Use DAST_API_SPECIFICATION not DAST_API_OPENAPI

changed milestone to %15.3

added Category:DAST backend devopssecure groupdynamic analysis sectionsec typemaintenance labels

Suggested Reviewers (beta)

The individuals below may be good candidates to participate in the review based on various factors.

You can use slash commands in comments to quickly assign /assign_reviewer @user1.

Suggested Reviewers
`@rymai`, `@sabrams`, `@abrandl`, `@tigerwnz`, `@grzesiek`

If you do not believe these suggestions are useful, please apply the label Bad Suggested Reviewer. You can also provide feedback for this feature on this issue: https://gitlab.com/gitlab-org/gitlab/-/issues/357923.

Automatically generated by Suggested Reviewers Bot - an experimental ML-based recommendation engine created by ~"group::applied ml".

	1 Warning
	Please add a merge request subtype to this merge request.

1 Message

CHANGELOG missing:

If you want to create a changelog entry for GitLab FOSS, add the Changelog trailer to the commit message you want to add to the changelog.

If you want to create a changelog entry for GitLab EE, also add the EE: true trailer to your commit message.

If this merge request doesn't need a CHANGELOG entry, feel free to ignore this message.

Reviewer roulette

Changes that require review have been detected!

Please refer to the table below for assigning reviewers and maintainers suggested by Danger in the specified category:

Category	Reviewer	Maintainer
backend	Tarun Vellishetty (`@tvellishetty`) (UTC+5.5)	Pavel Shutsin (`@pshutsin`) (UTC+2)

To spread load more evenly across eligible reviewers, Danger has picked a candidate for each review slot, based on their timezone. Feel free to override these selections if you think someone else would be better-suited or use the GitLab Review Workload Dashboard to find other available reviewers.

To read more on how to use the reviewer roulette, please take a look at the Engineering workflow and code review guidelines. Please consider assigning a reviewer or maintainer who is a domain expert in the area of the merge request.

Once you've decided who will review this merge request, assign them as a reviewer! Danger does not automatically notify them for you.

If needed, you can retry the danger-review job that generated this comment.

Generated by Danger

added 1 commit

1a60d723 - Use DAST_API_SPECIFICATION not DAST_API_OPENAPI

Compare with previous version

changed title from Alias DAST_API_SPECIFICATION with DAST_API_OPENAPI to Use DAST_API_SPECIFICATION not DAST_API_OPENAPI

changed the description

Allure report

allure-report-publisher generated test report!

review-qa-blocking: test report for 1a60d723

expand test summary

+-----------------------------------------------------------------------------------------+
|                                     suites summary                                      |
+------------------------------------+--------+--------+---------+-------+-------+--------+
|                                    | passed | failed | skipped | flaky | total | result |
+------------------------------------+--------+--------+---------+-------+-------+--------+
| Verify                             | 12     | 0      | 1       | 12    | 13    | ❗     |
| Create                             | 28     | 0      | 1       | 28    | 29    | ❗     |
| Feature flag handler sanity checks | 9      | 0      | 0       | 9     | 9     | ❗     |
| Plan                               | 47     | 0      | 1       | 47    | 48    | ❗     |
| Manage                             | 34     | 0      | 2       | 36    | 36    | ❗     |
| Protect                            | 2      | 0      | 0       | 2     | 2     | ❗     |
| Secure                             | 2      | 0      | 0       | 2     | 2     | ❗     |
| Package                            | 0      | 0      | 1       | 0     | 1     | ➖     |
| Configure                          | 0      | 0      | 1       | 0     | 1     | ➖     |
| Version sanity check               | 0      | 0      | 1       | 0     | 1     | ➖     |
+------------------------------------+--------+--------+---------+-------+-------+--------+
| Total                              | 134    | 0      | 8       | 136   | 142   | ❗     |
+------------------------------------+--------+--------+---------+-------+-------+--------+

@philipcunningham - please see the following guidance and update this merge request.

	1 Warning
	Please add a subtype label to this merge request.

If you have added a type label and do not feel the purpose of this merge request matches one of the subtypes labels, please resolve this discussion.

changed the description

resolved all threads

@craigmsmith can you review this please?

requested review from @craigmsmith

@atiwari71 @derekferguson just wanted to give you a heads-up that when we want to use dast-api for on-demand, we'll need to make sure we send DAST_API_OPENAPI. we may want to handle this with a feature flag.

/cc @cam_swords