Skip to content

Secret detection for MR Widget

Dheeraj Joshi requested to merge djadmin-secret-scanning into master

What does this MR do?

This is an implementation for #212381 (closed).

Description

This enable MR Widget to show reports from Secret Scanning. The implementation is exact replica of how other scanners (SAST, DAST, Container Scanning) are integrated in the MR Widget Security Report.

Note

  1. This is planned to go live without backend as a silent release. The changes are not visible to customers, so there is no Changelog for this MR.
  2. To enable it from backend or test it locally, please
  • Set enabled_reports for secret_scanning here
secret_scanning: true
  • Set mockuped secret_scanning endpoint here
window.gl.mrWidgetData.secret_scanning_comparison_path = '#{sast_reports_project_merge_request_path(@project, @merge_request) if @project.feature_available?(:sast)}'

Further Improvements

  1. Consolidate Issue Bodies - #207243 (closed)
  2. A follow up issue to refactor complete Mr-widget Security reports - #213966 (closed)

Screenshots

When secret scanning is enabled

  1. image
  2. image

When secret scanning is disabled (No changes)

image

Edited by Dheeraj Joshi

Merge request reports