Skip to content

Move DAST reports logic for the Merge Request widget to the backend - frontend part

What does this MR do?

This moves the reports logic from the frontend to the backend for DAST reports in on an MR. It's behind the feature flag dastMergeRequestReportApi which is currently disabled.

Once the feature flag is enabled, the user will see no changes. We generate the same report, just in the backend instead of the frontend. This should improve performance, load times, and code reuse.

Note: the backend API for this does not currently exist. I've built in a failsafe so even if the FF is enabled, if that endpoint isn't there we still fall back to the old method.

If you need it, here's an explainer video (just replace all mentions of container scanning with dast): https://youtu.be/WzgsWDcvmes

This is basically the same MR as !15226 (merged) and !15406 (merged) just for a different report type.

Does this MR meet the acceptance criteria?

Conformity

Performance and Testing

Closes #13648 (closed)

Edited by Sam Beckham

Merge request reports