Skip to content

DAST On-Demand Scans - Use existing site profiles for scans - Frontend

What does this MR do?

This adds support for using existing DAST site profiles when running a DAST On-demand Scan.

How to test this?

  • Enable both feature flags.
echo "Feature.enable(:security_on_demand_scans_feature_flag)" | spring rails c
echo "Feature.enable(:security_on_demand_scans_site_profiles_feature_flag)" | spring rails c
  • Visit a project's on-demand scan form: /:group/:project/-/on_demand_scans/.

Screenshots

Description Screenshot
Site profiles could not be fetched Screen_Shot_2020-08-06_at_4.57.04_PM
Site profiles loaded successfully Screen_Shot_2020-08-04_at_5.00.18_PM
Site profile selected Screen_Shot_2020-08-05_at_11.52.31_AM
No site profiles created yet Screen_Shot_2020-08-04_at_5.04.57_PM

Recordings

Description Recording
An unknown error prevented the DAST site profiles from loading. In this case we don't show the form at all as it would't be functional without the profiles. Screen_Recording_2020-08-04_at_4.53.35_PM
Site profiles are fetched successfully, we can show the form. success
When selecting a site profile, its summary appears below the dropdown. site_profile_selected
User didn't create any DAST site profile yet, we show a button to create one. no_site_profiles

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Edited by Paul Gascou-Vaillancourt

Merge request reports