Skip to content

DAST On-demand scans MVC - Initiate Scan - Create form - Frontend

What does this MR do?

This adds the actual form for running on-demand passive DAST scan against a given target URL.

In this iteration, clicking on the empty state's primary button in the On-demand scans page opens up a form for initiating a new scan.

The target URL currently is the only editable field. In the future, we will provide more options for selecting the pipeline's attached branch, as well different scan modes.

When the form is submitted, and if the pipeline was successfully initiated, the user is redirected to the pipeline's page.

Screenshots

State Preview
At rest Screen_Shot_2020-06-08_at_1.45.31_PM
Scan mode tooltip Screen_Shot_2020-06-08_at_1.45.33_PM
Attached branch tooltip Screen_Shot_2020-06-08_at_1.45.35_PM
Target URL tooltip Screen_Shot_2020-06-08_at_1.45.38_PM
Invalid target URL Screen_Shot_2020-06-08_at_1.45.46_PM
Valid target URL Screen_Shot_2020-06-08_at_1.46.01_PM
Submitted Screen_Shot_2020-06-08_at_1.46.04_PM
Submission failed Screen_Shot_2020-06-08_at_1.53.51_PM
At rest (mobile) Screen_Shot_2020-06-08_at_1.57.35_PM

Recording

on_demand_scans_recording

How to test this?

  • Enable the security_on_demand_scans_feature_flag feature flag:
echo "Feature.enable(:security_on_demand_scans_feature_flag)" | spring rails c
  • Navigate to the On-demand scans page in some project: <group>/<project>/-/on_demand_scans

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Edited by Paul Gascou-Vaillancourt

Merge request reports