...)
  • Extended case: Display scanners grouped by report types

The extended case is available for Project-level Vulnerability Report, whereas the former is available for Group and Instance level Vulnerability Reports.

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Screenshots or screen recordings

image

How to set up and validate locally

  1. Enable feature flag: echo "Feature.enable(:vulnerability_report_advanced_filtering)" | rails c
  2. Checkout https://gitlab.com/gitlab-examples/security/security-reports/
  3. Add the project to a group
  4. Run a pipeline against the default branch to generate vulnerabilities
  5. Visit Group > Secure > Vulnerability Report
  6. Check that Tool token renders report types instead of a list of scanners

Related to #460216 (closed)

Edited by Savas Vedova

Merge request reports