Resolve "Move License Management reports logic for the Merge Request widget to the backend"
What does this MR do?
The security request reports on the merge request widget currently use the generated artifacts to generate License Management reports on the frontend. This mr moves that functionality to the backend.
Does this MR meet the acceptance criteria
-
Checkout this branch and run gdk -
have project with license management (you can import our test project to your local instance -
Create an mr for the project that you imported -
hit http://<local_instance>/gitlab-org/ruby-bundler/merge_requests/<mr_number>/license_management_reports.json -
Licenses found by license management should be listed -
Go to any merge request page and write window.gl.mrWidgetData.license_management_comparsion_path
to js console in your browser it should show end point that you can hit to get comparison report.
Conformity
-
Changelog entry -
Documentation created/updated or follow-up review issue created -
Code review guidelines -
Merge request performance guidelines -
Style guides -
Database guides -
Separation of EE specific content
Performance and testing
-
Review and add/update tests for this feature/bug. Consider all test levels. See the Test Planning Process. -
Tested in all supported browsers
Security
If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:
-
Label as security and @ mention @gitlab-com/gl-security/appsec
-
The MR includes necessary changes to maintain consistency between UI, API, email, or other methods -
Security reports checked/validated by a reviewer from the AppSec team
Edited by Can Eldem