Savas Vedova activity https://gitlab.com/svedova 2026-03-19T12:11:20Z tag:gitlab.com,2026-03-19:5221856351 Savas Vedova commented on issue #585090 at GitLab.org / GitLab 2026-03-19T12:11:20Z svedova Savas Vedova [email protected]

Context: !217657 (comment 2983878619)

tag:gitlab.com,2026-03-19:5221850457 Savas Vedova commented on issue #577922 at GitLab.org / GitLab 2026-03-19T12:09:59Z svedova Savas Vedova [email protected]

Closing this issue for now as the product does not prioritize this for now.

tag:gitlab.com,2026-03-19:5221848682 Savas Vedova closed issue #577922: Display AI feedback on false positives on finding details modal at GitLab.org / GitLab 2026-03-19T12:09:35Z svedova Savas Vedova [email protected] tag:gitlab.com,2026-03-19:5221820094 Savas Vedova commented on epic #21021 at GitLab.org 2026-03-19T12:02:47Z svedova Savas Vedova [email protected]

The MR got merged: gitlab!227883 (merged)

I'll wait till it's in prod to verify this issue.

tag:gitlab.com,2026-03-19:5221805268 Savas Vedova commented on merge request !227529 at GitLab.org / GitLab 2026-03-19T11:58:59Z svedova Savas Vedova [email protected]

@sming-gitlab / @dpisek ahh I was convinced isPipelineRunning = !isPipelineActive because both of them has hasPipeline check. If we remove isPipelineRunning and use only !isPipelineActive, we'll then show running status for cases where hasPipeline is false. Now I understand, sorry about the confusion.

That said, I think the following is more readable:

pipelineState() {
  if (!this.mr) return 'loading';
  if (!this.mr.pipelineIid) return 'no-pipeline';
  if (this.mr.isPipelineActive) return 'running';
  return 'complete';
} 

// ...

statusMessage() {
  if (this.pipelineState === 'running') return s__('MrReports|Waiting for pipeline to complete.');
  if (this.pipelineState === 'no-pipeline') return s__('MrReports|No pipelines started yet...');
  return '';
},

We can also use CONSTANTS instead of checking by string, so we can see what states are there by simply looking at these constants at the top of file. WDYT?

tag:gitlab.com,2026-03-19:5221584754 Savas Vedova deleted project branch 21021-vulnerabilities-by-age-project-level at GitLab.org / GitLab 2026-03-19T11:02:23Z svedova Savas Vedova [email protected]

Savas Vedova (76e62bfc) at 19 Mar 11:02

tag:gitlab.com,2026-03-19:5221584260 Savas Vedova pushed to project branch master at GitLab.org / GitLab 2026-03-19T11:02:17Z svedova Savas Vedova [email protected]

Savas Vedova (8588604f) at 19 Mar 11:02

Merge branch '21021-vulnerabilities-by-age-project-level' into 'mas...

... and 1 more commit

tag:gitlab.com,2026-03-19:5221581572 Savas Vedova accepted merge request !227883: Add vulnerabilities by age chart to project dashboard at GitLab.org / GitLab 2026-03-19T11:01:39Z svedova Savas Vedova [email protected]

What does this MR do and why?

Add vulnerabilities by age chart to project dashboard

Implement the Vulnerabilities By Age chart for the project-level security dashboard, bringing feature parity with the group-level dashboard while appropriately simplifying for project-level scope.

References

Screenshots or screen recordings

gdk.test_3000_gitlab-org_security-reports_-security_dashboard_vulnerabilitiesByAge.groupBy_reportType__1

How to set up and validate locally

  1. Enable feature flag: project_total_risk_score_chart (http://gdk.test:3000/rails/features/project_vulnerabilities_by_age_chart)
  2. Make sure to have a project with vulnerabilities
  3. Visit Secure > Security Dashboard
  4. Validate Vulnerabilities By Age is showing as expected

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Related to gitlab-org#21021

tag:gitlab.com,2026-03-19:5221382934 Savas Vedova commented on issue #589205 at GitLab.org / GitLab 2026-03-19T10:15:16Z svedova Savas Vedova [email protected]

As a side note: should including the applied filters in the PDF export be tracked as a separate issue?

@bryan_valdiviezo do you mean displaying them in the PDF export?

Regarding the implementation, sounds good, I'll see what I can deliver this week.

tag:gitlab.com,2026-03-19:5221318272 Savas Vedova commented on issue #593986 at GitLab.org / GitLab 2026-03-19T10:01:04Z svedova Savas Vedova [email protected]

I'm picking this up.

tag:gitlab.com,2026-03-19:5221271881 Savas Vedova commented on merge request !227529 at GitLab.org / GitLab 2026-03-19T09:50:39Z svedova Savas Vedova [email protected]

@dpisek / @sming-gitlab the confusion for me is that isPipelineRunning is literally !isPipelineComplete in the current implementation. I was suggesting dropping the computed property because we can simply do !isPipelineComplete. So I'm not sure if the current implementation reflects the logic mentioned above.

tag:gitlab.com,2026-03-19:5221226562 Savas Vedova commented on merge request !227883 at GitLab.org / GitLab 2026-03-19T09:39:28Z svedova Savas Vedova [email protected]

@lorenzvanherwaarden since Total Risk Score got merged, we can now view the Dashboard with all 3 charts. I updated the MR description with the screenshot.

Can you please re-approve so that we can merge this one as well?

tag:gitlab.com,2026-03-19:5221225050 Savas Vedova commented on merge request !227883 at GitLab.org / GitLab 2026-03-19T09:39:08Z svedova Savas Vedova [email protected]

Adjusted label to typefeature featureaddition

tag:gitlab.com,2026-03-19:5221213851 Savas Vedova pushed to project branch 21021-vulnerabilities-by-age-project-level at GitLab.org / GitLab 2026-03-19T09:36:39Z svedova Savas Vedova [email protected]

Savas Vedova (76e62bfc) at 19 Mar 09:36

Add vulnerabilities by age chart to project dashboard

... and 262 more commits

tag:gitlab.com,2026-03-19:5221146918 Savas Vedova pushed to project branch 579941-stop-polling-when-mr-page-is-no-longer-visible at GitLab.org / GitLab 2026-03-19T09:22:38Z svedova Savas Vedova [email protected]

Savas Vedova (89bf7077) at 19 Mar 09:22

Add pauseOnDocumentHidden opt-in option to Poll

... and 267 more commits

tag:gitlab.com,2026-03-19:5221132132 Savas Vedova commented on issue #591112 at GitLab.org / GitLab 2026-03-19T09:19:15Z svedova Savas Vedova [email protected]

The MR now got merged 👍 Waiting for it to go in production so that I can test it.

tag:gitlab.com,2026-03-19:5221041369 Savas Vedova commented on merge request !227844 at GitLab.org / GitLab 2026-03-19T08:57:21Z svedova Savas Vedova [email protected]

Awesome, thank you both! I'll go ahead and update Poll.js to and make the new feature opt-in.

tag:gitlab.com,2026-03-19:5221001008 Savas Vedova commented on merge request !227529 at GitLab.org / GitLab 2026-03-19T08:47:35Z svedova Savas Vedova [email protected]

@sming-gitlab great work! Left a question 🏓

tag:gitlab.com,2026-03-19:5220997913 Savas Vedova commented on merge request !227529 at GitLab.org / GitLab 2026-03-19T08:46:58Z svedova Savas Vedova [email protected]

question @sming-gitlab is this needed? Can't we use !isPipelineComplete, which implies the pipeline is still running? It feels a bit redundant.

tag:gitlab.com,2026-03-19:5220925363 Savas Vedova commented on merge request !227864 at GitLab.org / GitLab 2026-03-19T08:27:31Z svedova Savas Vedova [email protected]

@dpisek left a nitpick, please feel free to implement it in a follow up MR if you find value in it.

I'm going to approve and set auto merge as I don't want to block the MR for coding style 👍