gitlab_vulnerabilities

Canonical vulnerabilities shown on GitLab project Security Dashboards. Detected and confirmed rows represent open security posture; deleted_at marks rows no longer returned by a complete scan.

id Primary key: Unique identifier for the row.
source_id Foreign key: Stable GitLab vulnerability identifier.
project_id Foreign key: ID of the GitLab project containing the vulnerability.
title string: Vulnerability title.
description string: Detailed vulnerability description.
solution string: Recommended remediation supplied by GitLab.
state string: GitLab lifecycle state, such as detected, confirmed, dismissed, or resolved.
severity string: GitLab severity, such as info, low, medium, high, critical, or unknown.
report_type string: Security report type, such as sast, dependency_scanning, container_scanning, dast, or secret_detection.
scanner_external_id Foreign key: Stable external identifier for the scanner, including Semgrep or Gitleaks when supplied by GitLab.
scanner_name string: Scanner display name.
primary_identifier Foreign key: Primary CVE, CWE, or vendor identifier.
identifiers jsonb: All vulnerability identifiers and their metadata as returned by GitLab.
source_url string: URL or path to the vulnerability in GitLab.
false_positive boolean: Whether GitLab identifies the vulnerability as a false positive, including dismissal reason false_positive.
has_remediations boolean: Whether GitLab reports an available remediation.
detected_at date: Timestamp when the vulnerability was first detected.
confirmed_at date: Timestamp when the vulnerability was confirmed.
dismissed_at date: Timestamp when the vulnerability was dismissed.
resolved_at date: Timestamp when the vulnerability was resolved.
updated_at date: Timestamp when the vulnerability was last updated in GitLab.
synced_at date: Timestamp when Datacloud last observed the vulnerability.
deleted_at date: Timestamp when a complete scan stopped returning the vulnerability.