Skip to content

Load group Vulnerability Report when only subgroups have projects

Paul Gascou-Vaillancourt requested to merge 357852-vulnerability-report-subgroups-projects into master

This changes the group Vulnerability Report's has_projects property implementation so that it accounts for sub-groups. This fixes an issue where, if a group did not have any projects but had sub-groups that did, the Vulnerability Report would be stuck in the empty state because the has_projects property evaluated to false as it only looked for top-level projects.

How to test this?

  1. Create a new group.
  2. In that group, create a sub-group.
  3. In the sub-group, create a project.
  4. Populate the project with some vulnerabilities (one way to do this would be to setup and run an on-demand scan against some website).
  5. Navigate to the parent group's Vulnerability Report.
    • The page should not render an empty state.
    • You should see the vulnerabilities from the project you've just created.

Related to #357852 (closed)

Merge request reports