Skip to content

Add explain vulnerability duo text

Samantha Ming requested to merge add-ve-to-description into master

What does this MR do and why?

This MR removes the explain vulnerability card and replaces with the new design.

ve-gitlab-duo-link

EE: true

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Screenshots or screen recordings

Screenshots are required for UI changes, and strongly recommended for all other merge requests.

Before After (explainVulnerabilityTool = on) After (explainVulnerabilityTool = off)
image image image
- image image

Note: There is some text change > https://gitlab.com/gitlab-com/legal-and-compliance/-/issues/2058#note_1958889001

You can also use AI by asking GitLab Duo Chat to explain this vulnerability and suggest a solution.

How to set up and validate locally

  1. Setup AI: https://docs.gitlab.com/ee/development/ai_features/
  2. Enable FF resolve_vulnerability_ai_gateway
  3. Clone this repo: demo repo with lots of SAST vulnerabilities
  4. Run a pipeline
  5. Select a SAST vulnerability
  6. When clicked, it triggers the duo chat with the slash command, and then returns the response
  7. When clicked on the info icon, it goes to the "explaining a vulnerability" docs page*

*Note: once the duo version doc is available, the help link will be updated: Update vulnerability explanation help link (#468178)

Related to #468008 (closed)

Edited by Samantha Ming

Merge request reports