RELEASE NOTE - [Information about vulnerabilities on the Dependency List page are now actionable as they link to the Stand Alone Vulnerability page](https://gitlab.com/gitlab-org/gitlab/-/issues/321086). This is a follow-up from https://gitlab.com/gitlab-org/gitlab/-/issues/195928 ### Summary Right now on Dependency List page, we have information about vulnerabilities, but it's not actionable. We need to provide a link to the standalone vulnerability page so users can interact with vulnerabilities. ### Current limitation We parse info for the Dependency List page on-fly. That means that vulnerabilities come not from the database but from the report itself. To link Dependency List with Standalone vulnerabilities, firstly, we need to change the way we select vulnerabilities to the Dependency List payload. ### Implementation plan #### ~frontend * [ ] Link vulnerabilities to standalone/first-class vulnerability pages * [ ] Response scheme states the same, returned vulnerabilities will have `name`, `severity` (as it was before) and additional new fields `id` (id of Vulnerability`) and `url` (link to Vulnerability Page) #### ~backend * [ ] https://gitlab.com/gitlab-org/gitlab/-/issues/321086 weight 8 Merge to dependency payload vulnerabilities stored in db. (Right now, data about vulnerabilities is taken from the parsed report). Vulnerabilities added to dependencies payload should be [standalone vulnerabilities](/gitlab-org/gitlab/-/blob/master/gitlab-org/gitlab/-/blob/master/gitlab-org/gitlab/-/blob/master/groups/gitlab-org/-/epics/634) * [x] https://gitlab.com/gitlab-org/gitlab/-/issues/214095 weight 1 Add to `DependencyEntity::VulnerabilityEntity` field `id` (id of vulnerability) and `url` which is the path to the [vulnerability's object page](https://gitlab.com/gitlab-org/gitlab/-/issues/36739) #### ~documentation * Update the [Dependency List's screenshot](https://docs.gitlab.com/ee/user/application_security/dependency_list/) and table column description ### Availability and Testing SET will extend the current Dependency List End to End test to include Vulnerability verification. https://gitlab.com/gitlab-org/quality/testcases/-/issues/1672