Skip to content

Add new DAST schema fields to backend for API Fuzzing

What does this MR do?

  1. Adding new security report fields to Vulnerabilities::Finding model.
  2. Expose new fields through the vulnerability serializer

Issues with new fields:

Related to #260432 (closed)

Screenshots

Manual test of vulnerability_findings with new fields marked in red:

image

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • [-] Label as security and @ mention @gitlab-com/gl-security/appsec
  • [-] The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • [-] Security reports checked/validated by a reviewer from the AppSec team
Edited by Michael Eddington

Merge request reports