This issue is to track the engineering efforts of the Security widget using the new [Merge request reports framework](https://design.gitlab.com/regions/merge-request-reports). Note: This work is behind the `refactor_security_extension` feature flag. You'll also need to enable the `refactor_mr_widget_extensions` feature flag. ### Resources - [Related UX Issue](https://gitlab.com/gitlab-org/gitlab/-/issues/336175) - [Figma Design Specifications](https://www.figma.com/file/qEddyqCrI7kPSBjGmwkZzQ/Component-library?node-id=40462%3A43785) - [Merge request reports framework](https://design.gitlab.com/regions/merge-request-reports) ### Development status | Title | Description | Status | Issue | | ------ | ------ | ------ | ------ | | Multi endpoint polling support | This is required to make the core functionality work | Complete | https://gitlab.com/gitlab-org/gitlab/-/issues/361757 | | MR Widget Core | The Core functionality will add the feature flag, display a security widget with data and allow clicking on the vulnerability to open a modal | Complete | https://gitlab.com/gitlab-org/gitlab/-/issues/338283 | | Summary highlights | The collapsed state needs to display the number of new vulnerabilities in a nutshell | Ready | https://gitlab.com/gitlab-org/gitlab/-/issues/365502 | | Fix text | The `new` keyword needs to be bold | Complete | https://gitlab.com/gitlab-org/gitlab/-/issues/364679 | | CE/EE view | We need to display two different versions for CE and EE | Ready | https://gitlab.com/gitlab-org/gitlab/-/issues/365505 | | Modal missing buttons | Currently, when the modal is opened, the action buttons are missing | ready | https://gitlab.com/gitlab-org/gitlab/-/issues/365506 | | Add a tooltip about source | extends user education by adding an information tooltip | refinement | https://gitlab.com/gitlab-org/gitlab/-/issues/361562 | ### Telemetry https://gitlab.com/gitlab-org/gitlab/-/issues/343128