Skip to content

Security Dashboard is empty if security job fails

Summary

If pipeline succeeded but one of the security jobs fails, vulnerabilities of that type won't be visible on the Security dashboard.

Steps to reproduce

  1. Make sure that SecDashboard isn't empty
  2. Run a pipeline and make one security job to fail
  3. Go back to SecDashboard.

What is the current bug behavior?

Vulnerabilities are missing from the dashboard

What is the expected correct behavior?

Old Vulnerabilities are visible anyway.

Output of checks

This bug happens on GitLab.com

Possible fixes

¯\_(ツ)_/¯

The fix isn't possible with the way how we fetch vulnerabilities now (from latest pipeline). To fix this issue, the mechanism of fetching vulnerabilities should be adjusted.

/cc @gonzoyumo @dzaporozhets

Depends on

#10250 (closed)

Edited by Seth Berger