Skip to content

Set default vulnerability_states for empty states

Sashi Kumar Kumaresan requested to merge sk/fix-default-vuln-states into master

What does this MR do and why?

This MR fixes a bug introduced as a part of Add worker to sync approval rules with preexist... (!141095 - merged) (behind feature flag) when an approval rule has vulnerability_states: [] it is not considered as newly_detected. As per docs:

An empty array, [], covers the same statuses as newly_detected. It is equivalent to specifying ['new_needs_triage', 'new_dismissed'].

More context: !143147 (comment 1748494745)

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Merge request reports