Skip to content

Create instance-level security charts component

What does this MR do?

Create instance-level security charts component

  • create separate components just for the instance-level security charts
  • modify the init file to use the component
  • update CSS of severity component
  • add tests

NOTE: This component is only being created in this MR, but not used; the usage will come in the next MR.

How to reproduce

https://gitlab.com/snippets/1956676

Modify the first line of ee/app/assets/javascripts/pages/security/dashboard/show/index.js to be the following

import initFirstClassSecurityDashboard from 'ee/security_dashboard/security_charts_init';

Screenshots

I changes the CSS to the first_class_vulnerabilities_severity.vue component. From a global search, there are only three instances of this component (image below), so I have included screen shots for each instance below. The UX of how the widget now looks has already been approved in !37770 (merged)

image

Type Before After
Group Security Dashboard Widget Closed before_group_security_dashboard_widget_closed after_group_security_dashboard_widget_closed
Group Security Dashboard Widget Open before_group_security_dashboard_widget_open after_group_security_dashboard_widget_open
Instance Security Dashboard Widget closed Before_-_widget_closed After_-_widget_closed
Instance Security Dashboard Widget open Before_-_widget_opn After_-_widget_open
What the new component would look like if it were showing - widget closed - new_page_-_widget_closed
What the new component would look like if it were showing - widget open - new_page_-_widget_open
What the new component would look like if it were showing - widget open - image

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team

Related to #230412 (closed)

Edited by Alexander Turinske

Merge request reports