Add audit event for auto_duo_code_review_enabled changes
What does this MR do and why?
Add audit event for auto_duo_code_review_enabled changes
Add auto_duo_code_review_enabled_updated audit event type to track when the Duo automatic code review setting is changed on a group. This ensures group owners have an audit trail when code review automation settings are modified.
- Create audit event type YAML definition
- Register column in NamespaceSettingChangesAuditor
- Add spec coverage for the new audited setting
References
Screenshots or screen recordings
How to set up and validate locally
- Start a GDK instance with EE license features enabled
- As a group owner, navigate to a group's settings -> General -> Merge Requests
- Toggle settings for automatic code reveiw thru Duo
- Check the audit events log for the group (Group > Security & Compliance > Audit Events)
- Verify an audit event was created with:
- Correct event type name
auto_duo_code_review_enabled_updated -
fromandtovalues reflecting the change (e.g.,false->true) -
target_detailsshowing the group's full path - (Or check rails console AuditEvent.last)
- Correct event type name
- Verify the event is also streamed if external audit event streaming is configured
MR acceptance checklist
Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
