Skip to content

Update Ruleset package with custom errors and fix Null Vulnerability bug

Zach Rice requested to merge fix-null-vulns into master

What does this MR do?

Fixes a bug where null could be the value for vulnerabilities if the project being scanned does not have a valid ruleset config file.

Two pipelines demonstrating this:

	var vulns []Issue
	for _, vuln := range r.Vulnerabilities {
		if vulnerabilityEnabled(vuln, disabledIds) {
			vulns = append(vulns, vuln)
		}
	}
	r.Vulnerabilities = vulns

was getting hit

What are the relevant issue numbers?

gitlab-org/gitlab#235358 (closed)

Does this MR meet the acceptance criteria?

Edited by Zach Rice

Merge request reports