Humanised strings for branch exceptions for scan result policy
What does this MR do and why?
This MR partially resolves #418744 (closed)
Policy drawer has humanised strings for branch exceptions
in security result policy
UI mode
is only supported for project
level, for group
level exceptions can be added via yaml
mode
Screenshots or screen recordings
Screenshots are required for UI changes, and strongly recommended for all other merge requests.
VERSION 1
Project Level | Group Level |
---|---|
VERSION 2
Project Level | Group Level |
---|---|
project_level.mov | group_level.mov |
How to set up and validate locally
Enable feature flag
Feature.enable(:security_policies_branch_exceptions)
-
Go to a project
-
Open Secure -> Policies
-
Create new
scan result policy
-
Add
security
scan rule orlicense
scan rule -
Add some branch exceptions (if local project has no branches, you can add some)
-
Create policy and go back to policy list Secure -> Policies
-
Click on created policy -> result for project level will be in drawer description
-
Go to a group
-
Open Secure -> Policies
-
Create new
scan result policy
-
Open
yaml
mode, you can addbranch exceptions
for a rulebranch_exceptions: - { name: ${BRANCH_NAME}, full_path: ${PATH_TO_PROJECT} } - { name: ${BRANCH_NAME_2 }, full_path: ${PATH_TO_PROJECT } }
-
Create policy and go back to policy list Secure -> Policies
-
Make sure that there is path in brackets right next to a branch name
MR acceptance checklist
This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.
-
I have evaluated the MR acceptance checklist for this MR.
Related to #418744 (closed)