GitLab / Govern:Threat Insights Features & Demos

We have added the `has_merge_request` filter for the vulnerabilities GraphQL API and it is available to use from GitLab 16.4.

API link: https://docs.gitlab.com/ee/api/graphql/reference/#queryvulnerabilities

GitLab issue: https://gitlab.com/gitlab-org/gitlab/-/issues/371313

Demo project: https://gitlab.com/gitlab-org/govern/threat-insights-demos/personal-test-projects/verify-371313-bala

Demo of new Vulnerability Report Grouping feature: https://gitlab.com/groups/gitlab-org/-/epics/10164

No description provided.

Issue:
Provide & edit dismissal reason in finding modal - https://gitlab.com/gitlab-org/gitlab/-/issues/412841

Epic:
Finding Dismissal Reasons - https://gitlab.com/groups/gitlab-org/-/epics/10282

Description of the left nav for security findings using a test project against a production instance of Gitlab

Related epic: https://gitlab.com/groups/gitlab-org/-/epics/8090

This video contains the brainstorming / pairing session for developing the dynamic MR widget content. The issue page is here: https://gitlab.com/gitlab-org/gitlab/-/issues/368592

Becka Lippert, Sr Product Designer for Secure: Threat Insights, walks through the FY23 UX Roadmap for Threat Insights. Epic: https://gitlab.com/groups/gitlab-org/-/epics/7607

No description provided.

This video is an MR Walkthrough which describes how the feature works. Here's the link to the MR: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/69353

Hi! my name is Thiago. I'm an engineering manager at GitLab, and sometimes I find bugs like this one: https://gitlab.com/gitlab-org/gitlab/-/issues/332805

This walkthrough will show off some of GitLab's Vulnerability Management features. You will see how both a developer and security team member can use them in their workflows while collaborating entirely inside GitLab.

0:00 Vulnerability management intro
1:09 Merge request security approvals setup
5:26 Security Dashboards
6:24 Vulnerability Report
9:02 Merge request security results
11:28 Security Center
14:37 Vulnerability details
15:30 Fixing vulnerabilities, no security approvals needed
16:53 Collaboration by creating issues from vulnerabilities
19:53 Using issue boards for vulnerability tracking

As of GitLab 13.9, you can now create Jira issues directly from vulnerability records in GitLab. See how to enable this new feature and see a quick demo of the integration.

This video walks you through the process on connecting Jira issues with your GitLab repository.

This is the first and initial idea to start creating issues in Jira for Vulnerabilities. This is the demo of the functionality currently available only in the code in MR: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/46771

Issue - https://gitlab.com/gitlab-org/gitlab/-/issues/229661

MR link: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/39533

This video demos the vulnerabilities over time chart which is going to be re-added in 13.1.

Issue:
- https://gitlab.com/gitlab-org/gitlab/-/issues/214595

Issue:
- https://gitlab.com/gitlab-org/gitlab/-/issues/215355

No description provided.

Issues:
- Create Merge Request from Vulnerability - https://gitlab.com/gitlab-org/gitlab/-/issues/216300
- Download Patch from Vulnerability - https://gitlab.com/gitlab-org/gitlab/-/issues/216300

No description provided.

No description provided.

An outline of the entire standalone vulnerability feature


Docs:
- https://docs.gitlab.com/ee/user/application_security/security_dashboard/

- https://docs.gitlab.com/ee/user/application_security/vulnerabilities/#standalone-vulnerability-pages

https://gitlab.com/gitlab-org/gitlab/-/issues/197494

Simple demo to configure the instance level dashboard

Added the multi-dismiss vulnerabilities feature on the the project security dashboard and vulnerability list.

The user should only be able to create one issue per vulnerability