Skip to content

Fix custody report CSV for projects inside subgroup

What does this MR do and why?

Chain of custody report was not honouring merge requests from projects within a subgroup.

Screenshots or screen recordings

Screenshots are required for UI changes, and strongly recommended for all other merge requests.

How to set up and validate locally

  1. Create a group.
  2. Create a subgroup.
  3. Create a project inside the subgroup.
  4. Create an MR in the project and merge the MR using the same author that committed the code.
  5. Visit the compliance report dashboard, for example: https://gdk.test:3000/groups/flightjs/-/security/compliance_dashboard
  6. Export the CSV using the button at the top "List of all merge commits".
  7. The CSV should include the merge commit of the project that was created inside the subgroup. On master branch you will see that the CSV report will not include this merge commit.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Closes #366201 (closed)

Merge request reports