Extend schema and models to support auto-dismiss type
What does this MR do and why?
Extend schema and models to support auto-dismiss type
As a foundation for auto-dismiss policies, we extend the schemas and implement matching logic for the new rules.
References
- Epic: Auto-dismiss irrelevant vulnerabilities (&10894)
- PoC: Draft: Add PoC for auto-dismiss policies (!211112 - closed)
Queries
As we're introducing a new action type, there's no data in production to get plans.
The queries are the same as auto_resolve scopes introduced in !173437 (merged).
The auto-dismiss policies will be loaded like so in the new AutoDismissService that will be introduced later:
project.vulnerability_management_policies.auto_dismiss_policies_with_rules
SELECT "security_policies".* FROM "security_policies" INNER JOIN "security_policy_project_links" ON "security_policies"."id" = "security_policy_project_links"."security_policy_id" WHERE "security_policy_project_links"."project_id" = 156 AND "security_policies"."type" = 3 AND "security_policies"."type" = 3 AND (policy_index >= 0) AND "security_policies"."enabled" = TRUE AND (content -> 'actions' @> '[{"type":"auto_dismiss"}]') LIMIT 11
SELECT "vulnerability_management_policy_rules".* FROM "vulnerability_management_policy_rules" WHERE vulnerability_management_policy_rules"."security_policy_id" IN (782, 783, 790)
MR acceptance checklist
Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Related to #581373 (closed)
Edited by Martin Cavoj