Security Products community contributions merge request report - 2024-05-20

Hi @amarpatel @thiagocsf @agroleau @twoodham,

Recently opened community merge requests

These merge requests meet the following criteria:

• Open
• Created within the last 7 days
• Author not in the gitlab-org group

We'd like to ask you to determine whether:

• The MR is ready or further changes are required
• The MR should be assigned to a reviewer
• The MR should be closed down

• gitlab-org/security-products/gemnasium-db!28144 (merged) Fix CVE-2014-0114 Community contribution, bugfunctional, devopssecure, groupvulnerability research, sectionsec, typebug, workflowready for review
• gitlab-org/security-products/gemnasium-db!28142 (merged) Fix CVE-2019-16771 Community contribution, bugfunctional, devopssecure, groupvulnerability research, sectionsec, typebug, workflowready for review
• gitlab-org/security-products/gemnasium-db!28141 (merged) Fix CVE-2021-40110 Community contribution, bugfunctional, devopssecure, groupvulnerability research, sectionsec, typebug, workflowready for review
• gitlab-org/security-products/gemnasium-db!28135 (merged) Fix CVE-2014-3625 Community contribution, bugfunctional, devopssecure, groupvulnerability research, sectionsec, typebug, workflowready for review
• gitlab-org/security-products/gemnasium-db!28128 (merged) Fix CVE-2016-4977 Community contribution, bugfunctional, devopssecure, groupvulnerability research, sectionsec, typebug, workflowready for review

Old Community contribution merge requests

These merge requests meet the following criteria:

• Open
• Labelled Community contribution and not labelled coach will finish
• Created more than 2 months ago

We'd like to ask you to determine whether:

• The MR is ready or further changes are required
• The MR should be taken over by the team
• The MR should be closed down

• gitlab-org/security-products/analyzers/trivy-k8s-wrapper!27 (closed) Draft: Allow configuration of Trivy database repository 1st contribution, Community contribution, automation:author-reminded, devopssecure, featureaddition, groupcomposition analysis, sectionsec, typefeature, workflowin dev
• gitlab-org/security-products/sast-rules!429 (closed) Support TS and modules in node_sqli_injection rule Category:SAST, Community contribution, Danger bot, automation:reviewers-reminded, backend, devopssecure, featureenhancement, groupstatic analysis, linked-issue, sectionsec, typefeature, workflowready for review
• gitlab-org/security-products/sast-rules!425 (closed) Support TS and modules in server-side-template-injection rule 1st contribution, Category:SAST, Community contribution, backend, devopssecure, featureenhancement, groupstatic analysis, idle, linked-issue, sectionsec, typefeature, workflowin dev
• gitlab-org/security-products/sast-rules!421 (closed) Support TS and modules in sandbox_code_injection rule 1st contribution, Category:SAST, Community contribution, backend, devopssecure, featureenhancement, groupstatic analysis, idle, linked-issue, sectionsec, typefeature, workflowin dev

For the Merge Requests triaged please check off the box in front of the given MR.

Thanks for your help!

This report is generated by this triage-ops policy.