Add support for severity overrides in pipeline security finding type

What does this MR do and why?

Add support for severity overrides in pipeline security finding type, using a similar lazy loading approach introduced for vulnerability in Resolve "Add Severity Overrides to Vulnerabilit... (!176657 - merged) • Miki Amos • 17.9.

Relevant issue

Add severity overrides data to pipeline securit... (#511231 - closed) • Gal Katz • 17.9

How to set up and validate locally

Enable the FF:
pry(main)> Feature.enable(:vulnerability_severity_override))
Change severity of a pipeline security finding using this mutation:
mutation SecurityFindingSeverityOverride($findingUuid: String!, $severity: VulnerabilitySeverity!) {
  securityFindingSeverityOverride(input: {
    uuid: $findingUuid,
    severity: $severity
  }) {
    errors
    securityFinding {
      title
      severity
    }
  }
}
Use this query to get the finding severity override:
query getSecurityReportFinding($projectFullPath: ID!, $pipelineIid: ID!, $findingUuid: String!) {
  project(fullPath: $projectFullPath) {
    pipeline(iid: $pipelineIid) {
      securityReportFinding(uuid: $findingUuid) {
        severity
        severityOverrides(last: 1) {
          nodes {
            originalSeverity
            newSeverity
            createdAt
            author {
              name
            }
          }
        }
      }
    }
  }
}

Merge request reports

Loading