Agentic VR badges
What does this MR do and why?
As part of the initiative to add an agentic flow for resolving SAST vulnerabilities, we are adding new badges and states to the vulnerability report.
- AI fix in progress badge
- AI fixed badge
This change is behind a new feature flag agentic_sast_vr_ui.
The AI fix in progress badge expects a yet to be implemented graphql field aiFixInProgress which will be based on related workflows. This now uses a client-side resolver to simulate some of the vulnerabilities having a fix in progress.
References
Related to #556999
Screenshots or screen recordings
Here's a demo (ignore state 3 as that was determined to be removed)
| Description | Image |
|---|---|
| Feature flag disabled |  |
| Feature flag enabled |  |
| AI authored MR fix |  |
| AI fix in progress with no existing MR |  |
How to set up and validate locally
- In rails console enable the feature flag
Feature.enable(:agentic_sast_vr_ui) - Visit a project with vulnerabilities
- Verify that the AI fix in progress badge is showing
MR acceptance checklist
Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Edited by Scott Hampton