Skip to content

Check merge requests for spam

Alex Buijs requested to merge check-mrs-for-spam into master

What does this MR do and why?

This MR onboards merge requests to spamcheck. The current version of spamcheck will always return an ALLOW verdict for any Generic spammable. This will allow us to analyze the results before implementing more restrictive actions.

Issue: https://gitlab.com/gitlab-org/gl-security/security-engineering/security-automation/spam/spamcheck/-/issues/7

Epic: https://gitlab.com/groups/gitlab-org/-/epics/10118

How to set up and validate locally

  1. Enable spamcheck in GDK
  2. Create a merge request in a public project. You should see logs emitted from the spamcheck container showing that the merge request was checked for spam.
  3. Update the title or description of the merge request. This should result in another call to spamcheck.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Alex Buijs

Merge request reports