Skip to content

Add Corpus management to security configuration page

- requested to merge 280593-corpus-management-configuration into master

What does this MR do?

Issue: #280593 (closed)

In the security configuration page, we add behind a feature flag the Corpus Management section to the Coverage Fuzzing feature card. Coverage fuzzing is a special kind of security analyzer CI job that runs and generates vulnerabilities and corpuses. Corpuses are an artifact unique to fuzzers. Screenshots are available in the parent issue #280593 (closed)

NOTE: Corpus management is a few milestones from release.

Designs: #326926[MVC-D2-CONFIG_project-security_testing-ultimate-ADO.png]

Add corpus management row

Feature flag off

Screen_Shot_2021-09-13_at_11.17.02_AM

Feature flag on

Coverage fuzzing disabled

Screen_Shot_2021-09-09_at_4.41.59_PM

Coverage fuzzing enabled

Screen_Shot_2021-09-09_at_4.43.46_PM

Screenshots or Screencasts (strongly suggested)

How to setup and validate locally (strongly suggested)

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

Does this MR contain changes to processing or storing of credentials or tokens, authorization and authentication methods or other items described in the security review guidelines? If not, then delete this Security section.

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team

Related to #280593 (closed)

Edited by -

Merge request reports