Add identifier list popover to vulnerability report

Lorenz van Herwaardenrequested to merge
add-identifier-list-popover into master

What does this MR do and why?

Add identifier list popover to vulnerability report

Display a popover with all vulnerability identifiers when hovering or focusing the "+x more" link in the identifier column. Identifiers with URLs are rendered as clickable links opening in a new tab. The primary identifier (CVE or first) is always listed first.

Also adds variant="meta" to the security scores "+x more" link for consistent styling, and fetches the url field for identifiers in the GraphQL vulnerability fragment.

If only 1 identifier and it has a url, a meta link is used directly without popover.

Changelog: added EE: true

References

Related #564939 (closed)

Screenshots or screen recordings

Before After
Screenshot_2026-03-31_at_11.59.58 Screenshot_2026-03-31_at_11.58.56
Screenshot_2026-03-31_at_12.00.10 Screenshot_2026-03-31_at_11.59.00
Screenshot_2026-04-01_at_10.20.24 Screenshot_2026-04-01_at_10.18.52

How to set up and validate locally

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Lorenz van Herwaarden

Merge request reports