Skip to content

Add GraphQL mutation for creating Dast::Profiles

Background

a Dast::Profile is a description of how to run an on-demand dast scan. it is compromised of a name and description and is associated with both a DastSiteProfile and a DastScannerProfile.

What does this MR do?

adds new ee-only mutation for creating Dast::Profiles behind a feature flag.

Why?

this will help move us towards enabling customers to run scans without always having to select a DastSiteProfile and DastScannerProfile combination when running a dast on-demand scan i.e. a DastProfile promotes this grouping to a named abstraction.

Notes

Related Issue(s)

#295244 (closed)

Feature Flag

echo "Feature.enable(:dast_saved_scans)" | rails c

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team
Edited by Philip Cunningham

Merge request reports