@@ -12055,7 +12055,7 @@ Represents vulnerability finding of a security report on the pipeline.
| ---- | ---- | ----------- |
| <aid="pipelinesecurityreportfindingconfidence"></a>`confidence` | [`String`](#string) | Type of the security report that found the vulnerability. |
| <aid="pipelinesecurityreportfindingdescription"></a>`description` | [`String`](#string) | Description of the vulnerability finding. |
| <aid="pipelinesecurityreportfindingfalsepositive"></a>`falsePositive` | [`Boolean`](#boolean) | Indicates whether the vulnerability is a false positive. Available only when feature flag `vulnerability_flags` is enabled. This flag is disabled by default, because the feature is experimental and is subject to change without notice. |
| <aid="pipelinesecurityreportfindingfalsepositive"></a>`falsePositive` | [`Boolean`](#boolean) | Indicates whether the vulnerability is a false positive. |
| <aid="pipelinesecurityreportfindingidentifiers"></a>`identifiers` | [`[VulnerabilityIdentifier!]!`](#vulnerabilityidentifier) | Identifiers of the vulnerabilit finding. |
| <aid="pipelinesecurityreportfindinglocation"></a>`location` | [`VulnerabilityLocation`](#vulnerabilitylocation) | Location metadata for the vulnerability. Its fields depend on the type of security scan that found the vulnerability. |
| <aid="pipelinesecurityreportfindingname"></a>`name` | [`String`](#string) | Name of the vulnerability finding. |
...
...
@@ -14416,7 +14416,7 @@ Represents a vulnerability.
| <aid="vulnerabilitydismissedat"></a>`dismissedAt` | [`Time`](#time) | Timestamp of when the vulnerability state was changed to dismissed. |
| <aid="vulnerabilitydismissedby"></a>`dismissedBy` | [`UserCore`](#usercore) | The user that dismissed the vulnerability. |
| <aid="vulnerabilityexternalissuelinks"></a>`externalIssueLinks` | [`VulnerabilityExternalIssueLinkConnection!`](#vulnerabilityexternalissuelinkconnection) | List of external issue links related to the vulnerability. (see [Connections](#connections)) |
| <aid="vulnerabilityfalsepositive"></a>`falsePositive` | [`Boolean`](#boolean) | Indicates whether the vulnerability is a false positive. Available only when feature flag `vulnerability_flags` is enabled. This flag is disabled by default, because the feature is experimental and is subject to change without notice. |
| <aid="vulnerabilityfalsepositive"></a>`falsePositive` | [`Boolean`](#boolean) | Indicates whether the vulnerability is a false positive. |
| <aid="vulnerabilityhassolutions"></a>`hasSolutions` | [`Boolean`](#boolean) | Indicates whether there is a solution available for this vulnerability. |
| <aid="vulnerabilityid"></a>`id` | [`ID!`](#id) | GraphQL ID of the vulnerability. |
| <aid="vulnerabilityidentifiers"></a>`identifiers` | [`[VulnerabilityIdentifier!]!`](#vulnerabilityidentifier) | Identifiers of the vulnerability. |
'Vulnerability|The scanner determined this vulnerability to be a false positive. Verify the evaluation before changing its status. %{linkStart}Learn more about false positive detection.%{linkEnd}',
'Vulnerability|The scanner determined this vulnerability to be a false positive. Verify the evaluation before changing its status. %{linkStart}Learn more about false positive detection.%{linkEnd}',
exports[`False positive alert component should render the alert message 1`] = `
<gl-alert-stub
dismisslabel="Dismiss"
primarybuttonlink=""
primarybuttontext=""
secondarybuttonlink=""
secondarybuttontext=""
title="False positive detected"
variant="warning"
>
<gl-sprintf-stub
message="The scanner determined this vulnerability to be a false positive. Verify the evaluation before changing its status. %{linkStart}Learn more about false positive detection.%{linkEnd}"
exports[`False positive badge component should render the alert badge 1`] = `
<div
class="gl-display-inline-block"
>
<gl-badge-stub
size="md"
variant="warning"
>
<gl-icon-stub
name="false-positive"
size="16"
/>
</gl-badge-stub>
<gl-popover-stub
cssclasses=""
placement="top"
target="[Function]"
title="False positive detected"
>
<gl-sprintf-stub
message="The scanner determined this vulnerability to be a false positive. Verify the evaluation before changing its status. %{linkStart}Learn more about false positive detection.%{linkEnd}"
'The scanner determined this vulnerability to be a false positive. Verify the evaluation before changing its status. %{linkStart}Learn more about false positive detection.%{linkEnd}';
describe('False positive alert component',()=>{
letwrapper;
constcreateWrapper=(provide)=>{
returnshallowMount(FalsePositiveAlert,{
provide:{
falsePositiveDocUrl:'/docs',
canViewFalsePositive:true,
...provide,
},
});
};
afterEach(()=>wrapper.destroy());
it('should render the alert message',()=>{
wrapper=createWrapper();
const{i18n}=wrapper.vm.$options;
expect(i18n.title).toEqual(TITLE);
expect(i18n.message).toEqual(MESSAGE);
expect(wrapper.element).toMatchSnapshot();
});
it('should not render the alert message when canViewFalsePositive is false',()=>{
'The scanner determined this vulnerability to be a false positive. Verify the evaluation before changing its status. %{linkStart}Learn more about false positive detection.%{linkEnd}';
describe('False positive badge component',()=>{
letwrapper;
constcreateWrapper=(provide)=>{
returnshallowMount(FalsePositiveBadge,{
provide:{
falsePositiveDocUrl:'/docs',
canViewFalsePositive:true,
...provide,
},
});
};
afterEach(()=>wrapper.destroy());
it('should render the alert badge',()=>{
wrapper=createWrapper();
const{i18n}=wrapper.vm.$options;
expect(i18n.title).toEqual(TITLE);
expect(i18n.message).toEqual(MESSAGE);
expect(wrapper.element).toMatchSnapshot();
});
it('should not render the alert badge when canViewFalsePositive is false',()=>{
msgid "Vulnerability|The scanner determined this vulnerability to be a false positive. Verify the evaluation before changing its status. %{linkStart}Learn more about false positive detection.%{linkEnd}"
msgstr ""
msgid "Vulnerability|The unmodified response is the original response that had no mutations done to the request"
