diff --git a/doc/user/application_security/vulnerability_report/pipeline.md b/doc/user/application_security/vulnerability_report/pipeline.md index e60ac7d4c21538a5db346b78101afb5d2be73bd3..aa6a4f071151cac73fb1ddea53ae0017afe863ea 100644 --- a/doc/user/application_security/vulnerability_report/pipeline.md +++ b/doc/user/application_security/vulnerability_report/pipeline.md @@ -101,6 +101,29 @@ To view findings, either: NOTE: This does not apply for the vulnerabilities existing on the default branch. +## Change status of findings + +> [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/331408) in GitLab 16.7 [with a flag](../../../administration/feature_flags.md) named `pipeline_security_dashboard_graphql`. Disabled by default. + +FLAG: +On self-managed GitLab, by default this feature is not available. To make it available, an administrator can [enable the feature flag](../../../administration/feature_flags.md) named `pipeline_security_dashboard_graphql`. +On GitLab.com, this feature is not available. + +To change the status of findings to **Dismiss** or **Needs triage**: + +1. On the left sidebar, select **Search or go to** and find your project. +1. Select **Build > Pipelines**. +1. Select a pipeline and select the **Security** tab. +1. To select: + - One or more findings, select the checkbox beside each finding. + - All findings on the page, select the checkbox in the table header. +1. In the **Set status** dropdown list, select the desired status. +1. If the **Dismiss** status is chosen, select the desired reason in the **Set dismissal reason** dropdown list. +1. In the **Add a comment** input, you can provide a comment. For the **Dismiss** status, a comment is required. +1. Select **Change status**. + +The status of the selected findings is updated and the content of the security tab is refreshed. + ## Deduplication process When a pipeline contains jobs that produce multiple security reports of the same type, it is possible that the same