Skip to content

Draft: Add code_flows property to vulnerability details

Gal Katz requested to merge gkatz_add_code_flows_to_sast_report into master

What does this MR do?

Adds an allowed details field - code_flows, consisting of a nested array of code_flow_node. Each array describes a detected flow.
This field will be used to hold cross-function cross-file results with source -> propagation -> propagation... -> propagation -> sink like flows.

What are the relevant issue numbers?

https://gitlab.com/gitlab-org/gitlab/-/issues/455559+s
https://gitlab.com/gitlab-org/security-products/security-report-schemas/-/issues/21+s

Checklist

Edited by Gal Katz

Merge request reports