Skip to content

Show security reports summary in pipelines' Security Dashboard

What does this MR do?

This removes the vulnerability and scanned resources counts from the Pipeline Security Dashboard's filters in favor of a dedicated SecurityReportsSummary that takes care of displaying the information for each report type above the dashboard.

Note: when a given scanner detected 0 vulnerabilities, we want to show that information. However, scanners that aren't configured currently report 0 vulnerabilities, which results in slightly misleading information in the summary as we can't tell non-configured scanners from the ones that didn't detect any vulnerabilities. This will be addressed in a follow-up backend issue: #223073 (closed)

How to test this?

  • Enable the feature flag:
echo "Feature.enable(:pipelines_security_report_summary)" | spring rails c
  • Sign-in as the root user
  • Visit a pipeline that has some security scanners setup an navigate to the Security tab

Screenshots

Summary expanded Summary collapsed
image image

Recording

summary

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Edited by Paul Gascou-Vaillancourt

Merge request reports