Add Dependency Scanning vulnerability interactions to the Dependency List
Problem to solve
The Dependency List shows all the dependencies in a project.
One of the relevant information people are interested in for this view is the security status for each dependency. In this way, they can easily check (and prove to Compliance) that the app doesn't contain any insecure component.
We already have Dependency Scanning results available. We should link this information in the Dependency List view.
This is different from the Security Dashboard because here we have a dependency-centric view, listing both vulnerable and safe components. The Security Dashboard is vulnerability-centric and shows only vulnerable ones.
In the original MVC the vulnerability modal was not able to be added to the Dependency List.
This issue is to implement the vulnerability modal side drawer, as outlined in issue https://gitlab.com/gitlab-org/gitlab-ee/issues/10077 and https://gitlab.com/gitlab-org/gitlab-ee/issues/11940.
Implementation plan
-
Backend -
Frontend