Add default DS scan profile
What does this MR do and why?
Add default DS scan profile based on Design: Enablement-only dependency scanning pro... (#591553) • Michael Fangman • 18.11
Changelog: changed
EE: true
How to set up and validate locally
- Select a root group
gwithoutDSsecurity scan profiles. - Use this GraphQL query to get the available (default) profiles:
query test { group(fullPath: "<g.full_path>") { availableSecurityScanProfiles(type: DEPENDENCY_SCANNING) { id scanType name description gitlabRecommended triggers } } } - Verify there is no
DEPENDENCY_SCANNINGprofiles available. - Use this mutation to attach the default
dependency_scanningprofile to the projects under groupg, and verify it fails withThe resource that you are attempting to access does not exist:mutation { securityScanProfileAttach( input: { securityScanProfileId: "gid://gitlab/Security::ScanProfile/dependency_scanning" groupIds: ["gid://gitlab/Group/<g.id>"] } ) { errors } } - Turn
:security_scan_profiles_dependency_scanningfeature flag on:
Feature.enable(:security_scan_profiles_dependency_scanning) - Using the same query, verify that default
DEPENDENCY_SCANNINGprofile is returned with the correct name, description and triggers. - Using the same mutation, verify you are able to attach the default
DEPENDENCY_SCANNINGprofile to projects underg.
MR acceptance checklist
Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Related to [Backend] Add default DS profile (#593009) • Gal Katz • 18.11