Skip to content

Convert to actual GraphQL types

rossfuhrman requested to merge rf-implement-graphql-types into master

What does this MR do?

Addresses Convert Mutations::Security::CiConfiguration to use actual GraphQL types instead of GraphQL::Types::JSON

This change is behind the security_sast_configuration feature flag.

Screenshots

Expand for text of request from screenshot:
mutation{
  configureSast(
    input: { projectPath: "nu-group/yarnit",
              configuration: {
                global: [
                    { field: "SECURE_ANALYZERS_PREFIX",
                      defaultValue: "registry.gitlab.com/gitlab-org/security-products/analyzers",
                      value: "registry.example.com"
                    },
                    { field: "SAST_EXCLUDED_PATHS",
                      defaultValue: "spec, test, tests, tmp",
                      value: "docs"
                    },
                    { field: "SAST_ANALYZER_IMAGE_TAG",
                      defaultValue: "2",
                      value: "2"
                    }
                ],
                pipeline: [
                  { field: "SEARCH_MAX_DEPTH",
                    defaultValue: "4",
                    value: "4"
                  },
                  { field: "stage",
                    defaultValue: "test",
                    value: ""
                  }
                ]
              }
    }
  ){
    status,
    successPath,
    errors   
  }
}

Screen_Shot_2020-09-02_at_1.35.51_PM

Screen_Shot_2020-09-02_at_2.24.57_PM

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team
Edited by rossfuhrman

Merge request reports