[go: up one dir, main page]

Draft: Implement trigger Secret Scanning FP detection workflow

SAM FIGUEROArequested to merge
sf/feature/trigger-secret-fp-detction into master

What does this MR do and why?

Implement trigger and data ingestion workflow for Secret Scanning FP detection

  • Hook into after_create_commit on vulnerabilities to trigger secret detection false positive workflows for high/critical severity secret_detection report types

    • Add TriggerSecretDetectionFalsePositiveDetectionWorkflowWorker with no-op implementation
    • Add comprehensive specs to validate trigger conditions and worker invocation
    • Follow existing SAST FP workflow pattern for consistency
    • Add parameterized tests for secret_detection report type with various severity levels

  • Refs: https://gitlab.com/gitlab-org/gitlab/-/issues/577436

Changelog: added EE: true

References

Screenshots or screen recordings

Before After

How to set up and validate locally

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Merge request reports