Display Validity Check Token Status on Vulnerability Report
What does this MR do and why?
- Send validity_checks_enabled from project security setting to frontend
- Add validity_checks feature flag to frontend configuration
- Conditionally render validity check text for Secret Detection reports
- Create method to display friendly text based on findingTokenStatus
- Only show validity information when feature flag enabled and project opted-in
References
Screenshots or screen recordings
| Before | After |
|---|---|
How to set up and validate locally
- Ensure you have the
validity_checkfeature flag enabled for your project - Opt-in to validity checks via the Validity Checks toggle in
Secure > Security Configurationafter you've enabled Pipeline Secret Detection - Make sure your pipeline has run with a few Secret Detection flagged vulnerabilities found
- Go to
Secure > Vulnerability Reportto see the changes added to theSeveritycolumn
MR acceptance checklist
Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Edited by Radu Birsan
