Resolve "Limit Group Security Dashboard to selected types of vulnerabilities"

What does this MR do?

Limit all scopes for Group Security Dashboard to not show results from "hidden" report types

What are the relevant issue numbers?

https://gitlab.com/gitlab-org/gitlab-ee/issues/9393

Does this MR meet the acceptance criteria?

• Changelog entry added, if necessary
• Documentation created/updated via this MR
• Documentation reviewed by technical writer or follow-up review issue created
• Tests added for this feature/bug
• Tested in all supported browsers
• Conforms to the code review guidelines
• Conforms to the merge request performance guidelines
• Conforms to the style guides
• Conforms to the database guides
• Link to e2e tests MR added if this MR has Requires e2e tests label. See the Test Planning Process.
• EE specific content should be in the top level /ee folder
• For a paid feature, have we considered GitLab.com plans, how it works for groups, and is there a design for promoting it to users who aren't on the correct plan?
• Security reports checked/validated by reviewer

Closes #9393 (closed)

ee/spec/controllers/groups/security/vulnerabilities_controller_spec.rb

@@ -219,7 +219,7 @@ def create_vulnerabilities(count, project, options = {})
           group.add_developer(user)
         end
 
-        it 'returns vulnerabilities counts' do
+        it 'returns vulnerabilities counts for :sast and :dependency_scanning' do
           subject
 
           expect(response).to have_gitlab_http_status(200)
@@ -351,16 +351,16 @@ def create_vulnerabilities(count, project, options = {})
 
         it 'returns filtered history if filters are enabled' do
           travel_to(Time.zone.parse('2019-02-10')) do
-            get :history, params: { group_id: group, report_type: %w[dependency_scanning sast] }, format: :json
+            get :history, params: { group_id: group, report_type: %w[dependency_scanning sast dast] }, format: :json
           end
 
           expect(response).to have_gitlab_http_status(200)
           expect(json_response).to be_an(Hash)
-          expect(json_response['total']).to eq({ '2018-11-10' => 5, '2018-11-12' => 2 })
+          expect(json_response['total']).to eq({ '2018-11-10' => 5, '2018-11-12' => 4 })
           expect(json_response['critical']).to eq({ '2018-11-10' => 1 })
           expect(json_response['high']).to eq({ '2018-11-10' => 2 })
-          expect(json_response['medium']).to eq({})
-          expect(json_response['low']).to eq({ '2018-11-10' => 2, '2018-11-12' => 2 })
+          expect(json_response['medium']).to eq({ '2018-11-12' => 1 })
+          expect(json_response['low']).to eq({ '2018-11-10' => 2, '2018-11-12' => 3 })
           expect(response).to match_response_schema('vulnerabilities/history', dir: 'ee')
         end
       end