Draft: Show an icon in MR widget for findings matched by auto-dismiss policy
What does this MR do and why?
Show an icon in MR widget for findings matched by auto-dismiss policy
When findings are going to be auto-dismissed by a policy, we want to show an icon for these findings in the MR security widget.
References
- Depends on backend changes in Draft: Extend FindingEntity with matches_auto_d... (!216178)
Screenshots or screen recordings
| Before | After |
|---|---|
|
|
How to set up and validate locally
- Enable the feature flag
auto_dismiss_vulnerability_policies - Create a project
- Create an auto-dismiss policy:
vulnerability_management_policy: - name: Auto-dismiss acceptable secrets description: Auto-dismiss secrets enabled: true actions: - type: auto_dismiss dismissal_reason: not_applicable rules: - type: detected criteria: - type: file_path value: ".env" - Add
.gitlab-ci.ymlwith secret detectioninclude: - template: Jobs/Secret-Detection.latest.gitlab-ci.yml - Add two secrets in a new MR:
-
.env:AWS_TOKEN=AKIAZYONPI3G4JNCCWGQ -
.env2:AWS_TOKEN=AKIAZYONPI3G4JNCCWGA
-
- Wait for the pipeline to finish
- Expand the detected findings in the MR security widget and verify that the matched finding shows an icon with a popover, while the other one doesn't.
MR acceptance checklist
Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Related to #577883
Edited by Martin Cavoj

