Skip to content

Update dastProfileCreate mutation to include DAST Profile Schedules

Parent MR: !68031 (merged)

Child MR: !68050 (merged)

What does this MR do?

  1. Add Dast Profile Schedule to dastProfileCreate mutation.
  2. dastProfileCreate mutation can be used to create Dast Profile Schedules.
  3. Dast Profile Schedules will be used to generate recurring dast jobs.

Notes

The sequence of Merge, we will start from merging top MR to the master:

  1. !68031 (merged) -> Scheduling logic and DB changes
  2. !68046 (merged) -> dastProfileCreate mutation
  3. !68050 (merged) -> dastProfile fetch Query
  4. !66445 (merged) -> dastProfileUpdate mutation

Graphql Queries for Testing:

Create Profile Schedule mutation

Click to expand
mutation dastProfileCreate($input: DastProfileCreateInput!) {
  dastProfileCreate(input: $input) {
    dastProfile {
      editPath
    }
    pipelineUrl
    errors
  }
}

{
  "input": {
    "fullPath": "root/dast-test",
    "dastScannerProfileId": "gid://gitlab/DastScannerProfile/1",
    "dastSiteProfileId": "gid://gitlab/DastSiteProfile/1",
    "branchName": "main",
    "name": "A6",
    "description": "ad",
    "runAfterCreate": false,
     "dastProfileSchedule": {
      "startsAt": "Thu, 12 Aug 2021 06:48:50.845382000 UTC +00:00",
      "active": true,
      "cadence": {
        "duration": 1,
        "unit": "DAY"
      },
      "timezone": "Etc/UTC"
    }
  }
}

Screenshots or Screencasts (strongly suggested)

How to setup and validate locally (strongly suggested)

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

Does this MR contain changes to processing or storing of credentials or tokens, authorization and authentication methods or other items described in the security review guidelines? If not, then delete this Security section.

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team

Related to #330308 (closed)

Edited by Philip Cunningham

Merge request reports