Skip to content

Gracefully handle bad dependency scanner input

Stan Hu requested to merge sh-handle-bad-dependency-scanner-input into master

What does this MR do and why?

We saw that in https://gitlab.com/gitlab-com/gl-infra/production/-/issues/6051 there was one CI artifact that had a dependency_files input but a null dependencies. We now do stronger type checking to ensure the field is an array.

Relates to #346971 (closed)

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Stan Hu

Merge request reports