Skip to content

Add field hasSolutions for Vulnerability

Tetiana Chupryna requested to merge bool-auto-fix into master

What does this MR do?

backend part for #258801 (closed)

issue #258802 (closed)

in this MR we add a field for Vulnerability to see if it has solutions available. At this point, we don't differentiate between auto fix and not auto fix, we just show if there are available solutions.

GraphiQL

{
  vulnerability(id: "gid://gitlab/Vulnerability/113" )  {
    title
    hasSolutions
  }
}

Output

{
  "data": {
    "vulnerability": {
      "title": "Modification of Assumed-Immutable Data (MAID) in lodash",
      "hasSolutions": true
    }
  }
}

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team
Edited by Tetiana Chupryna

Merge request reports