Skip to content

Update configureDependencyScanning mutation

Paul Gascou-Vaillancourt requested to merge 282533-update-gql-mutation into master

What does this MR do?

As part of &4496 (closed), we've had to update the configureSecretDetection mutation to support an input variable instead of fullPath (those changes are part of !58230 (merged)). Since both configureSecretDetection and configureDependencyScanning are triggered by the same component and need to have the same schema, this MR updates configureDependencyScanning to align with Secret Detection.

Note: The configureDependencyScanning mutation isn't actually used at the moment. We have implemented the frontend ahead of the backend and this whole feature is currently behind a disabled-by-default feature flag. Thus, there is no risk in changing this as we'll be able to properly verify those changes as part of the backend MR.

Screenshots (strongly suggested)

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team

Related to #282533 (closed)

Merge request reports

Loading