From 430502c6d3ac69a48f07482dbe8e866a21b70f3d Mon Sep 17 00:00:00 2001
From: GitLab Bot <gitlab-bot@gitlab.com>
Date: Tue, 25 Jun 2024 15:28:32 +0000
Subject: [PATCH] Add latest changes from gitlab-org/gitlab@master

---
 .rubocop_todo/gitlab/bounded_contexts.yml     |    3 -
 .rubocop_todo/graphql/ordered_fields.yml      |    5 -
 .../graphql/unnecessary_field_alias.yml       |    1 -
 .rubocop_todo/layout/line_length.yml          |    1 -
 .rubocop_todo/rails/strong_params.yml         |   17 -
 .rubocop_todo/rspec/context_wording.yml       |    1 -
 .../rspec/factory_bot/avoid_create.yml        |    1 -
 .rubocop_todo/rspec/named_subject.yml         |    3 -
 .rubocop_todo/rspec/return_from_stub.yml      |    1 -
 .../style/inline_disable_annotation.yml       |    2 -
 CHANGELOG.md                                  |   30 +
 GITALY_SERVER_VERSION                         |    2 +-
 .../gitlab_pages/components/deployment.vue    |  310 +++-
 .../gitlab_pages/components/deployments.vue   |    2 +-
 .../delete_pages_deployment.mutation.graphql  |   11 +
 .../restore_pages_deployment.mutation.graphql |   11 +
 .../list/components/issues_list_app.vue       |    2 +
 .../components/model_create.vue               |    1 +
 .../components/model_version_create.vue       |    1 +
 .../projects/edit/components/app.vue          |    4 +-
 .../filtered_search_bar_root.vue              |    7 +-
 .../javascripts/vue_shared/constants.js       |    9 +-
 .../list/components/issuable_list_root.vue    |    2 +-
 .../layouts/settings_block_component.haml     |    2 +-
 .../layouts/settings_block_component.rb       |    4 +-
 .../concerns/render_access_tokens.rb          |    2 +-
 app/controllers/concerns/snippets_sort.rb     |    2 +-
 .../concerns/sorting_preference.rb            |    8 +-
 .../concerns/web_hooks/hook_actions.rb        |    2 +-
 .../import/github_groups_controller.rb        |    2 +-
 .../projects/project_members_controller.rb    |    4 +-
 .../settings/repository_controller.rb         |    4 +-
 .../user_settings/user_settings_controller.rb |    2 +-
 .../types/container_repository_tag_type.rb    |    1 +
 app/graphql/types/merge_request_type.rb       |   12 +-
 app/models/concerns/issuable.rb               |    4 +-
 app/models/concerns/protected_ref_access.rb   |    3 -
 .../protected_ref_deploy_key_access.rb        |    7 +
 app/models/container_repository.rb            |    1 +
 .../integrations/project_test_data.rb         |    4 +-
 app/services/issues/base_service.rb           |    5 +-
 app/services/merge_requests/base_service.rb   |    4 +-
 app/views/dashboard/todos/_todo.html.haml     |    2 -
 app/views/notify/new_review_email.html.haml   |    1 -
 app/views/notify/new_review_email.text.erb    |    2 -
 ...rge_requests_closing_issues_project_id.yml |    9 +
 .../backfill_ml_model_metadata_project_id.yml |    9 +
 ...bility_external_issue_links_project_id.yml |    9 +
 db/docs/merge_requests_closing_issues.yml     |    1 +
 db/docs/ml_model_metadata.yml                 |    1 +
 .../vulnerability_external_issue_links.yml    |    4 +-
 ...d_to_vulnerability_external_issue_links.rb |    9 +
 ...ect_id_to_merge_requests_closing_issues.rb |    9 +
 ...357_add_project_id_to_ml_model_metadata.rb |    9 +
 ...lity_external_issue_links_on_project_id.rb |   16 +
 ...lity_external_issue_links_project_id_fk.rb |   16 +
 ...external_issue_links_project_id_trigger.rb |   25 +
 ...ability_external_issue_links_project_id.rb |   40 +
 ...e_requests_closing_issues_on_project_id.rb |   16 +
 ...e_requests_closing_issues_project_id_fk.rb |   16 +
 ...uests_closing_issues_project_id_trigger.rb |   25 +
 ...erge_requests_closing_issues_project_id.rb |   40 +
 ...8_index_ml_model_metadata_on_project_id.rb |   16 +
 ...359_add_ml_model_metadata_project_id_fk.rb |   16 +
 ...dd_ml_model_metadata_project_id_trigger.rb |   25 +
 ...e_backfill_ml_model_metadata_project_id.rb |   40 +
 db/schema_migrations/20240624135059           |    1 +
 db/schema_migrations/20240624135060           |    1 +
 db/schema_migrations/20240624135061           |    1 +
 db/schema_migrations/20240624135062           |    1 +
 db/schema_migrations/20240624135063           |    1 +
 db/schema_migrations/20240624142010           |    1 +
 db/schema_migrations/20240624142011           |    1 +
 db/schema_migrations/20240624142012           |    1 +
 db/schema_migrations/20240624142013           |    1 +
 db/schema_migrations/20240624142014           |    1 +
 db/schema_migrations/20240624142357           |    1 +
 db/schema_migrations/20240624142358           |    1 +
 db/schema_migrations/20240624142359           |    1 +
 db/schema_migrations/20240624142360           |    1 +
 db/schema_migrations/20240624142361           |    1 +
 db/structure.sql                              |   74 +-
 doc/api/graphql/reference/index.md            |   42 +-
 doc/api/merge_request_approvals.md            |  157 +-
 .../ai_gateway/decisions/002_proxy.md         |    4 +-
 .../blueprints/work_items/index.md            |    2 +
 doc/integration/saml.md                       |   13 +-
 doc/user/gitlab_duo/turn_on_off.md            |    1 +
 doc/user/markdown.md                          |   13 +-
 doc/user/packages/yarn_repository/index.md    |   12 +-
 .../lib/gitlab/backup/cli/targets/database.rb |    2 +-
 lib/container_registry/tag.rb                 |    1 +
 ...erge_requests_closing_issues_project_id.rb |   10 +
 .../backfill_ml_model_metadata_project_id.rb  |   10 +
 ...ability_external_issue_links_project_id.rb |   10 +
 lib/gitlab/ci/config.rb                       |    5 +-
 .../security/validators/schema_validator.rb   |   16 +-
 .../cluster-image-scanning-report-format.json | 1190 +++++++++++++
 .../container-scanning-report-format.json     | 1123 ++++++++++++
 .../coverage-fuzzing-report-format.json       | 1100 ++++++++++++
 .../schemas/15.1.3/dast-report-format.json    | 1505 +++++++++++++++++
 .../dependency-scanning-report-format.json    | 1111 ++++++++++++
 .../schemas/15.1.3/sast-report-format.json    | 1095 ++++++++++++
 .../secret-detection-report-format.json       | 1119 ++++++++++++
 .../cluster-image-scanning-report-format.json | 1190 +++++++++++++
 .../container-scanning-report-format.json     | 1123 ++++++++++++
 .../coverage-fuzzing-report-format.json       | 1100 ++++++++++++
 .../schemas/15.1.4/dast-report-format.json    | 1505 +++++++++++++++++
 .../dependency-scanning-report-format.json    | 1111 ++++++++++++
 .../schemas/15.1.4/sast-report-format.json    | 1095 ++++++++++++
 .../secret-detection-report-format.json       | 1119 ++++++++++++
 lib/gitlab/ci/pipeline/chain/command.rb       |    4 +
 .../ci/pipeline/chain/config/process.rb       |   29 +-
 lib/gitlab/ci/pipeline/seed/build.rb          |   10 -
 lib/gitlab/ci/yaml_processor.rb               |    8 +-
 lib/gitlab/data_builder/issuable.rb           |    3 +-
 locale/gitlab.pot                             |   84 +-
 .../formatters/test_metrics_formatter.rb      |   11 +-
 .../concerns/issuable_collections_spec.rb     |    2 +-
 .../concerns/sorting_preference_spec.rb       |    2 +-
 spec/features/dashboard/issues_spec.rb        |   14 +
 .../components/deployment_spec.js             |  202 +++
 spec/frontend/gitlab_pages/mock_data.js       |    2 +-
 .../components/model_create_spec.js           |    1 +
 .../components/model_version_create_spec.js   |    1 +
 .../container_repository_tag_type_spec.rb     |    2 +-
 .../projects/ml/model_registry_helper_spec.rb |    2 +-
 spec/helpers/visibility_level_helper_spec.rb  |   56 +-
 spec/lib/container_registry/tag_spec.rb       |    1 +
 ...requests_closing_issues_project_id_spec.rb |   15 +
 ...kfill_ml_model_metadata_project_id_spec.rb |   15 +
 ...ty_external_issue_links_project_id_spec.rb |   15 +
 spec/lib/gitlab/ci/charts_spec.rb             |   82 +-
 spec/lib/gitlab/data_builder/issuable_spec.rb |   24 +-
 .../gitlab/suggestions/commit_message_spec.rb |   22 +-
 .../suggestions/file_suggestion_spec.rb       |   28 +-
 .../gitlab/suggestions/suggestion_set_spec.rb |   20 +-
 .../tracking/destinations/snowplow_spec.rb    |   24 +-
 spec/lib/gitlab/utils/lazy_attributes_spec.rb |    4 +-
 spec/lib/gitlab/workhorse_spec.rb             |    6 +-
 .../google_api/cloud_platform/client_spec.rb  |   16 +-
 spec/lib/peek/views/detailed_view_spec.rb     |    4 +-
 spec/lib/security/weak_passwords_spec.rb      |    6 +-
 .../projects/menus/repository_menu_spec.rb    |   12 +-
 spec/lib/uploaded_file_spec.rb                |   46 +-
 ...ty_external_issue_links_project_id_spec.rb |   33 +
 ...requests_closing_issues_project_id_spec.rb |   33 +
 ...kfill_ml_model_metadata_project_id_spec.rb |   33 +
 spec/models/concerns/issuable_spec.rb         |   29 +-
 spec/models/container_repository_spec.rb      |    3 +-
 .../api/ci/runner/jobs_request_post_spec.rb   |    2 +-
 .../protected_ref_access_shared_examples.rb   |   77 +-
 ...d_ref_deploy_key_access_shared_examples.rb |  117 +-
 spec/tasks/cache_rake_spec.rb                 |    2 +-
 spec/tasks/gitlab/cleanup_rake_spec.rb        |   22 +-
 .../rollback/bump_ci_sequences_rake_spec.rb   |    2 +-
 .../db/truncate_legacy_tables_rake_spec.rb    |    2 +-
 spec/tasks/gitlab/sidekiq_rake_spec.rb        |   10 +-
 spec/tooling/danger/sidekiq_queues_spec.rb    |    4 +-
 spec/tooling/graphql/docs/renderer_spec.rb    |  176 +-
 tooling/danger/suggestor.rb                   |    2 +-
 161 files changed, 18469 insertions(+), 580 deletions(-)
 delete mode 100644 .rubocop_todo/graphql/ordered_fields.yml
 create mode 100644 app/assets/javascripts/gitlab_pages/queries/delete_pages_deployment.mutation.graphql
 create mode 100644 app/assets/javascripts/gitlab_pages/queries/restore_pages_deployment.mutation.graphql
 create mode 100644 db/docs/batched_background_migrations/backfill_merge_requests_closing_issues_project_id.yml
 create mode 100644 db/docs/batched_background_migrations/backfill_ml_model_metadata_project_id.yml
 create mode 100644 db/docs/batched_background_migrations/backfill_vulnerability_external_issue_links_project_id.yml
 create mode 100644 db/migrate/20240624135059_add_project_id_to_vulnerability_external_issue_links.rb
 create mode 100644 db/migrate/20240624142010_add_project_id_to_merge_requests_closing_issues.rb
 create mode 100644 db/migrate/20240624142357_add_project_id_to_ml_model_metadata.rb
 create mode 100644 db/post_migrate/20240624135060_index_vulnerability_external_issue_links_on_project_id.rb
 create mode 100644 db/post_migrate/20240624135061_add_vulnerability_external_issue_links_project_id_fk.rb
 create mode 100644 db/post_migrate/20240624135062_add_vulnerability_external_issue_links_project_id_trigger.rb
 create mode 100644 db/post_migrate/20240624135063_queue_backfill_vulnerability_external_issue_links_project_id.rb
 create mode 100644 db/post_migrate/20240624142011_index_merge_requests_closing_issues_on_project_id.rb
 create mode 100644 db/post_migrate/20240624142012_add_merge_requests_closing_issues_project_id_fk.rb
 create mode 100644 db/post_migrate/20240624142013_add_merge_requests_closing_issues_project_id_trigger.rb
 create mode 100644 db/post_migrate/20240624142014_queue_backfill_merge_requests_closing_issues_project_id.rb
 create mode 100644 db/post_migrate/20240624142358_index_ml_model_metadata_on_project_id.rb
 create mode 100644 db/post_migrate/20240624142359_add_ml_model_metadata_project_id_fk.rb
 create mode 100644 db/post_migrate/20240624142360_add_ml_model_metadata_project_id_trigger.rb
 create mode 100644 db/post_migrate/20240624142361_queue_backfill_ml_model_metadata_project_id.rb
 create mode 100644 db/schema_migrations/20240624135059
 create mode 100644 db/schema_migrations/20240624135060
 create mode 100644 db/schema_migrations/20240624135061
 create mode 100644 db/schema_migrations/20240624135062
 create mode 100644 db/schema_migrations/20240624135063
 create mode 100644 db/schema_migrations/20240624142010
 create mode 100644 db/schema_migrations/20240624142011
 create mode 100644 db/schema_migrations/20240624142012
 create mode 100644 db/schema_migrations/20240624142013
 create mode 100644 db/schema_migrations/20240624142014
 create mode 100644 db/schema_migrations/20240624142357
 create mode 100644 db/schema_migrations/20240624142358
 create mode 100644 db/schema_migrations/20240624142359
 create mode 100644 db/schema_migrations/20240624142360
 create mode 100644 db/schema_migrations/20240624142361
 create mode 100644 lib/gitlab/background_migration/backfill_merge_requests_closing_issues_project_id.rb
 create mode 100644 lib/gitlab/background_migration/backfill_ml_model_metadata_project_id.rb
 create mode 100644 lib/gitlab/background_migration/backfill_vulnerability_external_issue_links_project_id.rb
 create mode 100644 lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/cluster-image-scanning-report-format.json
 create mode 100644 lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/container-scanning-report-format.json
 create mode 100644 lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/coverage-fuzzing-report-format.json
 create mode 100644 lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/dast-report-format.json
 create mode 100644 lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/dependency-scanning-report-format.json
 create mode 100644 lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/sast-report-format.json
 create mode 100644 lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/secret-detection-report-format.json
 create mode 100644 lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/cluster-image-scanning-report-format.json
 create mode 100644 lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/container-scanning-report-format.json
 create mode 100644 lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/coverage-fuzzing-report-format.json
 create mode 100644 lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/dast-report-format.json
 create mode 100644 lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/dependency-scanning-report-format.json
 create mode 100644 lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/sast-report-format.json
 create mode 100644 lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/secret-detection-report-format.json
 create mode 100644 spec/frontend/gitlab_pages/components/deployment_spec.js
 create mode 100644 spec/lib/gitlab/background_migration/backfill_merge_requests_closing_issues_project_id_spec.rb
 create mode 100644 spec/lib/gitlab/background_migration/backfill_ml_model_metadata_project_id_spec.rb
 create mode 100644 spec/lib/gitlab/background_migration/backfill_vulnerability_external_issue_links_project_id_spec.rb
 create mode 100644 spec/migrations/20240624135063_queue_backfill_vulnerability_external_issue_links_project_id_spec.rb
 create mode 100644 spec/migrations/20240624142014_queue_backfill_merge_requests_closing_issues_project_id_spec.rb
 create mode 100644 spec/migrations/20240624142361_queue_backfill_ml_model_metadata_project_id_spec.rb

diff --git a/.rubocop_todo/gitlab/bounded_contexts.yml b/.rubocop_todo/gitlab/bounded_contexts.yml
index 0db494d6011..b8a34e664f5 100644
--- a/.rubocop_todo/gitlab/bounded_contexts.yml
+++ b/.rubocop_todo/gitlab/bounded_contexts.yml
@@ -3186,7 +3186,6 @@ Gitlab/BoundedContexts:
     - 'ee/app/policies/issuable_metric_image_policy.rb'
     - 'ee/app/policies/iteration_policy.rb'
     - 'ee/app/policies/iterations/cadence_policy.rb'
-    - 'ee/app/policies/merge_request/review_llm_summary_policy.rb'
     - 'ee/app/policies/merge_request_diff_policy.rb'
     - 'ee/app/policies/path_lock_policy.rb'
     - 'ee/app/policies/product_analytics/dashboard_policy.rb'
@@ -3327,7 +3326,6 @@ Gitlab/BoundedContexts:
     - 'ee/app/services/ee/commits/create_service.rb'
     - 'ee/app/services/ee/deploy_keys/create_service.rb'
     - 'ee/app/services/ee/deployments/update_environment_service.rb'
-    - 'ee/app/services/ee/draft_notes/publish_service.rb'
     - 'ee/app/services/ee/emails/base_service.rb'
     - 'ee/app/services/ee/emails/confirm_service.rb'
     - 'ee/app/services/ee/emails/create_service.rb'
@@ -3549,7 +3547,6 @@ Gitlab/BoundedContexts:
     - 'ee/app/services/llm/resolve_vulnerability_service.rb'
     - 'ee/app/services/llm/review_merge_request_service.rb'
     - 'ee/app/services/llm/summarize_new_merge_request_service.rb'
-    - 'ee/app/services/llm/summarize_submitted_review_service.rb'
     - 'ee/app/services/member_roles/base_service.rb'
     - 'ee/app/services/member_roles/create_service.rb'
     - 'ee/app/services/member_roles/delete_service.rb'
diff --git a/.rubocop_todo/graphql/ordered_fields.yml b/.rubocop_todo/graphql/ordered_fields.yml
deleted file mode 100644
index aa381d11a73..00000000000
--- a/.rubocop_todo/graphql/ordered_fields.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-# Cop supports --autocorrect.
-GraphQL/OrderedFields:
-  Exclude:
-    - 'app/graphql/types/merge_request_type.rb'
diff --git a/.rubocop_todo/graphql/unnecessary_field_alias.yml b/.rubocop_todo/graphql/unnecessary_field_alias.yml
index 7fe0ebb6c9c..8b4d7469871 100644
--- a/.rubocop_todo/graphql/unnecessary_field_alias.yml
+++ b/.rubocop_todo/graphql/unnecessary_field_alias.yml
@@ -16,5 +16,4 @@ GraphQL/UnnecessaryFieldAlias:
     - 'ee/app/graphql/types/dast/profile_type.rb'
     - 'ee/app/graphql/types/dora/performance_score_connection_type.rb'
     - 'ee/app/graphql/types/group_release_stats_type.rb'
-    - 'ee/app/graphql/types/merge_requests/review_llm_summary_type.rb'
     - 'ee/app/graphql/types/requirements_management/requirement_type.rb'
diff --git a/.rubocop_todo/layout/line_length.yml b/.rubocop_todo/layout/line_length.yml
index e5a4b639f03..f3f9324eeaf 100644
--- a/.rubocop_todo/layout/line_length.yml
+++ b/.rubocop_todo/layout/line_length.yml
@@ -3268,7 +3268,6 @@ Layout/LineLength:
     - 'spec/helpers/timeboxes_helper_spec.rb'
     - 'spec/helpers/users/callouts_helper_spec.rb'
     - 'spec/helpers/users_helper_spec.rb'
-    - 'spec/helpers/visibility_level_helper_spec.rb'
     - 'spec/helpers/webpack_helper_spec.rb'
     - 'spec/initializers/6_validations_spec.rb'
     - 'spec/initializers/direct_upload_support_spec.rb'
diff --git a/.rubocop_todo/rails/strong_params.yml b/.rubocop_todo/rails/strong_params.yml
index 168d6b01fd6..1cf28bdd514 100644
--- a/.rubocop_todo/rails/strong_params.yml
+++ b/.rubocop_todo/rails/strong_params.yml
@@ -61,7 +61,6 @@ Rails/StrongParams:
     - 'app/controllers/concerns/params_backward_compatibility.rb'
     - 'app/controllers/concerns/preferred_language_switcher.rb'
     - 'app/controllers/concerns/preview_markdown.rb'
-    - 'app/controllers/concerns/render_access_tokens.rb'
     - 'app/controllers/concerns/renders_blob.rb'
     - 'app/controllers/concerns/requires_allowlisted_monitoring_client.rb'
     - 'app/controllers/concerns/search_rate_limitable.rb'
@@ -69,11 +68,8 @@ Rails/StrongParams:
     - 'app/controllers/concerns/snippets/blobs_actions.rb'
     - 'app/controllers/concerns/snippets/send_blob.rb'
     - 'app/controllers/concerns/snippets_actions.rb'
-    - 'app/controllers/concerns/snippets_sort.rb'
-    - 'app/controllers/concerns/sorting_preference.rb'
     - 'app/controllers/concerns/spammable_actions/captcha_check/html_format_actions_support.rb'
     - 'app/controllers/concerns/uploads_actions.rb'
-    - 'app/controllers/concerns/web_hooks/hook_actions.rb'
     - 'app/controllers/concerns/web_hooks/hook_log_actions.rb'
     - 'app/controllers/concerns/wiki_actions.rb'
     - 'app/controllers/dashboard/projects_controller.rb'
@@ -114,7 +110,6 @@ Rails/StrongParams:
     - 'app/controllers/import/fogbugz_controller.rb'
     - 'app/controllers/import/gitea_controller.rb'
     - 'app/controllers/import/github_controller.rb'
-    - 'app/controllers/import/github_groups_controller.rb'
     - 'app/controllers/import/manifest_controller.rb'
     - 'app/controllers/import/source_users_controller.rb'
     - 'app/controllers/invites_controller.rb'
@@ -203,7 +198,6 @@ Rails/StrongParams:
     - 'app/controllers/projects/pipelines/tests_controller.rb'
     - 'app/controllers/projects/pipelines_controller.rb'
     - 'app/controllers/projects/pipelines_settings_controller.rb'
-    - 'app/controllers/projects/project_members_controller.rb'
     - 'app/controllers/projects/protected_branches_controller.rb'
     - 'app/controllers/projects/protected_refs_controller.rb'
     - 'app/controllers/projects/protected_tags_controller.rb'
@@ -221,7 +215,6 @@ Rails/StrongParams:
     - 'app/controllers/projects/settings/ci_cd_controller.rb'
     - 'app/controllers/projects/settings/integration_hook_logs_controller.rb'
     - 'app/controllers/projects/settings/integrations_controller.rb'
-    - 'app/controllers/projects/settings/repository_controller.rb'
     - 'app/controllers/projects/settings/slacks_controller.rb'
     - 'app/controllers/projects/snippets_controller.rb'
     - 'app/controllers/projects/starrers_controller.rb'
@@ -250,7 +243,6 @@ Rails/StrongParams:
     - 'app/controllers/user_settings/identities_controller.rb'
     - 'app/controllers/user_settings/personal_access_tokens_controller.rb'
     - 'app/controllers/user_settings/ssh_keys_controller.rb'
-    - 'app/controllers/user_settings/user_settings_controller.rb'
     - 'app/controllers/users/namespace_visits_controller.rb'
     - 'app/controllers/users/pins_controller.rb'
     - 'app/controllers/users/terms_controller.rb'
@@ -259,7 +251,6 @@ Rails/StrongParams:
     - 'app/controllers/web_ide/remote_ide_controller.rb'
     - 'ee/app/controllers/admin/ai/feature_settings_controller.rb'
     - 'ee/app/controllers/admin/ai/self_hosted_models_controller.rb'
-    - 'ee/app/controllers/admin/audit_logs_controller.rb'
     - 'ee/app/controllers/admin/elasticsearch_controller.rb'
     - 'ee/app/controllers/admin/emails_controller.rb'
     - 'ee/app/controllers/admin/geo/application_controller.rb'
@@ -280,13 +271,11 @@ Rails/StrongParams:
     - 'ee/app/controllers/country_states_controller.rb'
     - 'ee/app/controllers/ee/admin/application_settings_controller.rb'
     - 'ee/app/controllers/ee/admin/dev_ops_report_controller.rb'
-    - 'ee/app/controllers/ee/admin/users_controller.rb'
     - 'ee/app/controllers/ee/autocomplete_controller.rb'
     - 'ee/app/controllers/ee/dashboard/projects_controller.rb'
     - 'ee/app/controllers/ee/groups/autocomplete_sources_controller.rb'
     - 'ee/app/controllers/ee/groups/group_members_controller.rb'
     - 'ee/app/controllers/ee/groups/milestones_controller.rb'
-    - 'ee/app/controllers/ee/groups/settings/repository_controller.rb'
     - 'ee/app/controllers/ee/groups/work_items_controller.rb'
     - 'ee/app/controllers/ee/groups_controller.rb'
     - 'ee/app/controllers/ee/import/github_controller.rb'
@@ -297,22 +286,18 @@ Rails/StrongParams:
     - 'ee/app/controllers/ee/projects/merge_requests_controller.rb'
     - 'ee/app/controllers/ee/projects/mirrors_controller.rb'
     - 'ee/app/controllers/ee/projects/project_members_controller.rb'
-    - 'ee/app/controllers/ee/projects/settings/merge_requests_controller.rb'
-    - 'ee/app/controllers/ee/projects/settings/repository_controller.rb'
     - 'ee/app/controllers/ee/projects_controller.rb'
     - 'ee/app/controllers/ee/registrations_controller.rb'
     - 'ee/app/controllers/ee/repositories/git_http_client_controller.rb'
     - 'ee/app/controllers/ee/repositories/git_http_controller.rb'
     - 'ee/app/controllers/ee/sessions_controller.rb'
     - 'ee/app/controllers/ee/users_controller.rb'
-    - 'ee/app/controllers/explore/dependencies_controller.rb'
     - 'ee/app/controllers/groups/analytics/application_controller.rb'
     - 'ee/app/controllers/groups/analytics/ci_cd_analytics_controller.rb'
     - 'ee/app/controllers/groups/analytics/coverage_reports_controller.rb'
     - 'ee/app/controllers/groups/analytics/cycle_analytics_controller.rb'
     - 'ee/app/controllers/groups/analytics/productivity_analytics_controller.rb'
     - 'ee/app/controllers/groups/analytics/tasks_by_type_controller.rb'
-    - 'ee/app/controllers/groups/audit_events_controller.rb'
     - 'ee/app/controllers/groups/contribution_analytics_controller.rb'
     - 'ee/app/controllers/groups/dependencies_controller.rb'
     - 'ee/app/controllers/groups/epic_boards_controller.rb'
@@ -343,7 +328,6 @@ Rails/StrongParams:
     - 'ee/app/controllers/projects/analytics/issues_analytics_controller.rb'
     - 'ee/app/controllers/projects/approver_groups_controller.rb'
     - 'ee/app/controllers/projects/approvers_controller.rb'
-    - 'ee/app/controllers/projects/audit_events_controller.rb'
     - 'ee/app/controllers/projects/dependencies_controller.rb'
     - 'ee/app/controllers/projects/feature_flag_issues_controller.rb'
     - 'ee/app/controllers/projects/integrations/jira/issues_controller.rb'
@@ -366,7 +350,6 @@ Rails/StrongParams:
     - 'ee/app/controllers/registrations/company_controller.rb'
     - 'ee/app/controllers/registrations/groups_controller.rb'
     - 'ee/app/controllers/registrations/welcome_controller.rb'
-    - 'ee/app/controllers/remote_development/workspaces_feature_flag_controller.rb'
     - 'ee/app/controllers/security/application_controller.rb'
     - 'ee/app/controllers/security/projects_controller.rb'
     - 'ee/app/controllers/smartcard_controller.rb'
diff --git a/.rubocop_todo/rspec/context_wording.yml b/.rubocop_todo/rspec/context_wording.yml
index 7819e81f082..937069edc6b 100644
--- a/.rubocop_todo/rspec/context_wording.yml
+++ b/.rubocop_todo/rspec/context_wording.yml
@@ -1383,7 +1383,6 @@ RSpec/ContextWording:
     - 'spec/helpers/todos_helper_spec.rb'
     - 'spec/helpers/tree_helper_spec.rb'
     - 'spec/helpers/users_helper_spec.rb'
-    - 'spec/helpers/visibility_level_helper_spec.rb'
     - 'spec/helpers/web_hooks/web_hooks_helper_spec.rb'
     - 'spec/helpers/whats_new_helper_spec.rb'
     - 'spec/initializers/1_acts_as_taggable_spec.rb'
diff --git a/.rubocop_todo/rspec/factory_bot/avoid_create.yml b/.rubocop_todo/rspec/factory_bot/avoid_create.yml
index 0fa0d7cb067..dd203c10e8f 100644
--- a/.rubocop_todo/rspec/factory_bot/avoid_create.yml
+++ b/.rubocop_todo/rspec/factory_bot/avoid_create.yml
@@ -313,7 +313,6 @@ RSpec/FactoryBot/AvoidCreate:
     - 'spec/helpers/users/group_callouts_helper_spec.rb'
     - 'spec/helpers/users_helper_spec.rb'
     - 'spec/helpers/version_check_helper_spec.rb'
-    - 'spec/helpers/visibility_level_helper_spec.rb'
     - 'spec/helpers/web_hooks/web_hooks_helper_spec.rb'
     - 'spec/helpers/whats_new_helper_spec.rb'
     - 'spec/helpers/wiki_helper_spec.rb'
diff --git a/.rubocop_todo/rspec/named_subject.yml b/.rubocop_todo/rspec/named_subject.yml
index 7ad96aec4a8..ba650163e2e 100644
--- a/.rubocop_todo/rspec/named_subject.yml
+++ b/.rubocop_todo/rspec/named_subject.yml
@@ -443,13 +443,10 @@ RSpec/NamedSubject:
     - 'ee/spec/lib/gitlab/llm/templates/fill_in_merge_request_template_spec.rb'
     - 'ee/spec/lib/gitlab/llm/templates/generate_commit_message_spec.rb'
     - 'ee/spec/lib/gitlab/llm/templates/summarize_review_spec.rb'
-    - 'ee/spec/lib/gitlab/llm/templates/summarize_submitted_review_spec.rb'
     - 'ee/spec/lib/gitlab/llm/vertex_ai/completions/analyze_ci_job_failure_spec.rb'
     - 'ee/spec/lib/gitlab/llm/vertex_ai/completions/fill_in_merge_request_template_spec.rb'
     - 'ee/spec/lib/gitlab/llm/vertex_ai/completions/generate_commit_message_spec.rb'
     - 'ee/spec/lib/gitlab/llm/vertex_ai/completions/summarize_review_spec.rb'
-    - 'ee/spec/lib/gitlab/llm/vertex_ai/completions/summarize_submitted_review_spec.rb'
-    - 'ee/spec/lib/gitlab/llm/vertex_ai/model_configurations/base_spec.rb'
     - 'ee/spec/lib/gitlab/llm/vertex_ai/model_configurations/chat_spec.rb'
     - 'ee/spec/lib/gitlab/llm/vertex_ai/model_configurations/code_chat_spec.rb'
     - 'ee/spec/lib/gitlab/llm/vertex_ai/model_configurations/code_completion_spec.rb'
diff --git a/.rubocop_todo/rspec/return_from_stub.yml b/.rubocop_todo/rspec/return_from_stub.yml
index ec4747cb462..4740f20ba9b 100644
--- a/.rubocop_todo/rspec/return_from_stub.yml
+++ b/.rubocop_todo/rspec/return_from_stub.yml
@@ -93,7 +93,6 @@ RSpec/ReturnFromStub:
     - 'spec/helpers/projects_helper_spec.rb'
     - 'spec/helpers/users/callouts_helper_spec.rb'
     - 'spec/helpers/users_helper_spec.rb'
-    - 'spec/helpers/visibility_level_helper_spec.rb'
     - 'spec/lib/banzai/filter/issuable_reference_expansion_filter_spec.rb'
     - 'spec/lib/banzai/filter/references/external_issue_reference_filter_spec.rb'
     - 'spec/lib/banzai/reference_parser/issue_parser_spec.rb'
diff --git a/.rubocop_todo/style/inline_disable_annotation.yml b/.rubocop_todo/style/inline_disable_annotation.yml
index 67319afe67b..5c844892418 100644
--- a/.rubocop_todo/style/inline_disable_annotation.yml
+++ b/.rubocop_todo/style/inline_disable_annotation.yml
@@ -1392,7 +1392,6 @@ Style/InlineDisableAnnotation:
     - 'ee/app/models/search/namespace_index_assignment.rb'
     - 'ee/app/models/security/training.rb'
     - 'ee/app/models/vulnerabilities/finding.rb'
-    - 'ee/app/policies/merge_request/review_llm_summary_policy.rb'
     - 'ee/app/policies/merge_request_diff_policy.rb'
     - 'ee/app/policies/path_lock_policy.rb'
     - 'ee/app/replicators/geo/container_repository_replicator.rb'
@@ -1790,7 +1789,6 @@ Style/InlineDisableAnnotation:
     - 'ee/lib/gitlab/llm/chain/tools/summarize_comments/executor.rb'
     - 'ee/lib/gitlab/llm/chat_storage.rb'
     - 'ee/lib/gitlab/llm/templates/explain_vulnerability.rb'
-    - 'ee/lib/gitlab/llm/vertex_ai/completions/summarize_submitted_review.rb'
     - 'ee/lib/gitlab/middleware/ip_restrictor.rb'
     - 'ee/lib/gitlab/path_locks_finder.rb'
     - 'ee/lib/gitlab/root_excess_size_error_message.rb'
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 779c7acc210..b3bc7ce8815 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2660,6 +2660,16 @@ entry.
 - [Finalize the backfill migration for onboarding status step url](gitlab-org/gitlab@f986c1b1cf00968ff106136893bfe68d47895c69) ([merge request](gitlab-org/gitlab!147278))
 - [Remove ClusterRepositoryCache migration helper class](gitlab-org/gitlab@f71a7a94ce8d70d9d378ebc225b802b58f0ae006) ([merge request](gitlab-org/gitlab!147244))
 
+## 16.10.8 (2024-06-25)
+
+### Fixed (1 change)
+
+- [Update an expired test certificate](gitlab-org/gitlab@adb50cc178e81e75b78f6b10cafc79cd6be9a43c) ([merge request](gitlab-org/gitlab!156394))
+
+### Changed (1 change)
+
+- [Add a banner informing about token expiration](gitlab-org/gitlab@7f51cdccdd702a4f92607d52b6d4e3884c8e5234) ([merge request](gitlab-org/gitlab!155266))
+
 ## 16.10.7 (2024-06-11)
 
 ### Security (4 changes)
@@ -3440,6 +3450,16 @@ No changes.
 - [Add sharding keys for system_access](gitlab-org/gitlab@62c2fd4788e62e46f1469e2f18d178840e8e3df2) ([merge request](gitlab-org/gitlab!142501))
 - [Add sharding keys for purchase](gitlab-org/gitlab@9c3843da74714c72483c17489d5d3d68ceffd2c8) ([merge request](gitlab-org/gitlab!142505))
 
+## 16.9.9 (2024-06-25)
+
+### Fixed (1 change)
+
+- [Update an expired test certificate](gitlab-org/gitlab@8fb9c678564e11392eab4d2001e60f751d6a86bc) ([merge request](gitlab-org/gitlab!156395))
+
+### Changed (1 change)
+
+- [Add a banner informing about token expiration](gitlab-org/gitlab@a079122ed2976df0f023ef55cef4a1585e31b5ce) ([merge request](gitlab-org/gitlab!155267))
+
 ## 16.9.8 (2024-05-09)
 
 No changes.
@@ -4270,6 +4290,16 @@ No changes.
 
 - [Add remediation badge to vulnerability report](gitlab-org/gitlab@e6236197509eae1bb27edf8fb2c63ccf769c2642) ([merge request](gitlab-org/gitlab!142455))
 
+## 16.8.8 (2024-06-25)
+
+### Fixed (1 change)
+
+- [Update an expired test certificate](gitlab-org/gitlab@5b316194aee0927d3aeb6812f116d30bec8d6e37) ([merge request](gitlab-org/gitlab!156396))
+
+### Changed (1 change)
+
+- [Add a banner informing about token expiration](gitlab-org/gitlab@48caa37b7717dfabfdab4af472ba51de1303ae74) ([merge request](gitlab-org/gitlab!155268))
+
 ## 16.8.7 (2024-04-12)
 
 No changes.
diff --git a/GITALY_SERVER_VERSION b/GITALY_SERVER_VERSION
index ffee22f3696..6e8d6d0a31f 100644
--- a/GITALY_SERVER_VERSION
+++ b/GITALY_SERVER_VERSION
@@ -1 +1 @@
-c3e5dc8bf1d451e09e0e207358bd5df346ccf6df
+029ddfe54a04b857af8fac47f3d7fc2f13705711
diff --git a/app/assets/javascripts/gitlab_pages/components/deployment.vue b/app/assets/javascripts/gitlab_pages/components/deployment.vue
index 365bb874702..a2094b292ca 100644
--- a/app/assets/javascripts/gitlab_pages/components/deployment.vue
+++ b/app/assets/javascripts/gitlab_pages/components/deployment.vue
@@ -1,9 +1,315 @@
 <script>
+import { GlIcon, GlButton, GlBadge } from '@gitlab/ui';
+import NumberToHumanSize from '~/vue_shared/components/number_to_human_size/number_to_human_size.vue';
+import UserDate from '~/vue_shared/components/user_date.vue';
+import { SHORT_DATE_FORMAT_WITH_TIME } from '~/vue_shared/constants';
+import { s__ } from '~/locale';
+import { joinPaths } from '~/lib/utils/url_utility';
+import deletePagesDeploymentMutation from '../queries/delete_pages_deployment.mutation.graphql';
+import restorePagesDeploymentMutation from '../queries/restore_pages_deployment.mutation.graphql';
+
 export default {
-  name: 'PagesDeployment',
+  name: 'PrimaryDeployment',
+  components: {
+    UserDate,
+    NumberToHumanSize,
+    GlIcon,
+    GlButton,
+    GlBadge,
+  },
+  i18n: {
+    deleteError: s__(
+      'Pages|An error occurred while deleting the deployment. Check your connection and try again.',
+    ),
+    restoreError: s__(
+      'Pages|Restoring the deployment failed. The deployment might be permanently deleted.',
+    ),
+    activeState: s__('Pages|Active'),
+    stoppedState: s__('Pages|Stopped'),
+    primaryDeploymentTitle: s__('Pages|Primary deployment'),
+    pathPrefixLabel: s__('Pages|Path prefix'),
+    createdLabel: s__('Pages|Created'),
+    deployJobLabel: s__('Pages|Deploy job'),
+    rootDirLabel: s__('Pages|Root directory'),
+    filesLabel: s__('Pages|Files'),
+    sizeLabel: s__('Pages|Size'),
+    lastUpdatedLabel: s__('Pages|Last updated'),
+    deleteScheduledAtLabel: s__('Pages|Scheduled for deletion at'),
+    deleteBtnLabel: s__('Pages|Delete'),
+    restoreBtnLabel: s__('Pages|Restore'),
+  },
+  static: {
+    SHORT_DATE_FORMAT_WITH_TIME,
+  },
+  inject: ['projectFullPath'],
+  props: {
+    deployment: {
+      type: Object,
+      required: true,
+    },
+  },
+  data() {
+    return {
+      hasError: false,
+      showDetail: false,
+      deleteInProgress: false,
+      restoreInProgress: false,
+      stateChanged: false,
+      detailContainerHeight: 0,
+    };
+  },
+  computed: {
+    isPrimary() {
+      return !this.deployment.pathPrefix;
+    },
+    detailHeight() {
+      return this.showDetail ? this.detailContainerHeight : 0;
+    },
+    detailStyle() {
+      return {
+        height: `${this.detailHeight}px`,
+        visibility: this.showDetail ? 'visible' : 'hidden',
+      };
+    },
+    ciBuildUrl() {
+      return joinPaths(
+        gon.relative_url_root || '/',
+        this.projectFullPath,
+        '/-/jobs/',
+        `${this.deployment.ciBuildId}`,
+      );
+    },
+  },
+  mounted() {
+    this.calculateDetailHeight();
+  },
+  methods: {
+    toggleDetail() {
+      this.showDetail = !this.showDetail;
+    },
+    calculateDetailHeight() {
+      this.detailContainerHeight = this.$refs.details?.scrollHeight;
+    },
+    async deleteDeployment() {
+      this.hasError = false;
+      this.deleteInProgress = true;
+      try {
+        await this.$apollo.mutate({
+          mutation: deletePagesDeploymentMutation,
+          variables: {
+            deploymentId: this.deployment.id,
+          },
+        });
+      } catch (error) {
+        this.hasError = true;
+        this.$emit('error', {
+          id: this.deployment.id,
+          message: this.$options.i18n.deleteError,
+        });
+      } finally {
+        this.deleteInProgress = false;
+        await this.$nextTick();
+        this.calculateDetailHeight();
+      }
+    },
+    async restoreDeployment() {
+      this.hasError = false;
+      this.restoreInProgress = true;
+      try {
+        await this.$apollo.mutate({
+          mutation: restorePagesDeploymentMutation,
+          variables: {
+            deploymentId: this.deployment.id,
+          },
+        });
+      } catch (e) {
+        this.hasError = true;
+        this.$emit('error', { id: this.deployment.id, message: this.$options.i18n.restoreError });
+      } finally {
+        this.restoreInProgress = false;
+        await this.$nextTick();
+        this.calculateDetailHeight();
+      }
+    },
+  },
 };
 </script>
 
 <template>
-  <div></div>
+  <div
+    class="gl-flex gl-flex-col gl-p-4 gl-gap-2 gl-border gl-rounded-lg"
+    :class="{ 'gl-bg-blue-50': isPrimary, 'gl-border-red-500': hasError }"
+    @click="toggleDetail"
+  >
+    <div class="gl-flex gl-items-center gl-justify-start gl-gap-3">
+      <div class="gl-flex gl-justify-center gl-gap-3">
+        <div data-testid="deployment-state">
+          <gl-badge
+            v-if="deployment.active"
+            variant="info"
+            size="sm"
+            icon="status_success"
+            icon-size="sm"
+          >
+            {{ $options.i18n.activeState }}
+          </gl-badge>
+          <gl-badge v-else variant="neutral" size="sm" icon="status_canceled" icon-size="sm">
+            {{ $options.i18n.stoppedState }}
+          </gl-badge>
+        </div>
+      </div>
+    </div>
+    <div
+      class="gl-flex gl-flex-col md:gl-flex-row md:gl-items-center gl-gap-4 md:gl-gap-7 md:gl-justify-between gl-overflow-hidden"
+    >
+      <div class="gl-flex gl-items-center gl-gap-4">
+        <div>
+          <gl-icon
+            name="chevron-lg-right"
+            :class="{ 'gl-rotate-90': showDetail }"
+            class="gl-transition-transform reduce-motion:gl-transition-none gl-text-secondary"
+          />
+        </div>
+        <div data-testid="deployment-type" class="gl-flex gl-flex-col gl-gap-2 gl-text-nowrap">
+          <template v-if="isPrimary">
+            <gl-icon name="home" class="mr-1 gl-text-secondary" />
+            <span class="sr-only">
+              {{ $options.i18n.primaryDeploymentTitle }}
+            </span>
+          </template>
+          <template v-else>
+            <div class="gl-sr-only">{{ $options.i18n.pathPrefixLabel }}</div>
+            <div>
+              <gl-icon name="environment" class="mr-1 gl-text-secondary" />
+              {{ deployment.pathPrefix }}
+            </div>
+          </template>
+        </div>
+        <div class="gl-flex gl-flex-col gl-gap-2 gl-text-nowrap gl-truncate">
+          <div class="gl-flex gl-items-center gl-gap-2" data-testid="deployment-url">
+            <a
+              v-if="deployment.active"
+              :href="deployment.url"
+              target="_blank"
+              class="gl-w-full gl-truncate"
+              @click.stop
+            >
+              {{ deployment.url }}
+            </a>
+            <span v-else class="gl-text-secondary gl-w-full gl-truncate">
+              {{ deployment.url }}
+            </span>
+          </div>
+        </div>
+      </div>
+      <div class="gl-flex gl-flex-col gl-gap-5 gl-items-stretch md:gl-items-end">
+        <div class="gl-flex gl-gap-6 gl-items-end gl-justify-between md:gl-justify-end">
+          <div
+            class="gl-flex gl-flex-col gl-gap-2 gl-text-nowrap"
+            data-testid="deployment-created-at"
+          >
+            <div class="gl-text-secondary gl-text-sm">{{ $options.i18n.createdLabel }}</div>
+            <div>
+              <gl-icon name="play" class="mr-1 gl-text-secondary" />
+              <user-date
+                :date="deployment.createdAt"
+                :date-format="$options.static.SHORT_DATE_FORMAT_WITH_TIME"
+              />
+            </div>
+          </div>
+        </div>
+      </div>
+    </div>
+    <div
+      ref="details"
+      :style="detailStyle"
+      data-testid="deployment-details"
+      class="gl-flex gl-flex-col md:gl-flex-row gl-gap-4 md:gl-gap-7 gl-overflow-hidden gl-transition-all motion-reduce:gl-transition-none"
+    >
+      <div class="gl-flex gl-flex-col gl-gap-2 gl-text-nowrap" data-testid="deployment-ci-build-id">
+        <div class="gl-text-secondary gl-text-sm">{{ $options.i18n.deployJobLabel }}</div>
+        <div>
+          <gl-icon name="deployments" class="mr-1 gl-text-secondary" />
+          <a :href="ciBuildUrl" @click.stop>
+            {{ deployment.ciBuildId }}
+          </a>
+        </div>
+      </div>
+      <div
+        class="gl-flex gl-flex-col gl-gap-2 gl-text-nowrap"
+        data-testid="deployment-root-directory"
+      >
+        <div class="gl-text-secondary gl-text-sm">{{ $options.i18n.rootDirLabel }}</div>
+        <div>
+          <gl-icon name="folder" class="mr-1 gl-text-secondary" />
+          /{{ deployment.rootDirectory || 'public' }}
+        </div>
+      </div>
+      <div class="gl-flex gl-flex-col gl-gap-2 gl-text-nowrap" data-testid="deployment-file-count">
+        <div class="gl-text-secondary gl-text-sm">{{ $options.i18n.filesLabel }}</div>
+        <div>
+          <gl-icon name="documents" class="mr-1 gl-text-secondary" />
+          {{ deployment.fileCount }}
+        </div>
+      </div>
+      <div class="gl-flex gl-flex-col gl-gap-2 gl-text-nowrap" data-testid="deployment-size">
+        <div class="gl-text-secondary gl-text-sm">{{ $options.i18n.sizeLabel }}</div>
+        <div>
+          <gl-icon name="disk" class="mr-1 gl-text-secondary" />
+          <number-to-human-size :value="deployment.size" />
+        </div>
+      </div>
+      <div class="gl-flex gl-flex-col gl-gap-2 gl-text-nowrap" data-testid="deployment-updated-at">
+        <div class="gl-text-secondary gl-text-sm">{{ $options.i18n.lastUpdatedLabel }}</div>
+        <div>
+          <gl-icon name="clear-all" class="mr-1 gl-text-secondary" />
+          <user-date
+            :date="deployment.updatedAt"
+            :date-format="$options.static.SHORT_DATE_FORMAT_WITH_TIME"
+          />
+        </div>
+      </div>
+      <div v-if="!deployment.active" class="gl-flex gl-flex-col gl-gap-2 gl-text-nowrap">
+        <div class="gl-text-secondary gl-text-sm">
+          {{ $options.i18n.deleteScheduledAtLabel }}
+        </div>
+        <div>
+          <gl-icon name="remove" class="mr-1 gl-text-secondary" />
+          <user-date
+            :date="deployment.deletedAt"
+            :date-format="$options.static.SHORT_DATE_FORMAT_WITH_TIME"
+          />
+        </div>
+      </div>
+      <div class="gl-hidden md:gl-block gl-flex-grow"></div>
+      <div class="md:gl-h-full gl-flex gl-items-end">
+        <gl-button
+          v-if="deployment.active"
+          icon="remove"
+          category="secondary"
+          variant="danger"
+          size="small"
+          :loading="deleteInProgress"
+          data-testid="deployment-delete"
+          @click.stop="deleteDeployment"
+        >
+          {{ $options.i18n.deleteBtnLabel }}
+        </gl-button>
+        <gl-button
+          v-else
+          icon="redo"
+          category="secondary"
+          variant="confirm"
+          size="small"
+          :loading="restoreInProgress"
+          data-testid="deployment-restore"
+          @click.stop="restoreDeployment"
+        >
+          {{ $options.i18n.restoreBtnLabel }}
+        </gl-button>
+      </div>
+    </div>
+  </div>
 </template>
+
+<style scoped></style>
diff --git a/app/assets/javascripts/gitlab_pages/components/deployments.vue b/app/assets/javascripts/gitlab_pages/components/deployments.vue
index d709d7ef2fc..da04d71412b 100644
--- a/app/assets/javascripts/gitlab_pages/components/deployments.vue
+++ b/app/assets/javascripts/gitlab_pages/components/deployments.vue
@@ -21,7 +21,7 @@ export default {
   data() {
     return {
       showInactive: false,
-      requestBatchSize: 2,
+      requestBatchSize: 10,
       hasError: false,
       alerts: {},
       primaryDeployments: null,
diff --git a/app/assets/javascripts/gitlab_pages/queries/delete_pages_deployment.mutation.graphql b/app/assets/javascripts/gitlab_pages/queries/delete_pages_deployment.mutation.graphql
new file mode 100644
index 00000000000..fe8513eadd1
--- /dev/null
+++ b/app/assets/javascripts/gitlab_pages/queries/delete_pages_deployment.mutation.graphql
@@ -0,0 +1,11 @@
+mutation DeletePagesDeployment($deploymentId: PagesDeploymentID!) {
+  deletePagesDeployment(input: { id: $deploymentId }) {
+    errors
+    pagesDeployment {
+      id
+      active
+      deletedAt
+      updatedAt
+    }
+  }
+}
diff --git a/app/assets/javascripts/gitlab_pages/queries/restore_pages_deployment.mutation.graphql b/app/assets/javascripts/gitlab_pages/queries/restore_pages_deployment.mutation.graphql
new file mode 100644
index 00000000000..70516bf2f2a
--- /dev/null
+++ b/app/assets/javascripts/gitlab_pages/queries/restore_pages_deployment.mutation.graphql
@@ -0,0 +1,11 @@
+mutation RestorePagesDeployment($deploymentId: PagesDeploymentID!) {
+  restorePagesDeployment(input: { id: $deploymentId }) {
+    errors
+    pagesDeployment {
+      id
+      active
+      deletedAt
+      updatedAt
+    }
+  }
+}
diff --git a/app/assets/javascripts/issues/list/components/issues_list_app.vue b/app/assets/javascripts/issues/list/components/issues_list_app.vue
index 221370bbcbf..85da51b4e6e 100644
--- a/app/assets/javascripts/issues/list/components/issues_list_app.vue
+++ b/app/assets/javascripts/issues/list/components/issues_list_app.vue
@@ -1013,6 +1013,8 @@ export default {
             :toggle-text="$options.i18n.actionsLabel"
             text-sr-only
             data-testid="issues-list-more-actions-dropdown"
+            toggle-class="!gl-m-0 gl-h-full"
+            class="!gl-w-7"
           >
             <csv-import-export-buttons
               v-if="showCsvButtons"
diff --git a/app/assets/javascripts/ml/model_registry/components/model_create.vue b/app/assets/javascripts/ml/model_registry/components/model_create.vue
index d5d5b6dac6e..91ecbf193b7 100644
--- a/app/assets/javascripts/ml/model_registry/components/model_create.vue
+++ b/app/assets/javascripts/ml/model_registry/components/model_create.vue
@@ -144,6 +144,7 @@ export default {
     },
     actionSecondary: {
       text: __('Cancel'),
+      attributes: { variant: 'default' },
     },
     nameDescription: s__(
       'MlModelRegistry|Model name must not contain spaces or upper case letter.',
diff --git a/app/assets/javascripts/ml/model_registry/components/model_version_create.vue b/app/assets/javascripts/ml/model_registry/components/model_version_create.vue
index 8d841b0bef3..7b5a57c0118 100644
--- a/app/assets/javascripts/ml/model_registry/components/model_version_create.vue
+++ b/app/assets/javascripts/ml/model_registry/components/model_version_create.vue
@@ -152,6 +152,7 @@ export default {
     id: MODEL_VERSION_CREATION_MODAL_ID,
     actionSecondary: {
       text: __('Cancel'),
+      attributes: { variant: 'default' },
     },
     versionDescription: s__('MlModelRegistry|Enter a semantic version.'),
     versionValid: s__('MlModelRegistry|Version is valid semantic version.'),
diff --git a/app/assets/javascripts/organizations/projects/edit/components/app.vue b/app/assets/javascripts/organizations/projects/edit/components/app.vue
index abf4e32ac65..7e3c2bb7c9b 100644
--- a/app/assets/javascripts/organizations/projects/edit/components/app.vue
+++ b/app/assets/javascripts/organizations/projects/edit/components/app.vue
@@ -68,7 +68,9 @@ export default {
       }
     },
     onInputField({ name }) {
-      this.$delete(this.serverValidations, name);
+      const copy = { ...this.serverValidations };
+      delete copy[name];
+      this.serverValidations = copy;
     },
   },
 };
diff --git a/app/assets/javascripts/vue_shared/components/filtered_search_bar/filtered_search_bar_root.vue b/app/assets/javascripts/vue_shared/components/filtered_search_bar/filtered_search_bar_root.vue
index 4351e44c65f..1892c6ae971 100644
--- a/app/assets/javascripts/vue_shared/components/filtered_search_bar/filtered_search_bar_root.vue
+++ b/app/assets/javascripts/vue_shared/components/filtered_search_bar/filtered_search_bar_root.vue
@@ -350,7 +350,7 @@ export default {
 </script>
 
 <template>
-  <div class="vue-filtered-search-bar-container md:gl-flex gl-min-w-0">
+  <div class="vue-filtered-search-bar-container max-sm:gl-flex-col gl-flex gl-min-w-0 sm:gl-gap-3">
     <gl-form-checkbox
       v-if="showCheckbox"
       class="gl-align-self-center"
@@ -401,7 +401,10 @@ export default {
       :sort-options="transformedSortOptions"
       :sort-by="sortById"
       :is-ascending="sortDirectionAscending"
-      class="sort-dropdown-container"
+      class="sort-dropdown-container sm:!gl-m-0 max-sm:gl-w-full"
+      dropdown-class="gl-grow"
+      dropdown-toggle-class="gl-grow"
+      sort-direction-toggle-class="!gl-shrink !gl-grow-0"
       @sortByChange="handleSortByChange"
       @sortDirectionChange="handleSortDirectionChange"
     />
diff --git a/app/assets/javascripts/vue_shared/constants.js b/app/assets/javascripts/vue_shared/constants.js
index 4af3fe47889..8cee942cdef 100644
--- a/app/assets/javascripts/vue_shared/constants.js
+++ b/app/assets/javascripts/vue_shared/constants.js
@@ -11,11 +11,18 @@ export const FILE_SYMLINK_MODE = '120000';
 
 export const SHORT_DATE_FORMAT = 'mmm dd, yyyy';
 
+export const SHORT_DATE_FORMAT_WITH_TIME = 'mmm dd, yyyy HH:MM';
+
 export const ISO_SHORT_FORMAT = 'yyyy-mm-dd';
 
 export const LONG_DATE_FORMAT_WITH_TZ = 'yyyy-mm-dd HH:MM:ss Z';
 
-export const DATE_FORMATS = [SHORT_DATE_FORMAT, ISO_SHORT_FORMAT, LONG_DATE_FORMAT_WITH_TZ];
+export const DATE_FORMATS = [
+  SHORT_DATE_FORMAT,
+  SHORT_DATE_FORMAT_WITH_TIME,
+  ISO_SHORT_FORMAT,
+  LONG_DATE_FORMAT_WITH_TZ,
+];
 
 const getTimeLabel = (days) => n__('1 day', '%d days', days);
 
diff --git a/app/assets/javascripts/vue_shared/issuable/list/components/issuable_list_root.vue b/app/assets/javascripts/vue_shared/issuable/list/components/issuable_list_root.vue
index 2a43475b27c..37a0834105a 100644
--- a/app/assets/javascripts/vue_shared/issuable/list/components/issuable_list_root.vue
+++ b/app/assets/javascripts/vue_shared/issuable/list/components/issuable_list_root.vue
@@ -330,7 +330,7 @@ export default {
       :checkbox-checked="allIssuablesChecked"
       :show-friendly-text="showFilteredSearchFriendlyText"
       terms-as-tokens
-      class="gl-flex-grow-1 gl-border-t-none row-content-block"
+      class="gl-grow gl-border-t-0 row-content-block max-md:-gl-ml-5 max-md:gl-w-screen max-md:gl-border-t max-md:-gl-mt-1 sm:gl-flex"
       data-testid="issuable-search-container"
       @checked-input="handleAllIssuablesCheckedInput"
       @onFilter="$emit('filter', $event)"
diff --git a/app/components/layouts/settings_block_component.haml b/app/components/layouts/settings_block_component.haml
index eff678d522d..cd5fc01d5f1 100644
--- a/app/components/layouts/settings_block_component.haml
+++ b/app/components/layouts/settings_block_component.haml
@@ -6,7 +6,7 @@
       %p.gl-text-secondary.gl-m-0
         = description || @description
     .gl-shrink-0.gl-px-2
-      = render Pajamas::ButtonComponent.new(button_options: { class: 'gl-min-w-12 js-settings-toggle' }) do
+      = render Pajamas::ButtonComponent.new(button_options: @button_options.merge(class: 'gl-min-w-12 js-settings-toggle')) do
         = button_text
   .settings-content
     .gl-pt-5
diff --git a/app/components/layouts/settings_block_component.rb b/app/components/layouts/settings_block_component.rb
index 20fe393a906..8177645c34c 100644
--- a/app/components/layouts/settings_block_component.rb
+++ b/app/components/layouts/settings_block_component.rb
@@ -7,12 +7,14 @@ module Layouts
     # @param [String] id
     # @param [String] testid
     # @param [Boolean] expanded
-    def initialize(heading, description: nil, id: nil, testid: nil, expanded: nil)
+    # @param [Hash] button_options
+    def initialize(heading, description: nil, id: nil, testid: nil, expanded: nil, button_options: {})
       @heading = heading
       @description = description
       @id = id
       @testid = testid
       @expanded = expanded
+      @button_options = button_options
     end
 
     renders_one :heading
diff --git a/app/controllers/concerns/render_access_tokens.rb b/app/controllers/concerns/render_access_tokens.rb
index 5e4c31b0ba7..072b01cb131 100644
--- a/app/controllers/concerns/render_access_tokens.rb
+++ b/app/controllers/concerns/render_access_tokens.rb
@@ -27,7 +27,7 @@ module RenderAccessTokens
   end
 
   def page
-    (params[:page] || 1).to_i
+    (pagination_params[:page] || 1).to_i
   end
 
   def expiry_ics(tokens)
diff --git a/app/controllers/concerns/snippets_sort.rb b/app/controllers/concerns/snippets_sort.rb
index f122c843af7..510c360e2e4 100644
--- a/app/controllers/concerns/snippets_sort.rb
+++ b/app/controllers/concerns/snippets_sort.rb
@@ -4,6 +4,6 @@ module SnippetsSort
   extend ActiveSupport::Concern
 
   def sort_param
-    params[:sort].presence || 'updated_desc'
+    pagination_params[:sort].presence || 'updated_desc'
   end
 end
diff --git a/app/controllers/concerns/sorting_preference.rb b/app/controllers/concerns/sorting_preference.rb
index 3dc1780d6fe..dcf16825c82 100644
--- a/app/controllers/concerns/sorting_preference.rb
+++ b/app/controllers/concerns/sorting_preference.rb
@@ -5,7 +5,9 @@ module SortingPreference
   include CookiesHelper
 
   def set_sort_order(field = sorting_field, default_order = default_sort_order)
-    sort_order = set_sort_order_from_user_preference(field) || set_sort_order_from_cookie(field) || params[:sort]
+    sort_order = set_sort_order_from_user_preference(field) ||
+      set_sort_order_from_cookie(field) ||
+      pagination_params[:sort]
 
     # some types of sorting might not be available on the dashboard
     return default_order unless valid_sort_order?(sort_order)
@@ -40,7 +42,7 @@ module SortingPreference
 
     user_preference = current_user.user_preference
 
-    sort_param = params[:sort]
+    sort_param = pagination_params[:sort]
     sort_param ||= user_preference[field]
 
     return sort_param if Gitlab::Database.read_only?
@@ -53,7 +55,7 @@ module SortingPreference
   def set_sort_order_from_cookie(field = sorting_field)
     return unless legacy_sort_cookie_name
 
-    sort_param = params[:sort] if params[:sort].present?
+    sort_param = pagination_params[:sort] if pagination_params[:sort].present?
     # fallback to legacy cookie value for backward compatibility
     sort_param ||= cookies[legacy_sort_cookie_name]
     sort_param ||= cookies[remember_sorting_key(field)]
diff --git a/app/controllers/concerns/web_hooks/hook_actions.rb b/app/controllers/concerns/web_hooks/hook_actions.rb
index a113398a87f..d8bfcb78f7c 100644
--- a/app/controllers/concerns/web_hooks/hook_actions.rb
+++ b/app/controllers/concerns/web_hooks/hook_actions.rb
@@ -86,7 +86,7 @@ module WebHooks
     end
 
     def hook_logs
-      @hook_logs ||= hook.web_hook_logs.recent.page(params[:page]).without_count
+      @hook_logs ||= hook.web_hook_logs.recent.page(pagination_params[:page]).without_count
     end
 
     def hook_value_from_param_or_db(key, value)
diff --git a/app/controllers/import/github_groups_controller.rb b/app/controllers/import/github_groups_controller.rb
index 6c0773bcfb3..ecc84223d5c 100644
--- a/app/controllers/import/github_groups_controller.rb
+++ b/app/controllers/import/github_groups_controller.rb
@@ -37,7 +37,7 @@ module Import
 
     def pagination_options
       {
-        page: [1, params[:page].to_i].max,
+        page: [1, pagination_params[:page].to_i].max,
         per_page: PAGE_LENGTH
       }
     end
diff --git a/app/controllers/projects/project_members_controller.rb b/app/controllers/projects/project_members_controller.rb
index 223e8ade22e..c07a15c3e40 100644
--- a/app/controllers/projects/project_members_controller.rb
+++ b/app/controllers/projects/project_members_controller.rb
@@ -16,7 +16,7 @@ class Projects::ProjectMembersController < Projects::ApplicationController
   urgency :low
 
   def index
-    @sort = params[:sort].presence || sort_value_name
+    @sort = pagination_params[:sort].presence || sort_value_name
     @include_relations ||= requested_relations(:groups_with_inherited_permissions)
 
     if can?(current_user, :admin_project_member, @project)
@@ -24,7 +24,7 @@ class Projects::ProjectMembersController < Projects::ApplicationController
       @requesters = present_members(AccessRequestsFinder.new(@project).execute(current_user))
     end
 
-    @project_members = present_members(non_invited_members.page(params[:page]))
+    @project_members = present_members(non_invited_members.page(pagination_params[:page]))
   end
 
   # MembershipActions concern
diff --git a/app/controllers/projects/settings/repository_controller.rb b/app/controllers/projects/settings/repository_controller.rb
index 2d7a3d698f0..a06858cf9c1 100644
--- a/app/controllers/projects/settings/repository_controller.rb
+++ b/app/controllers/projects/settings/repository_controller.rb
@@ -92,7 +92,7 @@ module Projects
       # rubocop: disable CodeReuse/ActiveRecord
       def define_protected_refs
         @protected_branches = fetch_protected_branches(@project)
-        @protected_tags = @project.protected_tags.order(:name).page(params[:page])
+        @protected_tags = @project.protected_tags.order(:name).page(pagination_params[:page])
         @protected_branch = @project.protected_branches.new
         @protected_tag = @project.protected_tags.new
 
@@ -102,7 +102,7 @@ module Projects
       # rubocop: enable CodeReuse/ActiveRecord
 
       def fetch_protected_branches(project)
-        project.protected_branches.sorted_by_name.page(params[:page])
+        project.protected_branches.sorted_by_name.page(pagination_params[:page])
       end
 
       def remote_mirror
diff --git a/app/controllers/user_settings/user_settings_controller.rb b/app/controllers/user_settings/user_settings_controller.rb
index 3535a30095a..bb1fef4a712 100644
--- a/app/controllers/user_settings/user_settings_controller.rb
+++ b/app/controllers/user_settings/user_settings_controller.rb
@@ -7,7 +7,7 @@ module UserSettings
     def authentication_log
       @events = AuthenticationEvent.for_user(current_user)
           .order_by_created_at_desc
-          .page(params[:page])
+          .page(pagination_params[:page])
 
       Gitlab::Tracking.event(self.class.name, 'search_audit_event', user: current_user)
     end
diff --git a/app/graphql/types/container_repository_tag_type.rb b/app/graphql/types/container_repository_tag_type.rb
index 3fa08ed09b2..59114ef9f8f 100644
--- a/app/graphql/types/container_repository_tag_type.rb
+++ b/app/graphql/types/container_repository_tag_type.rb
@@ -13,6 +13,7 @@ module Types
     field :created_at, Types::TimeType, null: true, description: 'Timestamp when the tag was created.'
     field :digest, GraphQL::Types::String, null: true, description: 'Digest of the tag.'
     field :location, GraphQL::Types::String, null: false, description: 'URL of the tag.'
+    field :media_type, GraphQL::Types::String, null: true, description: 'Media type of the tag.'
     field :name, GraphQL::Types::String, null: false, description: 'Name of the tag.'
     field :path, GraphQL::Types::String, null: false, description: 'Path of the tag.'
     field :published_at, Types::TimeType, null: true, description: 'Timestamp when the tag was published.'
diff --git a/app/graphql/types/merge_request_type.rb b/app/graphql/types/merge_request_type.rb
index e904d71def3..0e97c8caaff 100644
--- a/app/graphql/types/merge_request_type.rb
+++ b/app/graphql/types/merge_request_type.rb
@@ -175,6 +175,12 @@ module Types
       description: 'Labels of the merge request.',
       resolver: Resolvers::BulkLabelsResolver
 
+    field :auto_merge_enabled, GraphQL::Types::Boolean, null: false,
+      description: 'Indicates if auto merge is enabled for the merge request.'
+    field :commit_count, GraphQL::Types::Int, null: true, method: :commits_count,
+      description: 'Number of commits in the merge request.'
+    field :conflicts, GraphQL::Types::Boolean, null: false, method: :cannot_be_merged?,
+      description: 'Indicates if the merge request has conflicts.'
     field :milestone, Types::MilestoneType, null: true,
       description: 'Milestone of the merge request.'
     field :participants, Types::MergeRequests::ParticipantType.connection_type, null: true, complexity: 15,
@@ -185,12 +191,6 @@ module Types
       argument :full, GraphQL::Types::Boolean, required: false, default_value: false,
         description: 'Boolean option specifying whether the reference should be returned in full.'
     end
-    field :auto_merge_enabled, GraphQL::Types::Boolean, null: false,
-      description: 'Indicates if auto merge is enabled for the merge request.'
-    field :commit_count, GraphQL::Types::Int, null: true, method: :commits_count,
-      description: 'Number of commits in the merge request.'
-    field :conflicts, GraphQL::Types::Boolean, null: false, method: :cannot_be_merged?,
-      description: 'Indicates if the merge request has conflicts.'
     field :reviewers,
       type: Types::MergeRequests::ReviewerType.connection_type,
       null: true,
diff --git a/app/models/concerns/issuable.rb b/app/models/concerns/issuable.rb
index 7811ca5c032..e8d89173585 100644
--- a/app/models/concerns/issuable.rb
+++ b/app/models/concerns/issuable.rb
@@ -558,7 +558,7 @@ module Issuable
     changes
   end
 
-  def to_hook_data(user, old_associations: {})
+  def to_hook_data(user, old_associations: {}, action: nil)
     changes = reportable_changes
 
     if old_associations.present?
@@ -566,7 +566,7 @@ module Issuable
       changes.merge!(hook_reviewer_changes(old_associations)) if allows_reviewers?
     end
 
-    Gitlab::DataBuilder::Issuable.new(self).build(user: user, changes: changes)
+    Gitlab::DataBuilder::Issuable.new(self).build(user: user, changes: changes, action: action)
   end
 
   def labels_array
diff --git a/app/models/concerns/protected_ref_access.rb b/app/models/concerns/protected_ref_access.rb
index 19d8c359a3f..583e93b51c1 100644
--- a/app/models/concerns/protected_ref_access.rb
+++ b/app/models/concerns/protected_ref_access.rb
@@ -72,9 +72,6 @@ module ProtectedRefAccess
     return false if current_user.nil? || no_access?
     return current_user.admin? if admin_access?
 
-    return false if Feature.enabled?(:check_membership_in_protected_ref_access) &&
-      (current_project && !current_project.member?(current_user))
-
     yield if block_given?
 
     user_can_access?(current_user, current_project)
diff --git a/app/models/concerns/protected_ref_deploy_key_access.rb b/app/models/concerns/protected_ref_deploy_key_access.rb
index 6a45d6d274f..986e621131a 100644
--- a/app/models/concerns/protected_ref_deploy_key_access.rb
+++ b/app/models/concerns/protected_ref_deploy_key_access.rb
@@ -59,10 +59,17 @@ module ProtectedRefDeployKeyAccess
   def enabled_deploy_key_for_user?(current_user)
     current_user.can?(:read_project, project) &&
       deploy_key.user_id == current_user.id &&
+      active_project_member?(current_user) &&
       deploy_key_has_write_access_to_project?
   end
 
   def deploy_key_has_write_access_to_project?
     DeployKey.with_write_access_for_project(project, deploy_key: deploy_key).exists?
   end
+
+  def active_project_member?(current_user)
+    return true if Feature.disabled?(:check_membership_in_protected_ref_access) # rubocop:disable Gitlab/FeatureFlagWithoutActor -- This flag already exists, I don't want to add an actor and break it.
+
+    project.member?(current_user)
+  end
 end
diff --git a/app/models/container_repository.rb b/app/models/container_repository.rb
index 582cda39215..e9cc4522310 100644
--- a/app/models/container_repository.rb
+++ b/app/models/container_repository.rb
@@ -337,6 +337,7 @@ class ContainerRepository < ApplicationRecord
       tag.revision = raw_tag['config_digest'].to_s.split(':')[1] || ''
       tag.referrers = raw_tag['referrers']
       tag.published_at = raw_tag['published_at']
+      tag.media_type = raw_tag['media_type']
       tag
     end
   end
diff --git a/app/services/concerns/integrations/project_test_data.rb b/app/services/concerns/integrations/project_test_data.rb
index df02b3136ac..fe13a74c392 100644
--- a/app/services/concerns/integrations/project_test_data.rb
+++ b/app/services/concerns/integrations/project_test_data.rb
@@ -31,7 +31,7 @@ module Integrations
 
       no_data_error(s_('TestHooks|Ensure the project has issues.')) unless issue.present?
 
-      issue.to_hook_data(current_user)
+      issue.to_hook_data(current_user, action: 'open')
     end
 
     def merge_requests_events_data
@@ -39,7 +39,7 @@ module Integrations
 
       no_data_error(s_('TestHooks|Ensure the project has merge requests.')) unless merge_request.present?
 
-      merge_request.to_hook_data(current_user)
+      merge_request.to_hook_data(current_user, action: 'open')
     end
 
     def job_events_data
diff --git a/app/services/issues/base_service.rb b/app/services/issues/base_service.rb
index a9bcf2f38ac..a01f7cb799d 100644
--- a/app/services/issues/base_service.rb
+++ b/app/services/issues/base_service.rb
@@ -9,10 +9,7 @@ module Issues
     EpicAssignmentError = Class.new(::ArgumentError)
 
     def hook_data(issue, action, old_associations: {})
-      hook_data = issue.to_hook_data(current_user, old_associations: old_associations)
-      hook_data[:object_attributes][:action] = action
-
-      hook_data
+      issue.to_hook_data(current_user, old_associations: old_associations, action: action)
     end
 
     def reopen_service
diff --git a/app/services/merge_requests/base_service.rb b/app/services/merge_requests/base_service.rb
index 28832dcbf3d..05eabc46f0a 100644
--- a/app/services/merge_requests/base_service.rb
+++ b/app/services/merge_requests/base_service.rb
@@ -17,8 +17,8 @@ module MergeRequests
     end
 
     def hook_data(merge_request, action, old_rev: nil, old_associations: {})
-      hook_data = merge_request.to_hook_data(current_user, old_associations: old_associations)
-      hook_data[:object_attributes][:action] = action
+      hook_data = merge_request.to_hook_data(current_user, old_associations: old_associations, action: action)
+
       if old_rev && !Gitlab::Git.blank_ref?(old_rev)
         hook_data[:object_attributes][:oldrev] = old_rev
       end
diff --git a/app/views/dashboard/todos/_todo.html.haml b/app/views/dashboard/todos/_todo.html.haml
index 15a6be1216f..571ad0abf2d 100644
--- a/app/views/dashboard/todos/_todo.html.haml
+++ b/app/views/dashboard/todos/_todo.html.haml
@@ -47,8 +47,6 @@
             %span.action-description<
             = first_line_in_markdown(todo, :body, 125, project: todo.project, group: todo.group)
 
-          = render_if_exists "dashboard/todos/review_summary", local_assigns: { todo: todo }
-
     .todo-timestamp.gl-whitespace-nowrap.gl-sm-ml-3.gl-mt-2.gl-mb-2.gl-sm-my-0.gl-px-2.gl-sm-px-0
       %span.todo-timestamp.gl-font-sm.gl-text-secondary
         = todo_due_date(todo)
diff --git a/app/views/notify/new_review_email.html.haml b/app/views/notify/new_review_email.html.haml
index d7bcef310c5..2f105531181 100644
--- a/app/views/notify/new_review_email.html.haml
+++ b/app/views/notify/new_review_email.html.haml
@@ -14,4 +14,3 @@
   - discussion.first_note.project = @project if discussion&.first_note
   - target_url = project_merge_request_url(@project, @merge_request, anchor: "note_#{note.id}")
   = render 'note_email', note: note, diff_limit: 3, target_url: target_url, note_style: "border-bottom:4px solid #ededed; padding-bottom: 1em;", include_stylesheet_link: false, discussion: discussion, author: @author
-= render_if_exists 'notify/review_summary'
diff --git a/app/views/notify/new_review_email.text.erb b/app/views/notify/new_review_email.text.erb
index e974c8b6be8..69cb33b05df 100644
--- a/app/views/notify/new_review_email.text.erb
+++ b/app/views/notify/new_review_email.text.erb
@@ -12,5 +12,3 @@
 --
   <% end %>
 <% end %>
-
-<%= render_if_exists 'notify/review_summary' %>
diff --git a/db/docs/batched_background_migrations/backfill_merge_requests_closing_issues_project_id.yml b/db/docs/batched_background_migrations/backfill_merge_requests_closing_issues_project_id.yml
new file mode 100644
index 00000000000..dda1471f382
--- /dev/null
+++ b/db/docs/batched_background_migrations/backfill_merge_requests_closing_issues_project_id.yml
@@ -0,0 +1,9 @@
+---
+migration_job_name: BackfillMergeRequestsClosingIssuesProjectId
+description: Backfills sharding key `merge_requests_closing_issues.project_id` from `merge_requests`.
+feature_category: code_review_workflow
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/157186
+milestone: '17.2'
+queued_migration_version: 20240624142014
+finalize_after: '2024-07-22'
+finalized_by: # version of the migration that finalized this BBM
diff --git a/db/docs/batched_background_migrations/backfill_ml_model_metadata_project_id.yml b/db/docs/batched_background_migrations/backfill_ml_model_metadata_project_id.yml
new file mode 100644
index 00000000000..faf96d5e929
--- /dev/null
+++ b/db/docs/batched_background_migrations/backfill_ml_model_metadata_project_id.yml
@@ -0,0 +1,9 @@
+---
+migration_job_name: BackfillMlModelMetadataProjectId
+description: Backfills sharding key `ml_model_metadata.project_id` from `ml_models`.
+feature_category: mlops
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/157191
+milestone: '17.2'
+queued_migration_version: 20240624142361
+finalize_after: '2024-07-22'
+finalized_by: # version of the migration that finalized this BBM
diff --git a/db/docs/batched_background_migrations/backfill_vulnerability_external_issue_links_project_id.yml b/db/docs/batched_background_migrations/backfill_vulnerability_external_issue_links_project_id.yml
new file mode 100644
index 00000000000..b2e9aa1d82d
--- /dev/null
+++ b/db/docs/batched_background_migrations/backfill_vulnerability_external_issue_links_project_id.yml
@@ -0,0 +1,9 @@
+---
+migration_job_name: BackfillVulnerabilityExternalIssueLinksProjectId
+description: Backfills sharding key `vulnerability_external_issue_links.project_id` from `vulnerabilities`.
+feature_category: vulnerability_management
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/157179
+milestone: '17.2'
+queued_migration_version: 20240624135063
+finalize_after: '2024-07-22'
+finalized_by: # version of the migration that finalized this BBM
diff --git a/db/docs/merge_requests_closing_issues.yml b/db/docs/merge_requests_closing_issues.yml
index 1774563ebb8..57df2c5e8ff 100644
--- a/db/docs/merge_requests_closing_issues.yml
+++ b/db/docs/merge_requests_closing_issues.yml
@@ -19,3 +19,4 @@ desired_sharding_key:
         table: merge_requests
         sharding_key: target_project_id
         belongs_to: merge_request
+desired_sharding_key_migration_job_name: BackfillMergeRequestsClosingIssuesProjectId
diff --git a/db/docs/ml_model_metadata.yml b/db/docs/ml_model_metadata.yml
index d07ff7f01a2..dd5994cb00b 100644
--- a/db/docs/ml_model_metadata.yml
+++ b/db/docs/ml_model_metadata.yml
@@ -19,3 +19,4 @@ desired_sharding_key:
         table: ml_models
         sharding_key: project_id
         belongs_to: model
+desired_sharding_key_migration_job_name: BackfillMlModelMetadataProjectId
diff --git a/db/docs/vulnerability_external_issue_links.yml b/db/docs/vulnerability_external_issue_links.yml
index 1e58da14bc0..49587bf65dd 100644
--- a/db/docs/vulnerability_external_issue_links.yml
+++ b/db/docs/vulnerability_external_issue_links.yml
@@ -4,7 +4,8 @@ classes:
 - Vulnerabilities::ExternalIssueLink
 feature_categories:
 - vulnerability_management
-description: Stores information about connections between external issue trackers and vulnerabilities
+description: Stores information about connections between external issue trackers
+  and vulnerabilities
 introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/48465
 milestone: '13.7'
 gitlab_schema: gitlab_main_cell
@@ -19,3 +20,4 @@ desired_sharding_key:
         table: vulnerabilities
         sharding_key: project_id
         belongs_to: vulnerability
+desired_sharding_key_migration_job_name: BackfillVulnerabilityExternalIssueLinksProjectId
diff --git a/db/migrate/20240624135059_add_project_id_to_vulnerability_external_issue_links.rb b/db/migrate/20240624135059_add_project_id_to_vulnerability_external_issue_links.rb
new file mode 100644
index 00000000000..44873677254
--- /dev/null
+++ b/db/migrate/20240624135059_add_project_id_to_vulnerability_external_issue_links.rb
@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+class AddProjectIdToVulnerabilityExternalIssueLinks < Gitlab::Database::Migration[2.2]
+  milestone '17.2'
+
+  def change
+    add_column :vulnerability_external_issue_links, :project_id, :bigint
+  end
+end
diff --git a/db/migrate/20240624142010_add_project_id_to_merge_requests_closing_issues.rb b/db/migrate/20240624142010_add_project_id_to_merge_requests_closing_issues.rb
new file mode 100644
index 00000000000..cde2f9a9702
--- /dev/null
+++ b/db/migrate/20240624142010_add_project_id_to_merge_requests_closing_issues.rb
@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+class AddProjectIdToMergeRequestsClosingIssues < Gitlab::Database::Migration[2.2]
+  milestone '17.2'
+
+  def change
+    add_column :merge_requests_closing_issues, :project_id, :bigint
+  end
+end
diff --git a/db/migrate/20240624142357_add_project_id_to_ml_model_metadata.rb b/db/migrate/20240624142357_add_project_id_to_ml_model_metadata.rb
new file mode 100644
index 00000000000..025894ad4ba
--- /dev/null
+++ b/db/migrate/20240624142357_add_project_id_to_ml_model_metadata.rb
@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+class AddProjectIdToMlModelMetadata < Gitlab::Database::Migration[2.2]
+  milestone '17.2'
+
+  def change
+    add_column :ml_model_metadata, :project_id, :bigint
+  end
+end
diff --git a/db/post_migrate/20240624135060_index_vulnerability_external_issue_links_on_project_id.rb b/db/post_migrate/20240624135060_index_vulnerability_external_issue_links_on_project_id.rb
new file mode 100644
index 00000000000..0485ad7b95b
--- /dev/null
+++ b/db/post_migrate/20240624135060_index_vulnerability_external_issue_links_on_project_id.rb
@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+class IndexVulnerabilityExternalIssueLinksOnProjectId < Gitlab::Database::Migration[2.2]
+  milestone '17.2'
+  disable_ddl_transaction!
+
+  INDEX_NAME = 'index_vulnerability_external_issue_links_on_project_id'
+
+  def up
+    add_concurrent_index :vulnerability_external_issue_links, :project_id, name: INDEX_NAME
+  end
+
+  def down
+    remove_concurrent_index_by_name :vulnerability_external_issue_links, INDEX_NAME
+  end
+end
diff --git a/db/post_migrate/20240624135061_add_vulnerability_external_issue_links_project_id_fk.rb b/db/post_migrate/20240624135061_add_vulnerability_external_issue_links_project_id_fk.rb
new file mode 100644
index 00000000000..2cbdabcc7ee
--- /dev/null
+++ b/db/post_migrate/20240624135061_add_vulnerability_external_issue_links_project_id_fk.rb
@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+class AddVulnerabilityExternalIssueLinksProjectIdFk < Gitlab::Database::Migration[2.2]
+  milestone '17.2'
+  disable_ddl_transaction!
+
+  def up
+    add_concurrent_foreign_key :vulnerability_external_issue_links, :projects, column: :project_id, on_delete: :cascade
+  end
+
+  def down
+    with_lock_retries do
+      remove_foreign_key :vulnerability_external_issue_links, column: :project_id
+    end
+  end
+end
diff --git a/db/post_migrate/20240624135062_add_vulnerability_external_issue_links_project_id_trigger.rb b/db/post_migrate/20240624135062_add_vulnerability_external_issue_links_project_id_trigger.rb
new file mode 100644
index 00000000000..0d24025abc8
--- /dev/null
+++ b/db/post_migrate/20240624135062_add_vulnerability_external_issue_links_project_id_trigger.rb
@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+class AddVulnerabilityExternalIssueLinksProjectIdTrigger < Gitlab::Database::Migration[2.2]
+  milestone '17.2'
+
+  def up
+    install_sharding_key_assignment_trigger(
+      table: :vulnerability_external_issue_links,
+      sharding_key: :project_id,
+      parent_table: :vulnerabilities,
+      parent_sharding_key: :project_id,
+      foreign_key: :vulnerability_id
+    )
+  end
+
+  def down
+    remove_sharding_key_assignment_trigger(
+      table: :vulnerability_external_issue_links,
+      sharding_key: :project_id,
+      parent_table: :vulnerabilities,
+      parent_sharding_key: :project_id,
+      foreign_key: :vulnerability_id
+    )
+  end
+end
diff --git a/db/post_migrate/20240624135063_queue_backfill_vulnerability_external_issue_links_project_id.rb b/db/post_migrate/20240624135063_queue_backfill_vulnerability_external_issue_links_project_id.rb
new file mode 100644
index 00000000000..4a720e8ce69
--- /dev/null
+++ b/db/post_migrate/20240624135063_queue_backfill_vulnerability_external_issue_links_project_id.rb
@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+class QueueBackfillVulnerabilityExternalIssueLinksProjectId < Gitlab::Database::Migration[2.2]
+  milestone '17.2'
+  restrict_gitlab_migration gitlab_schema: :gitlab_main_cell
+
+  MIGRATION = "BackfillVulnerabilityExternalIssueLinksProjectId"
+  DELAY_INTERVAL = 2.minutes
+  BATCH_SIZE = 1000
+  SUB_BATCH_SIZE = 100
+
+  def up
+    queue_batched_background_migration(
+      MIGRATION,
+      :vulnerability_external_issue_links,
+      :id,
+      :project_id,
+      :vulnerabilities,
+      :project_id,
+      :vulnerability_id,
+      job_interval: DELAY_INTERVAL,
+      batch_size: BATCH_SIZE,
+      sub_batch_size: SUB_BATCH_SIZE
+    )
+  end
+
+  def down
+    delete_batched_background_migration(
+      MIGRATION,
+      :vulnerability_external_issue_links,
+      :id,
+      [
+        :project_id,
+        :vulnerabilities,
+        :project_id,
+        :vulnerability_id
+      ]
+    )
+  end
+end
diff --git a/db/post_migrate/20240624142011_index_merge_requests_closing_issues_on_project_id.rb b/db/post_migrate/20240624142011_index_merge_requests_closing_issues_on_project_id.rb
new file mode 100644
index 00000000000..d6ade964b69
--- /dev/null
+++ b/db/post_migrate/20240624142011_index_merge_requests_closing_issues_on_project_id.rb
@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+class IndexMergeRequestsClosingIssuesOnProjectId < Gitlab::Database::Migration[2.2]
+  milestone '17.2'
+  disable_ddl_transaction!
+
+  INDEX_NAME = 'index_merge_requests_closing_issues_on_project_id'
+
+  def up
+    add_concurrent_index :merge_requests_closing_issues, :project_id, name: INDEX_NAME
+  end
+
+  def down
+    remove_concurrent_index_by_name :merge_requests_closing_issues, INDEX_NAME
+  end
+end
diff --git a/db/post_migrate/20240624142012_add_merge_requests_closing_issues_project_id_fk.rb b/db/post_migrate/20240624142012_add_merge_requests_closing_issues_project_id_fk.rb
new file mode 100644
index 00000000000..f84a2b98e15
--- /dev/null
+++ b/db/post_migrate/20240624142012_add_merge_requests_closing_issues_project_id_fk.rb
@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+class AddMergeRequestsClosingIssuesProjectIdFk < Gitlab::Database::Migration[2.2]
+  milestone '17.2'
+  disable_ddl_transaction!
+
+  def up
+    add_concurrent_foreign_key :merge_requests_closing_issues, :projects, column: :project_id, on_delete: :cascade
+  end
+
+  def down
+    with_lock_retries do
+      remove_foreign_key :merge_requests_closing_issues, column: :project_id
+    end
+  end
+end
diff --git a/db/post_migrate/20240624142013_add_merge_requests_closing_issues_project_id_trigger.rb b/db/post_migrate/20240624142013_add_merge_requests_closing_issues_project_id_trigger.rb
new file mode 100644
index 00000000000..f3d4598b4da
--- /dev/null
+++ b/db/post_migrate/20240624142013_add_merge_requests_closing_issues_project_id_trigger.rb
@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+class AddMergeRequestsClosingIssuesProjectIdTrigger < Gitlab::Database::Migration[2.2]
+  milestone '17.2'
+
+  def up
+    install_sharding_key_assignment_trigger(
+      table: :merge_requests_closing_issues,
+      sharding_key: :project_id,
+      parent_table: :merge_requests,
+      parent_sharding_key: :target_project_id,
+      foreign_key: :merge_request_id
+    )
+  end
+
+  def down
+    remove_sharding_key_assignment_trigger(
+      table: :merge_requests_closing_issues,
+      sharding_key: :project_id,
+      parent_table: :merge_requests,
+      parent_sharding_key: :target_project_id,
+      foreign_key: :merge_request_id
+    )
+  end
+end
diff --git a/db/post_migrate/20240624142014_queue_backfill_merge_requests_closing_issues_project_id.rb b/db/post_migrate/20240624142014_queue_backfill_merge_requests_closing_issues_project_id.rb
new file mode 100644
index 00000000000..d4d7f8b38b8
--- /dev/null
+++ b/db/post_migrate/20240624142014_queue_backfill_merge_requests_closing_issues_project_id.rb
@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+class QueueBackfillMergeRequestsClosingIssuesProjectId < Gitlab::Database::Migration[2.2]
+  milestone '17.2'
+  restrict_gitlab_migration gitlab_schema: :gitlab_main_cell
+
+  MIGRATION = "BackfillMergeRequestsClosingIssuesProjectId"
+  DELAY_INTERVAL = 2.minutes
+  BATCH_SIZE = 1000
+  SUB_BATCH_SIZE = 100
+
+  def up
+    queue_batched_background_migration(
+      MIGRATION,
+      :merge_requests_closing_issues,
+      :id,
+      :project_id,
+      :merge_requests,
+      :target_project_id,
+      :merge_request_id,
+      job_interval: DELAY_INTERVAL,
+      batch_size: BATCH_SIZE,
+      sub_batch_size: SUB_BATCH_SIZE
+    )
+  end
+
+  def down
+    delete_batched_background_migration(
+      MIGRATION,
+      :merge_requests_closing_issues,
+      :id,
+      [
+        :project_id,
+        :merge_requests,
+        :target_project_id,
+        :merge_request_id
+      ]
+    )
+  end
+end
diff --git a/db/post_migrate/20240624142358_index_ml_model_metadata_on_project_id.rb b/db/post_migrate/20240624142358_index_ml_model_metadata_on_project_id.rb
new file mode 100644
index 00000000000..f4c545c73de
--- /dev/null
+++ b/db/post_migrate/20240624142358_index_ml_model_metadata_on_project_id.rb
@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+class IndexMlModelMetadataOnProjectId < Gitlab::Database::Migration[2.2]
+  milestone '17.2'
+  disable_ddl_transaction!
+
+  INDEX_NAME = 'index_ml_model_metadata_on_project_id'
+
+  def up
+    add_concurrent_index :ml_model_metadata, :project_id, name: INDEX_NAME
+  end
+
+  def down
+    remove_concurrent_index_by_name :ml_model_metadata, INDEX_NAME
+  end
+end
diff --git a/db/post_migrate/20240624142359_add_ml_model_metadata_project_id_fk.rb b/db/post_migrate/20240624142359_add_ml_model_metadata_project_id_fk.rb
new file mode 100644
index 00000000000..30fe51dfebe
--- /dev/null
+++ b/db/post_migrate/20240624142359_add_ml_model_metadata_project_id_fk.rb
@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+class AddMlModelMetadataProjectIdFk < Gitlab::Database::Migration[2.2]
+  milestone '17.2'
+  disable_ddl_transaction!
+
+  def up
+    add_concurrent_foreign_key :ml_model_metadata, :projects, column: :project_id, on_delete: :cascade
+  end
+
+  def down
+    with_lock_retries do
+      remove_foreign_key :ml_model_metadata, column: :project_id
+    end
+  end
+end
diff --git a/db/post_migrate/20240624142360_add_ml_model_metadata_project_id_trigger.rb b/db/post_migrate/20240624142360_add_ml_model_metadata_project_id_trigger.rb
new file mode 100644
index 00000000000..aa567e0f195
--- /dev/null
+++ b/db/post_migrate/20240624142360_add_ml_model_metadata_project_id_trigger.rb
@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+class AddMlModelMetadataProjectIdTrigger < Gitlab::Database::Migration[2.2]
+  milestone '17.2'
+
+  def up
+    install_sharding_key_assignment_trigger(
+      table: :ml_model_metadata,
+      sharding_key: :project_id,
+      parent_table: :ml_models,
+      parent_sharding_key: :project_id,
+      foreign_key: :model_id
+    )
+  end
+
+  def down
+    remove_sharding_key_assignment_trigger(
+      table: :ml_model_metadata,
+      sharding_key: :project_id,
+      parent_table: :ml_models,
+      parent_sharding_key: :project_id,
+      foreign_key: :model_id
+    )
+  end
+end
diff --git a/db/post_migrate/20240624142361_queue_backfill_ml_model_metadata_project_id.rb b/db/post_migrate/20240624142361_queue_backfill_ml_model_metadata_project_id.rb
new file mode 100644
index 00000000000..1ab5243b0d1
--- /dev/null
+++ b/db/post_migrate/20240624142361_queue_backfill_ml_model_metadata_project_id.rb
@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+class QueueBackfillMlModelMetadataProjectId < Gitlab::Database::Migration[2.2]
+  milestone '17.2'
+  restrict_gitlab_migration gitlab_schema: :gitlab_main_cell
+
+  MIGRATION = "BackfillMlModelMetadataProjectId"
+  DELAY_INTERVAL = 2.minutes
+  BATCH_SIZE = 1000
+  SUB_BATCH_SIZE = 100
+
+  def up
+    queue_batched_background_migration(
+      MIGRATION,
+      :ml_model_metadata,
+      :id,
+      :project_id,
+      :ml_models,
+      :project_id,
+      :model_id,
+      job_interval: DELAY_INTERVAL,
+      batch_size: BATCH_SIZE,
+      sub_batch_size: SUB_BATCH_SIZE
+    )
+  end
+
+  def down
+    delete_batched_background_migration(
+      MIGRATION,
+      :ml_model_metadata,
+      :id,
+      [
+        :project_id,
+        :ml_models,
+        :project_id,
+        :model_id
+      ]
+    )
+  end
+end
diff --git a/db/schema_migrations/20240624135059 b/db/schema_migrations/20240624135059
new file mode 100644
index 00000000000..d4cb76b6b61
--- /dev/null
+++ b/db/schema_migrations/20240624135059
@@ -0,0 +1 @@
+8a824127694919202560b575f42fdfdf29688008221a2aae156b2843cebc0d83
\ No newline at end of file
diff --git a/db/schema_migrations/20240624135060 b/db/schema_migrations/20240624135060
new file mode 100644
index 00000000000..03ca9b7167e
--- /dev/null
+++ b/db/schema_migrations/20240624135060
@@ -0,0 +1 @@
+ccd7e8d1e0fdae0ca5263588d0cf6e672bf4cf240a0a2ae2e95b74f4f8a881df
\ No newline at end of file
diff --git a/db/schema_migrations/20240624135061 b/db/schema_migrations/20240624135061
new file mode 100644
index 00000000000..b0958d18e33
--- /dev/null
+++ b/db/schema_migrations/20240624135061
@@ -0,0 +1 @@
+6ec923f21a64b031dfc2cc4511c1f7a582da6c0a7e16aff1afcf6e6c97134e85
\ No newline at end of file
diff --git a/db/schema_migrations/20240624135062 b/db/schema_migrations/20240624135062
new file mode 100644
index 00000000000..4c098dddf5d
--- /dev/null
+++ b/db/schema_migrations/20240624135062
@@ -0,0 +1 @@
+cd4d39ad8ee50e57ee073b2adc14303d972c0fbe5cd1f5bb58254759fd7150c0
\ No newline at end of file
diff --git a/db/schema_migrations/20240624135063 b/db/schema_migrations/20240624135063
new file mode 100644
index 00000000000..5f3017f1c73
--- /dev/null
+++ b/db/schema_migrations/20240624135063
@@ -0,0 +1 @@
+0aedf1984450c9980ec0e6ac9f483b950a17094bd7ca9d73e4b0e829350d31c8
\ No newline at end of file
diff --git a/db/schema_migrations/20240624142010 b/db/schema_migrations/20240624142010
new file mode 100644
index 00000000000..71bbd5e950c
--- /dev/null
+++ b/db/schema_migrations/20240624142010
@@ -0,0 +1 @@
+93ceb23986347c7c60ee9b7d7c05c4ce46931fb80d392c4219fb2d8d49215c58
\ No newline at end of file
diff --git a/db/schema_migrations/20240624142011 b/db/schema_migrations/20240624142011
new file mode 100644
index 00000000000..78deb04fbf4
--- /dev/null
+++ b/db/schema_migrations/20240624142011
@@ -0,0 +1 @@
+0fd002ff4787b30dee265f361d35bb689376da030b5394170f25cf168da99578
\ No newline at end of file
diff --git a/db/schema_migrations/20240624142012 b/db/schema_migrations/20240624142012
new file mode 100644
index 00000000000..fa12d6591f3
--- /dev/null
+++ b/db/schema_migrations/20240624142012
@@ -0,0 +1 @@
+435bd70e6f7c4c490731e63cf4f85cf712ad8ec458b3333e81edba70ac0f0c1c
\ No newline at end of file
diff --git a/db/schema_migrations/20240624142013 b/db/schema_migrations/20240624142013
new file mode 100644
index 00000000000..679b71071a5
--- /dev/null
+++ b/db/schema_migrations/20240624142013
@@ -0,0 +1 @@
+dbf01411a1ab4e06fd93130cab3475e7893ecd44bcb0c85115b303951d97497c
\ No newline at end of file
diff --git a/db/schema_migrations/20240624142014 b/db/schema_migrations/20240624142014
new file mode 100644
index 00000000000..149875128b6
--- /dev/null
+++ b/db/schema_migrations/20240624142014
@@ -0,0 +1 @@
+65180c29e731e24d4ecf137783e6f6dfcfcdb30374a03b7ddab983e763c9083c
\ No newline at end of file
diff --git a/db/schema_migrations/20240624142357 b/db/schema_migrations/20240624142357
new file mode 100644
index 00000000000..242888c8510
--- /dev/null
+++ b/db/schema_migrations/20240624142357
@@ -0,0 +1 @@
+eff49d105fc2ba9249585e119b53761262cd66357b928a5a4352daba211db343
\ No newline at end of file
diff --git a/db/schema_migrations/20240624142358 b/db/schema_migrations/20240624142358
new file mode 100644
index 00000000000..0ce564cb1d5
--- /dev/null
+++ b/db/schema_migrations/20240624142358
@@ -0,0 +1 @@
+4fde6debba6a1db232487c00dd9b19e250f0d8e87c41027c066800083db03d16
\ No newline at end of file
diff --git a/db/schema_migrations/20240624142359 b/db/schema_migrations/20240624142359
new file mode 100644
index 00000000000..9a24361d406
--- /dev/null
+++ b/db/schema_migrations/20240624142359
@@ -0,0 +1 @@
+f68455541ceacc13db8fd4fd97d6a1817d51f81745ea20e2d2041b72eaef70bd
\ No newline at end of file
diff --git a/db/schema_migrations/20240624142360 b/db/schema_migrations/20240624142360
new file mode 100644
index 00000000000..5ddaf151a14
--- /dev/null
+++ b/db/schema_migrations/20240624142360
@@ -0,0 +1 @@
+aa56e4e32eb94c777a60e5ab7ef6e3048a8d08c2997a45e568cfb9f20114ebbd
\ No newline at end of file
diff --git a/db/schema_migrations/20240624142361 b/db/schema_migrations/20240624142361
new file mode 100644
index 00000000000..adfffd1a38c
--- /dev/null
+++ b/db/schema_migrations/20240624142361
@@ -0,0 +1 @@
+e4c2d10e3d78935eabbe54a0b1799e935190c7c028d6f476a6818b163751576f
\ No newline at end of file
diff --git a/db/structure.sql b/db/structure.sql
index 4122c1c36bf..b04deef2b9d 100644
--- a/db/structure.sql
+++ b/db/structure.sql
@@ -1425,6 +1425,22 @@ RETURN NEW;
 END
 $$;
 
+CREATE FUNCTION trigger_9f3745f8fe32() RETURNS trigger
+    LANGUAGE plpgsql
+    AS $$
+BEGIN
+IF NEW."project_id" IS NULL THEN
+  SELECT "target_project_id"
+  INTO NEW."project_id"
+  FROM "merge_requests"
+  WHERE "merge_requests"."id" = NEW."merge_request_id";
+END IF;
+
+RETURN NEW;
+
+END
+$$;
+
 CREATE FUNCTION trigger_a1bc7c70cbdf() RETURNS trigger
     LANGUAGE plpgsql
     AS $$
@@ -1665,6 +1681,22 @@ RETURN NEW;
 END
 $$;
 
+CREATE FUNCTION trigger_e1da4a738230() RETURNS trigger
+    LANGUAGE plpgsql
+    AS $$
+BEGIN
+IF NEW."project_id" IS NULL THEN
+  SELECT "project_id"
+  INTO NEW."project_id"
+  FROM "vulnerabilities"
+  WHERE "vulnerabilities"."id" = NEW."vulnerability_id";
+END IF;
+
+RETURN NEW;
+
+END
+$$;
+
 CREATE FUNCTION trigger_ebab34f83f1d() RETURNS trigger
     LANGUAGE plpgsql
     AS $$
@@ -1681,6 +1713,22 @@ RETURN NEW;
 END
 $$;
 
+CREATE FUNCTION trigger_f6c61cdddf31() RETURNS trigger
+    LANGUAGE plpgsql
+    AS $$
+BEGIN
+IF NEW."project_id" IS NULL THEN
+  SELECT "project_id"
+  INTO NEW."project_id"
+  FROM "ml_models"
+  WHERE "ml_models"."id" = NEW."model_id";
+END IF;
+
+RETURN NEW;
+
+END
+$$;
+
 CREATE FUNCTION trigger_fb587b1ae7ad() RETURNS trigger
     LANGUAGE plpgsql
     AS $$
@@ -12569,7 +12617,8 @@ CREATE TABLE merge_requests_closing_issues (
     issue_id integer NOT NULL,
     created_at timestamp without time zone NOT NULL,
     updated_at timestamp without time zone NOT NULL,
-    from_mr_description boolean DEFAULT true NOT NULL
+    from_mr_description boolean DEFAULT true NOT NULL,
+    project_id bigint
 );
 
 CREATE SEQUENCE merge_requests_closing_issues_id_seq
@@ -12850,6 +12899,7 @@ CREATE TABLE ml_model_metadata (
     model_id bigint NOT NULL,
     name text NOT NULL,
     value text NOT NULL,
+    project_id bigint,
     CONSTRAINT check_26d3322153 CHECK ((char_length(value) <= 5000)),
     CONSTRAINT check_36240c80a7 CHECK ((char_length(name) <= 255))
 );
@@ -18719,6 +18769,7 @@ CREATE TABLE vulnerability_external_issue_links (
     external_type smallint DEFAULT 1 NOT NULL,
     external_project_key text NOT NULL,
     external_issue_key text NOT NULL,
+    project_id bigint,
     CONSTRAINT check_3200604f5e CHECK ((char_length(external_issue_key) <= 255)),
     CONSTRAINT check_68cffd19b0 CHECK ((char_length(external_project_key) <= 255))
 );
@@ -27550,6 +27601,8 @@ CREATE INDEX index_merge_requests_closing_issues_on_issue_id ON merge_requests_c
 
 CREATE INDEX index_merge_requests_closing_issues_on_merge_request_id ON merge_requests_closing_issues USING btree (merge_request_id);
 
+CREATE INDEX index_merge_requests_closing_issues_on_project_id ON merge_requests_closing_issues USING btree (project_id);
+
 CREATE INDEX index_merge_requests_compliance_violations_on_violating_user_id ON merge_requests_compliance_violations USING btree (violating_user_id);
 
 CREATE UNIQUE INDEX index_merge_requests_compliance_violations_unique_columns ON merge_requests_compliance_violations USING btree (merge_request_id, violating_user_id, reason);
@@ -27676,6 +27729,8 @@ CREATE UNIQUE INDEX index_ml_experiments_on_project_id_and_name ON ml_experiment
 
 CREATE INDEX index_ml_experiments_on_user_id ON ml_experiments USING btree (user_id);
 
+CREATE INDEX index_ml_model_metadata_on_project_id ON ml_model_metadata USING btree (project_id);
+
 CREATE INDEX index_ml_model_version_metadata_on_project_id ON ml_model_version_metadata USING btree (project_id);
 
 CREATE INDEX index_ml_model_versions_on_created_at_on_model_id ON ml_model_versions USING btree (model_id, created_at);
@@ -29214,6 +29269,8 @@ CREATE INDEX index_vulnerability_exports_on_project_id_not_null ON vulnerability
 
 CREATE INDEX index_vulnerability_external_issue_links_on_author_id ON vulnerability_external_issue_links USING btree (author_id);
 
+CREATE INDEX index_vulnerability_external_issue_links_on_project_id ON vulnerability_external_issue_links USING btree (project_id);
+
 CREATE INDEX index_vulnerability_external_issue_links_on_vulnerability_id ON vulnerability_external_issue_links USING btree (vulnerability_id);
 
 CREATE INDEX index_vulnerability_feedback_finding_uuid ON vulnerability_feedback USING hash (finding_uuid);
@@ -31390,6 +31447,8 @@ CREATE TRIGGER trigger_98ad3a4c1d35 BEFORE INSERT OR UPDATE ON merge_request_rev
 
 CREATE TRIGGER trigger_9e137c16de79 BEFORE INSERT OR UPDATE ON vulnerability_findings_remediations FOR EACH ROW EXECUTE FUNCTION trigger_9e137c16de79();
 
+CREATE TRIGGER trigger_9f3745f8fe32 BEFORE INSERT OR UPDATE ON merge_requests_closing_issues FOR EACH ROW EXECUTE FUNCTION trigger_9f3745f8fe32();
+
 CREATE TRIGGER trigger_a1bc7c70cbdf BEFORE INSERT OR UPDATE ON vulnerability_user_mentions FOR EACH ROW EXECUTE FUNCTION trigger_a1bc7c70cbdf();
 
 CREATE TRIGGER trigger_a253cb3cacdf BEFORE INSERT OR UPDATE ON dora_daily_metrics FOR EACH ROW EXECUTE FUNCTION trigger_a253cb3cacdf();
@@ -31424,8 +31483,12 @@ CREATE TRIGGER trigger_dc13168b8025 BEFORE INSERT OR UPDATE ON vulnerability_fla
 
 CREATE TRIGGER trigger_delete_project_namespace_on_project_delete AFTER DELETE ON projects FOR EACH ROW WHEN ((old.project_namespace_id IS NOT NULL)) EXECUTE FUNCTION delete_associated_project_namespace();
 
+CREATE TRIGGER trigger_e1da4a738230 BEFORE INSERT OR UPDATE ON vulnerability_external_issue_links FOR EACH ROW EXECUTE FUNCTION trigger_e1da4a738230();
+
 CREATE TRIGGER trigger_ebab34f83f1d BEFORE INSERT OR UPDATE ON packages_debian_publications FOR EACH ROW EXECUTE FUNCTION trigger_ebab34f83f1d();
 
+CREATE TRIGGER trigger_f6c61cdddf31 BEFORE INSERT OR UPDATE ON ml_model_metadata FOR EACH ROW EXECUTE FUNCTION trigger_f6c61cdddf31();
+
 CREATE TRIGGER trigger_fb587b1ae7ad BEFORE INSERT OR UPDATE ON merge_requests FOR EACH ROW EXECUTE FUNCTION trigger_fb587b1ae7ad();
 
 CREATE TRIGGER trigger_fbd42ed69453 BEFORE INSERT OR UPDATE ON external_status_checks_protected_branches FOR EACH ROW EXECUTE FUNCTION trigger_fbd42ed69453();
@@ -32366,6 +32429,9 @@ ALTER TABLE ONLY lfs_objects_projects
 ALTER TABLE ONLY merge_requests
     ADD CONSTRAINT fk_a6963e8447 FOREIGN KEY (target_project_id) REFERENCES projects(id) ON DELETE CASCADE;
 
+ALTER TABLE ONLY merge_requests_closing_issues
+    ADD CONSTRAINT fk_a8703820ae FOREIGN KEY (project_id) REFERENCES projects(id) ON DELETE CASCADE;
+
 ALTER TABLE ONLY ssh_signatures
     ADD CONSTRAINT fk_aa1efbe865 FOREIGN KEY (key_id) REFERENCES keys(id) ON DELETE SET NULL;
 
@@ -32384,6 +32450,9 @@ ALTER TABLE ONLY identities
 ALTER TABLE ONLY boards
     ADD CONSTRAINT fk_ab0a250ff6 FOREIGN KEY (iteration_cadence_id) REFERENCES iterations_cadences(id) ON DELETE CASCADE;
 
+ALTER TABLE ONLY vulnerability_external_issue_links
+    ADD CONSTRAINT fk_abd093bb21 FOREIGN KEY (project_id) REFERENCES projects(id) ON DELETE CASCADE;
+
 ALTER TABLE ONLY audit_events_streaming_http_instance_namespace_filters
     ADD CONSTRAINT fk_abe44125bc FOREIGN KEY (audit_events_instance_external_audit_event_destination_id) REFERENCES audit_events_instance_external_audit_event_destinations(id) ON DELETE CASCADE;
 
@@ -32864,6 +32933,9 @@ ALTER TABLE ONLY boards_epic_list_user_preferences
 ALTER TABLE ONLY user_project_callouts
     ADD CONSTRAINT fk_f62dd11a33 FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE;
 
+ALTER TABLE ONLY ml_model_metadata
+    ADD CONSTRAINT fk_f68c7e109c FOREIGN KEY (project_id) REFERENCES projects(id) ON DELETE CASCADE;
+
 ALTER TABLE ONLY workspaces
     ADD CONSTRAINT fk_f78aeddc77 FOREIGN KEY (cluster_agent_id) REFERENCES cluster_agents(id) ON DELETE CASCADE;
 
diff --git a/doc/api/graphql/reference/index.md b/doc/api/graphql/reference/index.md
index 7fe9d6bb4df..f091f2ecc50 100644
--- a/doc/api/graphql/reference/index.md
+++ b/doc/api/graphql/reference/index.md
@@ -13435,29 +13435,6 @@ The edge type for [`MergeRequestParticipant`](#mergerequestparticipant).
 | <a id="mergerequestparticipantedgecursor"></a>`cursor` | [`String!`](#string) | A cursor for use in pagination. |
 | <a id="mergerequestparticipantedgenode"></a>`node` | [`MergeRequestParticipant`](#mergerequestparticipant) | The item at the end of the edge. |
 
-#### `MergeRequestReviewLlmSummaryConnection`
-
-The connection type for [`MergeRequestReviewLlmSummary`](#mergerequestreviewllmsummary).
-
-##### Fields
-
-| Name | Type | Description |
-| ---- | ---- | ----------- |
-| <a id="mergerequestreviewllmsummaryconnectionedges"></a>`edges` | [`[MergeRequestReviewLlmSummaryEdge]`](#mergerequestreviewllmsummaryedge) | A list of edges. |
-| <a id="mergerequestreviewllmsummaryconnectionnodes"></a>`nodes` | [`[MergeRequestReviewLlmSummary]`](#mergerequestreviewllmsummary) | A list of nodes. |
-| <a id="mergerequestreviewllmsummaryconnectionpageinfo"></a>`pageInfo` | [`PageInfo!`](#pageinfo) | Information to aid in pagination. |
-
-#### `MergeRequestReviewLlmSummaryEdge`
-
-The edge type for [`MergeRequestReviewLlmSummary`](#mergerequestreviewllmsummary).
-
-##### Fields
-
-| Name | Type | Description |
-| ---- | ---- | ----------- |
-| <a id="mergerequestreviewllmsummaryedgecursor"></a>`cursor` | [`String!`](#string) | A cursor for use in pagination. |
-| <a id="mergerequestreviewllmsummaryedgenode"></a>`node` | [`MergeRequestReviewLlmSummary`](#mergerequestreviewllmsummary) | The item at the end of the edge. |
-
 #### `MergeRequestReviewerConnection`
 
 The connection type for [`MergeRequestReviewer`](#mergerequestreviewer).
@@ -18980,6 +18957,7 @@ A tag from a container repository.
 | <a id="containerrepositorytagcreatedat"></a>`createdAt` | [`Time`](#time) | Timestamp when the tag was created. |
 | <a id="containerrepositorytagdigest"></a>`digest` | [`String`](#string) | Digest of the tag. |
 | <a id="containerrepositorytaglocation"></a>`location` | [`String!`](#string) | URL of the tag. |
+| <a id="containerrepositorytagmediatype"></a>`mediaType` | [`String`](#string) | Media type of the tag. |
 | <a id="containerrepositorytagname"></a>`name` | [`String!`](#string) | Name of the tag. |
 | <a id="containerrepositorytagpath"></a>`path` | [`String!`](#string) | Path of the tag. |
 | <a id="containerrepositorytagpublishedat"></a>`publishedAt` | [`Time`](#time) | Timestamp when the tag was published. |
@@ -25088,7 +25066,6 @@ A diff version of a merge request.
 | Name | Type | Description |
 | ---- | ---- | ----------- |
 | <a id="mergerequestdiffcreatedat"></a>`createdAt` | [`Time!`](#time) | Timestamp of when the diff was created. |
-| <a id="mergerequestdiffreviewllmsummaries"></a>`reviewLlmSummaries` | [`MergeRequestReviewLlmSummaryConnection`](#mergerequestreviewllmsummaryconnection) | Review summaries generated by AI. (see [Connections](#connections)) |
 | <a id="mergerequestdiffupdatedat"></a>`updatedAt` | [`Time!`](#time) | Timestamp of when the diff was updated. |
 
 ### `MergeRequestDiffRegistry`
@@ -25491,23 +25468,6 @@ Check permissions for the current user on a merge request.
 | <a id="mergerequestpermissionsrevertoncurrentmergerequest"></a>`revertOnCurrentMergeRequest` | [`Boolean!`](#boolean) | If `true`, the user can perform `revert_on_current_merge_request` on this resource. |
 | <a id="mergerequestpermissionsupdatemergerequest"></a>`updateMergeRequest` | [`Boolean!`](#boolean) | If `true`, the user can perform `update_merge_request` on this resource. |
 
-### `MergeRequestReviewLlmSummary`
-
-A review summary generated by AI.
-
-#### Fields
-
-| Name | Type | Description |
-| ---- | ---- | ----------- |
-| <a id="mergerequestreviewllmsummarycontent"></a>`content` | [`String!`](#string) | Content of the review summary. |
-| <a id="mergerequestreviewllmsummarycontenthtml"></a>`contentHtml` | [`String!`](#string) | HTML content of the review summary, converted from Markdown. |
-| <a id="mergerequestreviewllmsummarycreatedat"></a>`createdAt` | [`Time!`](#time) | Timestamp of when the review summary was created. |
-| <a id="mergerequestreviewllmsummarymergerequestdiffid"></a>`mergeRequestDiffId` | [`ID!`](#id) | ID of the Merge Request diff associated with the review summary. |
-| <a id="mergerequestreviewllmsummaryprovider"></a>`provider` | [`String!`](#string) | AI provider that generated the summary. |
-| <a id="mergerequestreviewllmsummaryreviewer"></a>`reviewer` | [`UserCore`](#usercore) | User who authored the review associated with the review summary. |
-| <a id="mergerequestreviewllmsummaryupdatedat"></a>`updatedAt` | [`Time!`](#time) | Timestamp of when the review summary was updated. |
-| <a id="mergerequestreviewllmsummaryuser"></a>`user` | [`UserCore`](#usercore) | User associated with the review summary. |
-
 ### `MergeRequestReviewer`
 
 A user assigned to a merge request as a reviewer.
diff --git a/doc/api/merge_request_approvals.md b/doc/api/merge_request_approvals.md
index fb238fe8d8b..78428502112 100644
--- a/doc/api/merge_request_approvals.md
+++ b/doc/api/merge_request_approvals.md
@@ -65,6 +65,7 @@ Example response:
     "id": 2,
     "name": "rule1",
     "rule_type": "any_approver",
+    "report_type": null,
     "eligible_approvers": [],
     "approvals_required": 3,
     "users": [],
@@ -77,6 +78,20 @@ Example response:
     "id": 3,
     "name": "rule2",
     "rule_type": "code_owner",
+    "report_type": null,
+    "eligible_approvers": [],
+    "approvals_required": 2,
+    "users": [],
+    "groups": [],
+    "contains_hidden_groups": false,
+    "protected_branches": [],
+    "applies_to_all_protected_branches": true
+  },
+  {
+    "id": 4,
+    "name": "rule2",
+    "rule_type": "report_approver",
+    "report_type": "code_coverage",
     "eligible_approvers": [],
     "approvals_required": 2,
     "users": [],
@@ -330,6 +345,7 @@ Supported attributes:
     "id": 1,
     "name": "security",
     "rule_type": "regular",
+    "report_type": null,
     "eligible_approvers": [
       {
         "id": 5,
@@ -403,7 +419,87 @@ Supported attributes:
         "code_owner_approval_required": "false"
       }
     ],
-    "contains_hidden_groups": false
+    "contains_hidden_groups": false,
+  },
+  {
+    "id": 2,
+    "name": "Coverage-Check",
+    "rule_type": "report_approver",
+    "report_type": "code_coverage",
+    "eligible_approvers": [
+      {
+        "id": 5,
+        "name": "John Doe",
+        "username": "jdoe",
+        "state": "active",
+        "avatar_url": "https://www.gravatar.com/avatar/0?s=80&d=identicon",
+        "web_url": "http://localhost/jdoe"
+      },
+      {
+        "id": 50,
+        "name": "Group Member 1",
+        "username": "group_member_1",
+        "state": "active",
+        "avatar_url": "https://www.gravatar.com/avatar/0?s=80&d=identicon",
+        "web_url": "http://localhost/group_member_1"
+      }
+    ],
+    "approvals_required": 3,
+    "users": [
+      {
+        "id": 5,
+        "name": "John Doe",
+        "username": "jdoe",
+        "state": "active",
+        "avatar_url": "https://www.gravatar.com/avatar/0?s=80&d=identicon",
+        "web_url": "http://localhost/jdoe"
+      }
+    ],
+    "groups": [
+      {
+        "id": 5,
+        "name": "group1",
+        "path": "group1",
+        "description": "",
+        "visibility": "public",
+        "lfs_enabled": false,
+        "avatar_url": null,
+        "web_url": "http://localhost/groups/group1",
+        "request_access_enabled": false,
+        "full_name": "group1",
+        "full_path": "group1",
+        "parent_id": null,
+        "ldap_cn": null,
+        "ldap_access": null
+      }
+    ],
+    "applies_to_all_protected_branches": false,
+    "protected_branches": [
+      {
+        "id": 1,
+        "name": "main",
+        "push_access_levels": [
+          {
+            "access_level": 30,
+            "access_level_description": "Developers + Maintainers"
+          }
+        ],
+        "merge_access_levels": [
+          {
+            "access_level": 30,
+            "access_level_description": "Developers + Maintainers"
+          }
+        ],
+        "unprotect_access_levels": [
+          {
+            "access_level": 40,
+            "access_level_description": "Maintainers"
+          }
+        ],
+        "code_owner_approval_required": "false"
+      }
+    ],
+    "contains_hidden_groups": false,
   }
 ]
 ```
@@ -431,6 +527,7 @@ Supported attributes:
   "id": 1,
   "name": "security",
   "rule_type": "regular",
+  "report_type": null,
   "eligible_approvers": [
     {
       "id": 5,
@@ -909,6 +1006,63 @@ Supported attributes:
     "id": 1,
     "name": "security",
     "rule_type": "regular",
+    "report_type": null,
+    "eligible_approvers": [
+      {
+        "id": 5,
+        "name": "John Doe",
+        "username": "jdoe",
+        "state": "active",
+        "avatar_url": "https://www.gravatar.com/avatar/0?s=80&d=identicon",
+        "web_url": "http://localhost/jdoe"
+      },
+      {
+        "id": 50,
+        "name": "Group Member 1",
+        "username": "group_member_1",
+        "state": "active",
+        "avatar_url": "https://www.gravatar.com/avatar/0?s=80&d=identicon",
+        "web_url": "http://localhost/group_member_1"
+      }
+    ],
+    "approvals_required": 3,
+    "source_rule": null,
+    "users": [
+      {
+        "id": 5,
+        "name": "John Doe",
+        "username": "jdoe",
+        "state": "active",
+        "avatar_url": "https://www.gravatar.com/avatar/0?s=80&d=identicon",
+        "web_url": "http://localhost/jdoe"
+      }
+    ],
+    "groups": [
+      {
+        "id": 5,
+        "name": "group1",
+        "path": "group1",
+        "description": "",
+        "visibility": "public",
+        "lfs_enabled": false,
+        "avatar_url": null,
+        "web_url": "http://localhost/groups/group1",
+        "request_access_enabled": false,
+        "full_name": "group1",
+        "full_path": "group1",
+        "parent_id": null,
+        "ldap_cn": null,
+        "ldap_access": null
+      }
+    ],
+    "contains_hidden_groups": false,
+    "overridden": false
+  },
+  {
+    "id": 2,
+    "name": "Coverage-Check",
+    "rule_type": "report_approver",
+    "report_type": "code_coverage",
     "eligible_approvers": [
       {
         "id": 5,
@@ -984,6 +1138,7 @@ Supported attributes:
   "id": 1,
   "name": "security",
   "rule_type": "regular",
+  "report_type": null,
   "eligible_approvers": [
     {
       "id": 5,
diff --git a/doc/architecture/blueprints/ai_gateway/decisions/002_proxy.md b/doc/architecture/blueprints/ai_gateway/decisions/002_proxy.md
index 1b6524b9b66..1e779eeee06 100644
--- a/doc/architecture/blueprints/ai_gateway/decisions/002_proxy.md
+++ b/doc/architecture/blueprints/ai_gateway/decisions/002_proxy.md
@@ -104,11 +104,11 @@ POST /v1/proxy/vertex-ai/(*path)
 
 - Clients must send JWT issued by GitLab.com or Customer Dot.
   - This JWT contains `scopes` that indicates the permissions given to the GitLab-instance. This `scopes` will vary per Duo subscription tier.
-  - To access these proxy endpoints, `scopes` must **include** one of: `explain_vulnerability`, `resolve_vulnerability`, `generate_description`, `summarize_all_open_notes`, `summarize_submitted_review`, `generate_commit_message`, `summarize_review`, `fill_in_merge_request_template`, `analyze_ci_job_failure`.
+  - To access these proxy endpoints, `scopes` must **include** one of: `explain_vulnerability`, `resolve_vulnerability`, `generate_description`, `summarize_all_open_notes`, `generate_commit_message`, `summarize_review`, `fill_in_merge_request_template`, `analyze_ci_job_failure`.
   - Requests that do not meet the specified criteria will result in a 401 Unauthorized Access error.
 - Clients must send `X-Gitlab-Feature-Usage` headers in HTTP requests.
   - This `X-Gitlab-Feature-Usage` header indicates the purpose of the API request.
-  - To access these proxy endpoints, `X-Gitlab-Feature-Usage` must **be** one of: `explain_vulnerability`, `resolve_vulnerability`, `generate_description`, `summarize_all_open_notes`, `summarize_submitted_review`, `generate_commit_message`, `summarize_review`, `fill_in_merge_request_template`, `analyze_ci_job_failure`.
+  - To access these proxy endpoints, `X-Gitlab-Feature-Usage` must **be** one of: `explain_vulnerability`, `resolve_vulnerability`, `generate_description`, `summarize_all_open_notes`, `generate_commit_message`, `summarize_review`, `fill_in_merge_request_template`, `analyze_ci_job_failure`.
   - Requests that do not meet the specified criteria will result in a 401 Unauthorized Access error.
 - For logging, we add the value of `X-Gitlab-Feature-Usage` header in access logs in AI Gateway.
 - For metrics, we instrument the concurrent requests with `ModelRequestInstrumentator` and input/output tokens with `TextGenModelInstrumentator` in AI Gateway. It should be labled with `X-Gitlab-Instance-Id`, `X-Gitlab-Global-User-Id` and `X-Gitlab-Feature-Usage`.
diff --git a/doc/architecture/blueprints/work_items/index.md b/doc/architecture/blueprints/work_items/index.md
index 76193009690..7e7b80e66bd 100644
--- a/doc/architecture/blueprints/work_items/index.md
+++ b/doc/architecture/blueprints/work_items/index.md
@@ -169,6 +169,8 @@ Since this is a large project with numerous moving parts, feature flags are bein
 | `work_items_beta` | `gitlab-org`, `gitlab-com` |
 | `work_items_mvc_2` | `gitlab-org/plan-stage` |
 
+For epic work item specific feature flags, please see the [Epic Work Item Migration Epic](https://gitlab.com/groups/gitlab-org/-/epics/11777#feature-flags).
+
 ## Motivation
 
 Work Items main goal is to enhance the planning toolset to become the most popular collaboration tool for knowledge workers in any industry.
diff --git a/doc/integration/saml.md b/doc/integration/saml.md
index ea840af5dec..0a9f1f2fd61 100644
--- a/doc/integration/saml.md
+++ b/doc/integration/saml.md
@@ -819,9 +819,6 @@ Support for these groups depends on:
 
 - Your [subscription](https://about.gitlab.com/pricing/).
 - Whether you've installed [GitLab Enterprise Edition (EE)](https://about.gitlab.com/install/).
-- The [name of the SAML provider](#configure-saml-support-in-gitlab). Group
-  memberships are only supported by a single SAML provider named
-  `saml`.
 
 | Group                        | Tier               | GitLab Enterprise Edition (EE) Only? |
 |------------------------------|--------------------|--------------------------------------|
@@ -865,6 +862,8 @@ membership is required to sign in.
 If you do not set `required_groups` or leave the setting empty, anyone with proper
 authentication can use the service.
 
+If the attribute specified in `groups_attribute` is incorrect or missing then all users will be blocked.
+
 ::Tabs
 
 :::TabTitle Linux package (Omnibus)
@@ -1018,6 +1017,10 @@ SAML can automatically identify a user as an
 [external user](../administration/external_users.md), based on the `external_groups`
 setting.
 
+**NOTE**: 
+If the attribute specified in `groups_attribute` is incorrect or missing then the user will
+access as a standard user.
+
 Example configuration:
 
 ::Tabs
@@ -1173,6 +1176,8 @@ response, configure GitLab to identify:
 Use the `admin_groups` setting to configure GitLab to identify which groups grant
 the user administrator access.
 
+If the attribute specified in `groups_attribute` is incorrect or missing then users will lose their administrator access.
+
 Example configuration:
 
 ::Tabs
@@ -1331,6 +1336,8 @@ response, configure GitLab to identify:
 Use the `auditor_groups` setting to configure GitLab to identify which groups include
 users with [auditor access](../administration/auditor_users.md).
 
+If the attribute specified in `groups_attribute` is incorrect or missing then users will lose their auditor access.
+
 Example configuration:
 
 ::Tabs
diff --git a/doc/user/gitlab_duo/turn_on_off.md b/doc/user/gitlab_duo/turn_on_off.md
index ea12f2b2ab6..d869962bf2b 100644
--- a/doc/user/gitlab_duo/turn_on_off.md
+++ b/doc/user/gitlab_duo/turn_on_off.md
@@ -32,6 +32,7 @@ To use GitLab Duo on a self-managed instance, you must ensure connectivity exist
   to `cloud.gitlab.com` and `customers.gitlab.com` on port `443` both with `https://`.
 - To use an HTTP/S proxy, both `gitLab_workhorse` and `gitLab_rails` must have the necessary
   [web proxy environment variables](https://docs.gitlab.com/omnibus/settings/environment-variables.html) set.
+- In multi-node GitLab installations, configure the HTTP/S proxy on all **Rails** and **Sidekiq** nodes.
 
 ### Allow inbound connections from clients to the GitLab instance
 
diff --git a/doc/user/markdown.md b/doc/user/markdown.md
index acc9c84598e..9205369b15f 100644
--- a/doc/user/markdown.md
+++ b/doc/user/markdown.md
@@ -1924,6 +1924,7 @@ The selected diagram is replaced with an updated version.
 ## GitLab-specific references
 
 > - Autocomplete for wiki pages [introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/442229) in GitLab 16.11.
+> - Ability to reference labels from groups [introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/455120) in GitLab 17.1.
 
 GitLab Flavored Markdown renders GitLab-specific references. For example, you can reference
 an issue, a commit, a team member, or even an entire project team. GitLab Flavored Markdown turns
@@ -1951,10 +1952,10 @@ GitLab Flavored Markdown recognizes the following:
 | [Iteration cadence](group/iterations/index.md) by title (multiple words)<sup>1</sup> | `[cadence:"plan a"]`                                  |                                         |                                    |
 | [Vulnerability](application_security/vulnerabilities/index.md)                       | `[vulnerability:123]`                                 | `[vulnerability:namespace/project/123]` | `[vulnerability:project/123]`      |
 | Feature flag                                                                         | `[feature_flag:123]`                                  | `[feature_flag:namespace/project/123]`  | `[feature_flag:project/123]`       |
-| Label by ID                                                                          | `~123`                                                | `namespace/project~123`                 | `project~123`                      |
-| Label by name (one word)                                                             | `~bug`                                                | `namespace/project~bug`                 | `project~bug`                      |
-| Label by name (multiple words)                                                       | `~"feature request"`                                  | `namespace/project~"feature request"`   | `project~"feature request"`        |
-| Label by name (scoped)                                                               | `~"priority::high"`                                   | `namespace/project~"priority::high"`    | `project~"priority::high"`         |
+| Label by ID <sup>2</sup>                                                             | `~123`                                                | `namespace/project~123`                 | `project~123`                      |
+| Label by name (one word) <sup>2</sup>                                                | `~bug`                                                | `namespace/project~bug`                 | `project~bug`                      |
+| Label by name (multiple words) <sup>2</sup>                                          | `~"feature request"`                                  | `namespace/project~"feature request"`   | `project~"feature request"`        |
+| Label by name (scoped) <sup>2</sup>                                                  | `~"priority::high"`                                   | `namespace/project~"priority::high"`    | `project~"priority::high"`         |
 | Project milestone by ID <sup>2</sup>                                                 | `%123`                                                | `namespace/project%123`                 | `project%123`                      |
 | Milestone by name (one word) <sup>2</sup>                                            | `%v1.23`                                              | `namespace/project%v1.23`               | `project%v1.23`                    |
 | Milestone by name (multiple words) <sup>2</sup>                                      | `%"release candidate"`                                | `namespace/project%"release candidate"` | `project%"release candidate"`      |
@@ -1973,8 +1974,8 @@ GitLab Flavored Markdown recognizes the following:
    Iteration cadence references are always rendered following the format `[cadence:<ID>]`.
    For example, the text reference `[cadence:"plan"]` renders as `[cadence:1]` if the referenced
    iterations cadence's ID is `1`.
-1. For milestones, prepend a `/` before `namespace/project` to specify the exact milestone,
-   removing any possible ambiguity.
+1. For labels or milestones, prepend a `/` before `namespace/project` to specify the exact label
+   or milestone, removing any possible ambiguity.
 
 For example, referencing an issue by using `#123` formats the output as a link
 to issue number 123 with text `#123`. Likewise, a link to issue number 123 is
diff --git a/doc/user/packages/yarn_repository/index.md b/doc/user/packages/yarn_repository/index.md
index 439d555097c..22af24330df 100644
--- a/doc/user/packages/yarn_repository/index.md
+++ b/doc/user/packages/yarn_repository/index.md
@@ -46,7 +46,7 @@ npmScopes:
 
 In this configuration:
 
-- Replace `<my-org>` with your organization scope, exclude the `@` symbol.
+- Replace `<my-org>` with your organization scope, excluding the `@` symbol.
 - Replace `<your_domain>` with your domain name.
 - Replace `<your_project_id>` with your project's ID, which you can find on the [project overview page](../../project/working_with_projects.md#access-a-project-by-using-the-project-id).
 - Replace `<your_token>` with a deployment token, group access token, project access token, or personal access token.
@@ -105,12 +105,14 @@ in your package project root directory where `package.json` is found:
 
 ```yaml
 npmScopes:
-  esp-code:
+  <my-org>:
     npmPublishRegistry: "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/packages/npm/"
     npmAlwaysAuth: true
     npmAuthToken: "${NPM_AUTH_TOKEN}"
 ```
 
+In this configuration, replace `<my-org>` with your organization scope, excluding the `@` symbol.
+
 #### Private runners
 
 Add the `CI_JOB_TOKEN` to the `.yarnrc.yml` configuration in your package project
@@ -118,14 +120,16 @@ root directory where `package.json` is found:
 
 ```yaml
 npmScopes:
-  esp-code:
+  <my-org>:
     npmPublishRegistry: "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/packages/npm/"
     npmAlwaysAuth: true
     npmAuthToken: "${CI_JOB_TOKEN}"
 ```
 
+In this configuration, replace `<my-org>` with your organization scope, excluding the `@` symbol.
+
 To publish the package using CI/CD pipeline, In the GitLab project that houses
-your `yarnrc.yml`, edit or create a `.gitlab-ci.yml` file. For example to trigger
+your `.yarnrc.yml`, edit or create a `.gitlab-ci.yml` file. For example to trigger
 only on any tag push:
 
 ```yaml
diff --git a/gems/gitlab-backup-cli/lib/gitlab/backup/cli/targets/database.rb b/gems/gitlab-backup-cli/lib/gitlab/backup/cli/targets/database.rb
index aedaed0f9df..fe9adfe1742 100644
--- a/gems/gitlab-backup-cli/lib/gitlab/backup/cli/targets/database.rb
+++ b/gems/gitlab-backup-cli/lib/gitlab/backup/cli/targets/database.rb
@@ -94,7 +94,7 @@ module Gitlab
                   raise(::Backup::Error, "Source database file does not exist #{db_file_name}")
                 end
 
-                Gitlab::Backup::Cli::Output.warn(
+                Gitlab::Backup::Cli::Output.warning(
                   "Source backup for the database #{database_name} doesn't exist. Skipping the task"
                 )
 
diff --git a/lib/container_registry/tag.rb b/lib/container_registry/tag.rb
index 2ffd7cb4437..d4a4ef205b1 100644
--- a/lib/container_registry/tag.rb
+++ b/lib/container_registry/tag.rb
@@ -6,6 +6,7 @@ module ContainerRegistry
 
     attr_reader :repository, :name, :updated_at, :referrers, :published_at
     attr_writer :created_at, :manifest_digest, :revision, :total_size
+    attr_accessor :media_type
 
     delegate :registry, :client, to: :repository
 
diff --git a/lib/gitlab/background_migration/backfill_merge_requests_closing_issues_project_id.rb b/lib/gitlab/background_migration/backfill_merge_requests_closing_issues_project_id.rb
new file mode 100644
index 00000000000..4532feb66c1
--- /dev/null
+++ b/lib/gitlab/background_migration/backfill_merge_requests_closing_issues_project_id.rb
@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+module Gitlab
+  module BackgroundMigration
+    class BackfillMergeRequestsClosingIssuesProjectId < BackfillDesiredShardingKeyJob
+      operation_name :backfill_merge_requests_closing_issues_project_id
+      feature_category :code_review_workflow
+    end
+  end
+end
diff --git a/lib/gitlab/background_migration/backfill_ml_model_metadata_project_id.rb b/lib/gitlab/background_migration/backfill_ml_model_metadata_project_id.rb
new file mode 100644
index 00000000000..010d7d7b6ba
--- /dev/null
+++ b/lib/gitlab/background_migration/backfill_ml_model_metadata_project_id.rb
@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+module Gitlab
+  module BackgroundMigration
+    class BackfillMlModelMetadataProjectId < BackfillDesiredShardingKeyJob
+      operation_name :backfill_ml_model_metadata_project_id
+      feature_category :mlops
+    end
+  end
+end
diff --git a/lib/gitlab/background_migration/backfill_vulnerability_external_issue_links_project_id.rb b/lib/gitlab/background_migration/backfill_vulnerability_external_issue_links_project_id.rb
new file mode 100644
index 00000000000..84c51d0ea78
--- /dev/null
+++ b/lib/gitlab/background_migration/backfill_vulnerability_external_issue_links_project_id.rb
@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+module Gitlab
+  module BackgroundMigration
+    class BackfillVulnerabilityExternalIssueLinksProjectId < BackfillDesiredShardingKeyJob
+      operation_name :backfill_vulnerability_external_issue_links_project_id
+      feature_category :vulnerability_management
+    end
+  end
+end
diff --git a/lib/gitlab/ci/config.rb b/lib/gitlab/ci/config.rb
index b0b8c2f7dd6..6d0cfd54b6a 100644
--- a/lib/gitlab/ci/config.rb
+++ b/lib/gitlab/ci/config.rb
@@ -19,14 +19,15 @@ module Gitlab
         Config::Yaml::Tags::TagError
       ].freeze
 
-      attr_reader :root, :context, :source_ref_path, :source, :logger, :inject_edge_stages
+      attr_reader :root, :context, :source_ref_path, :source, :logger, :inject_edge_stages, :pipeline_policy_context
 
       # rubocop: disable Metrics/ParameterLists
-      def initialize(config, project: nil, pipeline: nil, sha: nil, ref: nil, user: nil, parent_pipeline: nil, source: nil, pipeline_config: nil, logger: nil, inject_edge_stages: true)
+      def initialize(config, project: nil, pipeline: nil, sha: nil, ref: nil, user: nil, parent_pipeline: nil, source: nil, pipeline_config: nil, logger: nil, inject_edge_stages: true, pipeline_policy_context: nil)
         @logger = logger || ::Gitlab::Ci::Pipeline::Logger.new(project: project)
         @source_ref_path = pipeline&.source_ref_path
         @project = project
         @inject_edge_stages = inject_edge_stages
+        @pipeline_policy_context = pipeline_policy_context
 
         @context = self.logger.instrument(:config_build_context, once: true) do
           pipeline ||= ::Ci::Pipeline.new(project: project, sha: sha, ref: ref, user: user, source: source)
diff --git a/lib/gitlab/ci/parsers/security/validators/schema_validator.rb b/lib/gitlab/ci/parsers/security/validators/schema_validator.rb
index 5d650e53c2b..212b59e0f71 100644
--- a/lib/gitlab/ci/parsers/security/validators/schema_validator.rb
+++ b/lib/gitlab/ci/parsers/security/validators/schema_validator.rb
@@ -7,14 +7,14 @@ module Gitlab
         module Validators
           class SchemaValidator
             SUPPORTED_VERSIONS = {
-              cluster_image_scanning: %w[15.0.0 15.0.1 15.0.2 15.0.4 15.0.5 15.0.6 15.0.7 15.1.0 15.1.1 15.1.2],
-              container_scanning: %w[15.0.0 15.0.1 15.0.2 15.0.4 15.0.5 15.0.6 15.0.7 15.1.0 15.1.1 15.1.2],
-              coverage_fuzzing: %w[15.0.0 15.0.1 15.0.2 15.0.4 15.0.5 15.0.6 15.0.7 15.1.0 15.1.1 15.1.2],
-              dast: %w[15.0.0 15.0.1 15.0.2 15.0.4 15.0.5 15.0.6 15.0.7 15.1.0 15.1.1 15.1.2],
-              api_fuzzing: %w[15.0.0 15.0.1 15.0.2 15.0.4 15.0.5 15.0.6 15.0.7 15.1.0 15.1.1 15.1.2],
-              dependency_scanning: %w[15.0.0 15.0.1 15.0.2 15.0.4 15.0.5 15.0.6 15.0.7 15.1.0 15.1.1 15.1.2],
-              sast: %w[15.0.0 15.0.1 15.0.2 15.0.4 15.0.5 15.0.6 15.0.7 15.1.0 15.1.1 15.1.2],
-              secret_detection: %w[15.0.0 15.0.1 15.0.2 15.0.4 15.0.5 15.0.6 15.0.7 15.1.0 15.1.1 15.1.2]
+              cluster_image_scanning: %w[15.0.0 15.0.1 15.0.2 15.0.4 15.0.5 15.0.6 15.0.7 15.1.0 15.1.1 15.1.2 15.1.3 15.1.4],
+              container_scanning: %w[15.0.0 15.0.1 15.0.2 15.0.4 15.0.5 15.0.6 15.0.7 15.1.0 15.1.1 15.1.2 15.1.3 15.1.4],
+              coverage_fuzzing: %w[15.0.0 15.0.1 15.0.2 15.0.4 15.0.5 15.0.6 15.0.7 15.1.0 15.1.1 15.1.2 15.1.3 15.1.4],
+              dast: %w[15.0.0 15.0.1 15.0.2 15.0.4 15.0.5 15.0.6 15.0.7 15.1.0 15.1.1 15.1.2 15.1.3 15.1.4],
+              api_fuzzing: %w[15.0.0 15.0.1 15.0.2 15.0.4 15.0.5 15.0.6 15.0.7 15.1.0 15.1.1 15.1.2 15.1.3 15.1.4],
+              dependency_scanning: %w[15.0.0 15.0.1 15.0.2 15.0.4 15.0.5 15.0.6 15.0.7 15.1.0 15.1.1 15.1.2 15.1.3 15.1.4],
+              sast: %w[15.0.0 15.0.1 15.0.2 15.0.4 15.0.5 15.0.6 15.0.7 15.1.0 15.1.1 15.1.2 15.1.3 15.1.4],
+              secret_detection: %w[15.0.0 15.0.1 15.0.2 15.0.4 15.0.5 15.0.6 15.0.7 15.1.0 15.1.1 15.1.2 15.1.3 15.1.4]
             }.freeze
 
             VERSIONS_TO_REMOVE_IN_18_0 = %w[].freeze
diff --git a/lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/cluster-image-scanning-report-format.json b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/cluster-image-scanning-report-format.json
new file mode 100644
index 00000000000..bb980ed6611
--- /dev/null
+++ b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/cluster-image-scanning-report-format.json
@@ -0,0 +1,1190 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://gitlab.com/gitlab-org/security-products/security-report-schemas/-/raw/master/dist/cluster-image-scanning-report-format.json",
+  "title": "Report format for GitLab Cluster Image Scanning",
+  "description": "This schema provides the the report format for Cluster Image Scanning (https://docs.gitlab.com/ee/user/application_security/cluster_image_scanning/).",
+  "definitions": {
+    "detail_type": {
+      "oneOf": [
+        {
+          "$ref": "#/definitions/named_list"
+        },
+        {
+          "$ref": "#/definitions/list"
+        },
+        {
+          "$ref": "#/definitions/table"
+        },
+        {
+          "$ref": "#/definitions/text"
+        },
+        {
+          "$ref": "#/definitions/url"
+        },
+        {
+          "$ref": "#/definitions/code"
+        },
+        {
+          "$ref": "#/definitions/value"
+        },
+        {
+          "$ref": "#/definitions/diff"
+        },
+        {
+          "$ref": "#/definitions/markdown"
+        },
+        {
+          "$ref": "#/definitions/commit"
+        },
+        {
+          "$ref": "#/definitions/file_location"
+        },
+        {
+          "$ref": "#/definitions/module_location"
+        },
+        {
+          "$ref": "#/definitions/code_flows"
+        }
+      ]
+    },
+    "text_value": {
+      "type": "string"
+    },
+    "named_field": {
+      "type": "object",
+      "required": [
+        "name"
+      ],
+      "properties": {
+        "name": {
+          "$ref": "#/definitions/text_value",
+          "type": "string",
+          "minLength": 1
+        },
+        "description": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "named_list": {
+      "type": "object",
+      "description": "An object with named and typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "named-list"
+        },
+        "items": {
+          "type": "object",
+          "patternProperties": {
+            "^.*$": {
+              "allOf": [
+                {
+                  "$ref": "#/definitions/named_field"
+                },
+                {
+                  "$ref": "#/definitions/detail_type"
+                }
+              ]
+            }
+          }
+        }
+      }
+    },
+    "list": {
+      "type": "object",
+      "description": "A list of typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "list"
+        },
+        "items": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        }
+      }
+    },
+    "table": {
+      "type": "object",
+      "description": "A table of typed fields",
+      "required": [
+        "type",
+        "rows"
+      ],
+      "properties": {
+        "type": {
+          "const": "table"
+        },
+        "header": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        },
+        "rows": {
+          "type": "array",
+          "items": {
+            "type": "array",
+            "items": {
+              "$ref": "#/definitions/detail_type"
+            }
+          }
+        }
+      }
+    },
+    "text": {
+      "type": "object",
+      "description": "Raw text",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "text"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "url": {
+      "type": "object",
+      "description": "A single URL",
+      "required": [
+        "type",
+        "href"
+      ],
+      "properties": {
+        "type": {
+          "const": "url"
+        },
+        "text": {
+          "$ref": "#/definitions/text_value"
+        },
+        "href": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "http://mysite.com"
+          ]
+        }
+      }
+    },
+    "code": {
+      "type": "object",
+      "description": "A codeblock",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "code"
+        },
+        "value": {
+          "type": "string"
+        },
+        "lang": {
+          "type": "string",
+          "description": "A programming language"
+        }
+      }
+    },
+    "value": {
+      "type": "object",
+      "description": "A field that can store a range of types of value",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "value"
+        },
+        "value": {
+          "type": [
+            "number",
+            "string",
+            "boolean"
+          ]
+        }
+      }
+    },
+    "diff": {
+      "type": "object",
+      "description": "A diff",
+      "required": [
+        "type",
+        "before",
+        "after"
+      ],
+      "properties": {
+        "type": {
+          "const": "diff"
+        },
+        "before": {
+          "type": "string"
+        },
+        "after": {
+          "type": "string"
+        }
+      }
+    },
+    "markdown": {
+      "type": "object",
+      "description": "GitLab flavoured markdown, see https://docs.gitlab.com/ee/user/markdown.html",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "markdown"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value",
+          "examples": [
+            "Here is markdown `inline code` #1 [test](gitlab.com)\n\n![GitLab Logo](https://about.gitlab.com/images/press/logo/preview/gitlab-logo-white-preview.png)"
+          ]
+        }
+      }
+    },
+    "commit": {
+      "type": "object",
+      "description": "A commit/tag/branch within the GitLab project",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "commit"
+        },
+        "value": {
+          "type": "string",
+          "description": "The commit SHA",
+          "minLength": 1
+        }
+      }
+    },
+    "file_location": {
+      "type": "object",
+      "description": "A location within a file in the project",
+      "required": [
+        "type",
+        "file_name",
+        "line_start"
+      ],
+      "properties": {
+        "type": {
+          "const": "file-location"
+        },
+        "file_name": {
+          "type": "string",
+          "minLength": 1
+        },
+        "line_start": {
+          "type": "integer"
+        },
+        "line_end": {
+          "type": "integer"
+        }
+      }
+    },
+    "module_location": {
+      "type": "object",
+      "description": "A location within a binary module of the form module+relative_offset",
+      "required": [
+        "type",
+        "module_name",
+        "offset"
+      ],
+      "properties": {
+        "type": {
+          "const": "module-location"
+        },
+        "module_name": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "compiled_binary"
+          ]
+        },
+        "offset": {
+          "type": "integer",
+          "examples": [
+            100
+          ]
+        }
+      }
+    },
+    "code_flow_node": {
+      "type": "object",
+      "description": "A code flow node representing a part of a vulnerability flow from source to sink",
+      "required": [
+        "file_location",
+        "node_type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code-flow-node"
+        },
+        "file_location": {
+          "$ref": "#/definitions/file_location"
+        },
+        "node_type": {
+          "type": "string",
+          "description": "Describes a code flow node type",
+          "enum": [
+            "source",
+            "sink",
+            "propagation"
+          ]
+        }
+      },
+      "examples": [
+        {
+          "type": "code-flow-node",
+          "node_type": "propagation",
+          "file_location": {
+            "type": "file-location",
+            "file_name": "file_name.py",
+            "line_start": 4,
+            "line_end": 6
+          }
+        }
+      ]
+    },
+    "code_flows": {
+      "type": "object",
+      "description": "A code flow representing a vulnerability flow from source to sink",
+      "required": [
+        "items",
+        "type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code_flows"
+        },
+        "items": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 10,
+          "items": {
+            "type": "array",
+            "minItems": 1,
+            "items": {
+              "$ref": "#/definitions/code_flow_node"
+            }
+          }
+        }
+      },
+      "examples": [
+        {
+          "type": "code_flows",
+          "items": [
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 1,
+                  "line_end": 2
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "propagation",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 3
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ],
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "different_flow.py",
+                  "line_start": 100,
+                  "line_end": 102
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ]
+          ]
+        }
+      ]
+    }
+  },
+  "self": {
+    "version": "15.1.3"
+  },
+  "type": "object",
+  "required": [
+    "scan",
+    "version",
+    "vulnerabilities"
+  ],
+  "additionalProperties": true,
+  "properties": {
+    "scan": {
+      "type": "object",
+      "required": [
+        "analyzer",
+        "end_time",
+        "scanner",
+        "start_time",
+        "status",
+        "type"
+      ],
+      "properties": {
+        "end_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan finished.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-01-28T03:26:02"
+          ]
+        },
+        "messages": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "Communication intended for the initiator of a scan.",
+            "required": [
+              "level",
+              "value"
+            ],
+            "properties": {
+              "level": {
+                "type": "string",
+                "description": "Describes the severity of the communication. Use info to communicate normal scan behaviour; warn to communicate a potentially recoverable problem, or a partial error; fatal to communicate an issue that causes the scan to halt.",
+                "enum": [
+                  "info",
+                  "warn",
+                  "fatal"
+                ],
+                "examples": [
+                  "info"
+                ]
+              },
+              "value": {
+                "type": "string",
+                "description": "The message to communicate.",
+                "minLength": 1,
+                "examples": [
+                  "Permission denied, scanning aborted"
+                ]
+              }
+            }
+          }
+        },
+        "options": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "A configuration option used for this scan.",
+            "required": [
+              "name",
+              "value"
+            ],
+            "properties": {
+              "name": {
+                "type": "string",
+                "description": "The configuration option name.",
+                "maxLength": 255,
+                "minLength": 1,
+                "examples": [
+                  "DAST_FF_ENABLE_BAS",
+                  "DOCKER_TLS_CERTDIR",
+                  "DS_MAX_DEPTH",
+                  "SECURE_LOG_LEVEL"
+                ]
+              },
+              "source": {
+                "type": "string",
+                "description": "The source of this option.",
+                "enum": [
+                  "argument",
+                  "file",
+                  "env_variable",
+                  "other"
+                ]
+              },
+              "value": {
+                "type": [
+                  "boolean",
+                  "integer",
+                  "null",
+                  "string"
+                ],
+                "description": "The value used for this scan.",
+                "examples": [
+                  true,
+                  2,
+                  null,
+                  "fatal",
+                  ""
+                ]
+              }
+            }
+          }
+        },
+        "analyzer": {
+          "type": "object",
+          "description": "Object defining the analyzer used to perform the scan. Analyzers typically delegate to an underlying scanner to run the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "gitlab-dast"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the analyzer, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "GitLab DAST"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "pattern": "^https?://.+",
+              "description": "A link to more information about the analyzer.",
+              "examples": [
+                "https://docs.gitlab.com/ee/user/application_security/dast"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the analyzer.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            }
+          }
+        },
+        "scanner": {
+          "type": "object",
+          "description": "Object defining the scanner used to perform the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the scanner.",
+              "minLength": 1,
+              "examples": [
+                "my-sast-scanner"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the scanner, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "My SAST Scanner"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "description": "A link to more information about the scanner.",
+              "examples": [
+                "https://scanner.url"
+              ]
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the scanner.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the scanner.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "start_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan started.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-02-14T16:01:59"
+          ]
+        },
+        "status": {
+          "type": "string",
+          "description": "Result of the scan.",
+          "enum": [
+            "success",
+            "failure"
+          ]
+        },
+        "type": {
+          "type": "string",
+          "description": "Type of the scan.",
+          "enum": [
+            "cluster_image_scanning"
+          ]
+        },
+        "primary_identifiers": {
+          "type": "array",
+          "description": "An unordered array containing an exhaustive list of primary identifiers for which the analyzer may return results",
+          "items": {
+            "type": "object",
+            "required": [
+              "type",
+              "name",
+              "value"
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                "minLength": 1
+              },
+              "name": {
+                "type": "string",
+                "description": "Human-readable name of the identifier.",
+                "minLength": 1
+              },
+              "url": {
+                "type": "string",
+                "description": "URL of the identifier's documentation.",
+                "pattern": "^(https?|ftp)://.+"
+              },
+              "value": {
+                "type": "string",
+                "description": "Value of the identifier, for matching purpose.",
+                "minLength": 1
+              }
+            }
+          }
+        }
+      }
+    },
+    "schema": {
+      "type": "string",
+      "description": "URI pointing to the validating security report schema.",
+      "pattern": "^https?://.+"
+    },
+    "version": {
+      "type": "string",
+      "description": "The version of the schema to which the JSON report conforms.",
+      "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"
+    },
+    "vulnerabilities": {
+      "type": "array",
+      "description": "Array of vulnerability objects.",
+      "items": {
+        "type": "object",
+        "description": "Describes the vulnerability using GitLab Flavored Markdown",
+        "required": [
+          "id",
+          "identifiers",
+          "location"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+            "examples": [
+              "642735a5-1425-428d-8d4e-3c854885a3c9"
+            ]
+          },
+          "name": {
+            "type": "string",
+            "maxLength": 255,
+            "description": "The name of the vulnerability. This must not include the finding's specific information."
+          },
+          "description": {
+            "type": "string",
+            "maxLength": 1048576,
+            "description": "A long text section describing the vulnerability more fully."
+          },
+          "severity": {
+            "type": "string",
+            "description": "How much the vulnerability impacts the software. Possible values are Info, Unknown, Low, Medium, High, or Critical. Note that some analyzers may not report all these possible values.",
+            "enum": [
+              "Info",
+              "Unknown",
+              "Low",
+              "Medium",
+              "High",
+              "Critical"
+            ]
+          },
+          "solution": {
+            "type": "string",
+            "maxLength": 7000,
+            "description": "Explanation of how to fix the vulnerability."
+          },
+          "identifiers": {
+            "type": "array",
+            "minItems": 1,
+            "description": "An ordered array of references that identify a vulnerability on internal or external databases. The first identifier is the Primary Identifier, which has special meaning.",
+            "items": {
+              "type": "object",
+              "required": [
+                "type",
+                "name",
+                "value"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                  "minLength": 1
+                },
+                "name": {
+                  "type": "string",
+                  "description": "Human-readable name of the identifier.",
+                  "minLength": 1
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the identifier's documentation.",
+                  "pattern": "^(https?|ftp)://.+"
+                },
+                "value": {
+                  "type": "string",
+                  "description": "Value of the identifier, for matching purpose.",
+                  "minLength": 1
+                }
+              }
+            }
+          },
+          "cvss_vectors": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 10,
+            "description": "An ordered array of CVSS vectors, each issued by a vendor to rate the vulnerability. The first item in the array is used as the primary CVSS vector, and is used to filter and sort the vulnerability.",
+            "items": {
+              "oneOf": [
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 16,
+                      "maxLength": 128,
+                      "pattern": "^((AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))/)*(AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 32,
+                      "maxLength": 128,
+                      "pattern": "^CVSS:3[.][01]/((AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])/)*(AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                }
+              ]
+            }
+          },
+          "links": {
+            "type": "array",
+            "description": "An array of references to external documentation or articles that describe the vulnerability.",
+            "items": {
+              "type": "object",
+              "required": [
+                "url"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "Name of the vulnerability details link."
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the vulnerability details document.",
+                  "pattern": "^(https?|ftp)://.+"
+                }
+              }
+            }
+          },
+          "details": {
+            "$ref": "#/definitions/named_list/properties/items"
+          },
+          "tracking": {
+            "type": "object",
+            "description": "Describes how this vulnerability should be tracked as the project changes.",
+            "oneOf": [
+              {
+                "description": "Declares that a series of items should be tracked using source-specific tracking methods.",
+                "required": [
+                  "items"
+                ],
+                "properties": {
+                  "type": {
+                    "const": "source"
+                  },
+                  "items": {
+                    "type": "array",
+                    "items": {
+                      "description": "An item that should be tracked using source-specific tracking methods.",
+                      "type": "object",
+                      "required": [
+                        "signatures"
+                      ],
+                      "properties": {
+                        "file": {
+                          "type": "string",
+                          "description": "Path to the file where the vulnerability is located."
+                        },
+                        "start_line": {
+                          "type": "number",
+                          "description": "The first line of the file that includes the vulnerability."
+                        },
+                        "end_line": {
+                          "type": "number",
+                          "description": "The last line of the file that includes the vulnerability."
+                        },
+                        "signatures": {
+                          "type": "array",
+                          "description": "An array of calculated tracking signatures for this tracking item.",
+                          "minItems": 1,
+                          "items": {
+                            "description": "A calculated tracking signature value and metadata.",
+                            "type": "object",
+                            "required": [
+                              "algorithm",
+                              "value"
+                            ],
+                            "properties": {
+                              "algorithm": {
+                                "type": "string",
+                                "description": "The algorithm used to generate the signature."
+                              },
+                              "value": {
+                                "type": "string",
+                                "description": "The result of this signature algorithm."
+                              }
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "Each tracking type must declare its own type."
+              }
+            }
+          },
+          "flags": {
+            "description": "Flags that can be attached to vulnerabilities.",
+            "type": "array",
+            "items": {
+              "type": "object",
+              "description": "Informational flags identified and assigned to a vulnerability.",
+              "required": [
+                "type",
+                "origin",
+                "description"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Result of the scan.",
+                  "enum": [
+                    "flagged-as-likely-false-positive"
+                  ]
+                },
+                "origin": {
+                  "minLength": 1,
+                  "description": "Tool that issued the flag.",
+                  "type": "string"
+                },
+                "description": {
+                  "minLength": 1,
+                  "description": "What the flag is about.",
+                  "type": "string"
+                }
+              }
+            }
+          },
+          "location": {
+            "type": "object",
+            "description": "Identifies the vulnerability's location.",
+            "required": [
+              "dependency",
+              "image",
+              "kubernetes_resource"
+            ],
+            "properties": {
+              "dependency": {
+                "type": "object",
+                "description": "Describes the dependency of a project where the vulnerability is located.",
+                "required": [
+                  "package",
+                  "version"
+                ],
+                "properties": {
+                  "package": {
+                    "type": "object",
+                    "description": "Provides information on the package where the vulnerability is located.",
+                    "required": [
+                      "name"
+                    ],
+                    "properties": {
+                      "name": {
+                        "type": "string",
+                        "description": "Name of the package where the vulnerability is located."
+                      }
+                    }
+                  },
+                  "version": {
+                    "type": "string",
+                    "description": "Version of the vulnerable package."
+                  },
+                  "direct": {
+                    "type": "boolean",
+                    "description": "Tells whether this is a direct, top-level dependency of the scanned project."
+                  }
+                }
+              },
+              "operating_system": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 255,
+                "description": "The operating system that contains the vulnerable package."
+              },
+              "image": {
+                "type": "string",
+                "minLength": 1,
+                "description": "The analyzed Docker image.",
+                "examples": [
+                  "index.docker.io/library/nginx:1.21"
+                ]
+              },
+              "kubernetes_resource": {
+                "type": "object",
+                "description": "The specific Kubernetes resource that was scanned.",
+                "required": [
+                  "namespace",
+                  "kind",
+                  "name",
+                  "container_name"
+                ],
+                "properties": {
+                  "namespace": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 255,
+                    "description": "The Kubernetes namespace the resource that had its image scanned.",
+                    "examples": [
+                      "default",
+                      "staging",
+                      "production"
+                    ]
+                  },
+                  "kind": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 255,
+                    "description": "The Kubernetes kind the resource that had its image scanned.",
+                    "examples": [
+                      "Deployment",
+                      "DaemonSet"
+                    ]
+                  },
+                  "name": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 255,
+                    "description": "The name of the resource that had its image scanned.",
+                    "examples": [
+                      "nginx-ingress"
+                    ]
+                  },
+                  "container_name": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 255,
+                    "description": "The name of the container that had its image scanned.",
+                    "examples": [
+                      "nginx"
+                    ]
+                  },
+                  "agent_id": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 255,
+                    "description": "The GitLab ID of the Kubernetes Agent which performed the scan.",
+                    "examples": [
+                      "1234"
+                    ]
+                  },
+                  "cluster_id": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 255,
+                    "description": "The GitLab ID of the Kubernetes cluster when using cluster integration.",
+                    "examples": [
+                      "1234"
+                    ]
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "remediations": {
+      "type": "array",
+      "description": "An array of objects containing information on available remediations, along with patch diffs to apply.",
+      "items": {
+        "type": "object",
+        "required": [
+          "fixes",
+          "summary",
+          "diff"
+        ],
+        "properties": {
+          "fixes": {
+            "type": "array",
+            "description": "An array of strings that represent references to vulnerabilities fixed by this remediation.",
+            "items": {
+              "type": "object",
+              "required": [
+                "id"
+              ],
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+                  "examples": [
+                    "642735a5-1425-428d-8d4e-3c854885a3c9"
+                  ]
+                }
+              }
+            }
+          },
+          "summary": {
+            "type": "string",
+            "minLength": 1,
+            "description": "An overview of how the vulnerabilities were fixed."
+          },
+          "diff": {
+            "type": "string",
+            "minLength": 1,
+            "description": "A base64-encoded remediation code diff, compatible with git apply."
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/container-scanning-report-format.json b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/container-scanning-report-format.json
new file mode 100644
index 00000000000..4f4dd1f43e9
--- /dev/null
+++ b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/container-scanning-report-format.json
@@ -0,0 +1,1123 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://gitlab.com/gitlab-org/security-products/security-report-schemas/-/raw/master/dist/container-scanning-report-format.json",
+  "title": "Report format for GitLab Container Scanning",
+  "description": "This schema provides the the report format for Container Scanning (https://docs.gitlab.com/ee/user/application_security/container_scanning).",
+  "definitions": {
+    "detail_type": {
+      "oneOf": [
+        {
+          "$ref": "#/definitions/named_list"
+        },
+        {
+          "$ref": "#/definitions/list"
+        },
+        {
+          "$ref": "#/definitions/table"
+        },
+        {
+          "$ref": "#/definitions/text"
+        },
+        {
+          "$ref": "#/definitions/url"
+        },
+        {
+          "$ref": "#/definitions/code"
+        },
+        {
+          "$ref": "#/definitions/value"
+        },
+        {
+          "$ref": "#/definitions/diff"
+        },
+        {
+          "$ref": "#/definitions/markdown"
+        },
+        {
+          "$ref": "#/definitions/commit"
+        },
+        {
+          "$ref": "#/definitions/file_location"
+        },
+        {
+          "$ref": "#/definitions/module_location"
+        },
+        {
+          "$ref": "#/definitions/code_flows"
+        }
+      ]
+    },
+    "text_value": {
+      "type": "string"
+    },
+    "named_field": {
+      "type": "object",
+      "required": [
+        "name"
+      ],
+      "properties": {
+        "name": {
+          "$ref": "#/definitions/text_value",
+          "type": "string",
+          "minLength": 1
+        },
+        "description": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "named_list": {
+      "type": "object",
+      "description": "An object with named and typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "named-list"
+        },
+        "items": {
+          "type": "object",
+          "patternProperties": {
+            "^.*$": {
+              "allOf": [
+                {
+                  "$ref": "#/definitions/named_field"
+                },
+                {
+                  "$ref": "#/definitions/detail_type"
+                }
+              ]
+            }
+          }
+        }
+      }
+    },
+    "list": {
+      "type": "object",
+      "description": "A list of typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "list"
+        },
+        "items": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        }
+      }
+    },
+    "table": {
+      "type": "object",
+      "description": "A table of typed fields",
+      "required": [
+        "type",
+        "rows"
+      ],
+      "properties": {
+        "type": {
+          "const": "table"
+        },
+        "header": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        },
+        "rows": {
+          "type": "array",
+          "items": {
+            "type": "array",
+            "items": {
+              "$ref": "#/definitions/detail_type"
+            }
+          }
+        }
+      }
+    },
+    "text": {
+      "type": "object",
+      "description": "Raw text",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "text"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "url": {
+      "type": "object",
+      "description": "A single URL",
+      "required": [
+        "type",
+        "href"
+      ],
+      "properties": {
+        "type": {
+          "const": "url"
+        },
+        "text": {
+          "$ref": "#/definitions/text_value"
+        },
+        "href": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "http://mysite.com"
+          ]
+        }
+      }
+    },
+    "code": {
+      "type": "object",
+      "description": "A codeblock",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "code"
+        },
+        "value": {
+          "type": "string"
+        },
+        "lang": {
+          "type": "string",
+          "description": "A programming language"
+        }
+      }
+    },
+    "value": {
+      "type": "object",
+      "description": "A field that can store a range of types of value",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "value"
+        },
+        "value": {
+          "type": [
+            "number",
+            "string",
+            "boolean"
+          ]
+        }
+      }
+    },
+    "diff": {
+      "type": "object",
+      "description": "A diff",
+      "required": [
+        "type",
+        "before",
+        "after"
+      ],
+      "properties": {
+        "type": {
+          "const": "diff"
+        },
+        "before": {
+          "type": "string"
+        },
+        "after": {
+          "type": "string"
+        }
+      }
+    },
+    "markdown": {
+      "type": "object",
+      "description": "GitLab flavoured markdown, see https://docs.gitlab.com/ee/user/markdown.html",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "markdown"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value",
+          "examples": [
+            "Here is markdown `inline code` #1 [test](gitlab.com)\n\n![GitLab Logo](https://about.gitlab.com/images/press/logo/preview/gitlab-logo-white-preview.png)"
+          ]
+        }
+      }
+    },
+    "commit": {
+      "type": "object",
+      "description": "A commit/tag/branch within the GitLab project",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "commit"
+        },
+        "value": {
+          "type": "string",
+          "description": "The commit SHA",
+          "minLength": 1
+        }
+      }
+    },
+    "file_location": {
+      "type": "object",
+      "description": "A location within a file in the project",
+      "required": [
+        "type",
+        "file_name",
+        "line_start"
+      ],
+      "properties": {
+        "type": {
+          "const": "file-location"
+        },
+        "file_name": {
+          "type": "string",
+          "minLength": 1
+        },
+        "line_start": {
+          "type": "integer"
+        },
+        "line_end": {
+          "type": "integer"
+        }
+      }
+    },
+    "module_location": {
+      "type": "object",
+      "description": "A location within a binary module of the form module+relative_offset",
+      "required": [
+        "type",
+        "module_name",
+        "offset"
+      ],
+      "properties": {
+        "type": {
+          "const": "module-location"
+        },
+        "module_name": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "compiled_binary"
+          ]
+        },
+        "offset": {
+          "type": "integer",
+          "examples": [
+            100
+          ]
+        }
+      }
+    },
+    "code_flow_node": {
+      "type": "object",
+      "description": "A code flow node representing a part of a vulnerability flow from source to sink",
+      "required": [
+        "file_location",
+        "node_type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code-flow-node"
+        },
+        "file_location": {
+          "$ref": "#/definitions/file_location"
+        },
+        "node_type": {
+          "type": "string",
+          "description": "Describes a code flow node type",
+          "enum": [
+            "source",
+            "sink",
+            "propagation"
+          ]
+        }
+      },
+      "examples": [
+        {
+          "type": "code-flow-node",
+          "node_type": "propagation",
+          "file_location": {
+            "type": "file-location",
+            "file_name": "file_name.py",
+            "line_start": 4,
+            "line_end": 6
+          }
+        }
+      ]
+    },
+    "code_flows": {
+      "type": "object",
+      "description": "A code flow representing a vulnerability flow from source to sink",
+      "required": [
+        "items",
+        "type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code_flows"
+        },
+        "items": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 10,
+          "items": {
+            "type": "array",
+            "minItems": 1,
+            "items": {
+              "$ref": "#/definitions/code_flow_node"
+            }
+          }
+        }
+      },
+      "examples": [
+        {
+          "type": "code_flows",
+          "items": [
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 1,
+                  "line_end": 2
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "propagation",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 3
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ],
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "different_flow.py",
+                  "line_start": 100,
+                  "line_end": 102
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ]
+          ]
+        }
+      ]
+    }
+  },
+  "self": {
+    "version": "15.1.3"
+  },
+  "type": "object",
+  "required": [
+    "scan",
+    "version",
+    "vulnerabilities"
+  ],
+  "additionalProperties": true,
+  "properties": {
+    "scan": {
+      "type": "object",
+      "required": [
+        "analyzer",
+        "end_time",
+        "scanner",
+        "start_time",
+        "status",
+        "type"
+      ],
+      "properties": {
+        "end_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan finished.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-01-28T03:26:02"
+          ]
+        },
+        "messages": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "Communication intended for the initiator of a scan.",
+            "required": [
+              "level",
+              "value"
+            ],
+            "properties": {
+              "level": {
+                "type": "string",
+                "description": "Describes the severity of the communication. Use info to communicate normal scan behaviour; warn to communicate a potentially recoverable problem, or a partial error; fatal to communicate an issue that causes the scan to halt.",
+                "enum": [
+                  "info",
+                  "warn",
+                  "fatal"
+                ],
+                "examples": [
+                  "info"
+                ]
+              },
+              "value": {
+                "type": "string",
+                "description": "The message to communicate.",
+                "minLength": 1,
+                "examples": [
+                  "Permission denied, scanning aborted"
+                ]
+              }
+            }
+          }
+        },
+        "options": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "A configuration option used for this scan.",
+            "required": [
+              "name",
+              "value"
+            ],
+            "properties": {
+              "name": {
+                "type": "string",
+                "description": "The configuration option name.",
+                "maxLength": 255,
+                "minLength": 1,
+                "examples": [
+                  "DAST_FF_ENABLE_BAS",
+                  "DOCKER_TLS_CERTDIR",
+                  "DS_MAX_DEPTH",
+                  "SECURE_LOG_LEVEL"
+                ]
+              },
+              "source": {
+                "type": "string",
+                "description": "The source of this option.",
+                "enum": [
+                  "argument",
+                  "file",
+                  "env_variable",
+                  "other"
+                ]
+              },
+              "value": {
+                "type": [
+                  "boolean",
+                  "integer",
+                  "null",
+                  "string"
+                ],
+                "description": "The value used for this scan.",
+                "examples": [
+                  true,
+                  2,
+                  null,
+                  "fatal",
+                  ""
+                ]
+              }
+            }
+          }
+        },
+        "analyzer": {
+          "type": "object",
+          "description": "Object defining the analyzer used to perform the scan. Analyzers typically delegate to an underlying scanner to run the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "gitlab-dast"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the analyzer, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "GitLab DAST"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "pattern": "^https?://.+",
+              "description": "A link to more information about the analyzer.",
+              "examples": [
+                "https://docs.gitlab.com/ee/user/application_security/dast"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the analyzer.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            }
+          }
+        },
+        "scanner": {
+          "type": "object",
+          "description": "Object defining the scanner used to perform the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the scanner.",
+              "minLength": 1,
+              "examples": [
+                "my-sast-scanner"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the scanner, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "My SAST Scanner"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "description": "A link to more information about the scanner.",
+              "examples": [
+                "https://scanner.url"
+              ]
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the scanner.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the scanner.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "start_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan started.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-02-14T16:01:59"
+          ]
+        },
+        "status": {
+          "type": "string",
+          "description": "Result of the scan.",
+          "enum": [
+            "success",
+            "failure"
+          ]
+        },
+        "type": {
+          "type": "string",
+          "description": "Type of the scan.",
+          "enum": [
+            "container_scanning",
+            "container_scanning_for_registry"
+          ]
+        },
+        "primary_identifiers": {
+          "type": "array",
+          "description": "An unordered array containing an exhaustive list of primary identifiers for which the analyzer may return results",
+          "items": {
+            "type": "object",
+            "required": [
+              "type",
+              "name",
+              "value"
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                "minLength": 1
+              },
+              "name": {
+                "type": "string",
+                "description": "Human-readable name of the identifier.",
+                "minLength": 1
+              },
+              "url": {
+                "type": "string",
+                "description": "URL of the identifier's documentation.",
+                "pattern": "^(https?|ftp)://.+"
+              },
+              "value": {
+                "type": "string",
+                "description": "Value of the identifier, for matching purpose.",
+                "minLength": 1
+              }
+            }
+          }
+        }
+      }
+    },
+    "schema": {
+      "type": "string",
+      "description": "URI pointing to the validating security report schema.",
+      "pattern": "^https?://.+"
+    },
+    "version": {
+      "type": "string",
+      "description": "The version of the schema to which the JSON report conforms.",
+      "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"
+    },
+    "vulnerabilities": {
+      "type": "array",
+      "description": "Array of vulnerability objects.",
+      "items": {
+        "type": "object",
+        "description": "Describes the vulnerability using GitLab Flavored Markdown",
+        "required": [
+          "id",
+          "identifiers",
+          "location"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+            "examples": [
+              "642735a5-1425-428d-8d4e-3c854885a3c9"
+            ]
+          },
+          "name": {
+            "type": "string",
+            "maxLength": 255,
+            "description": "The name of the vulnerability. This must not include the finding's specific information."
+          },
+          "description": {
+            "type": "string",
+            "maxLength": 1048576,
+            "description": "A long text section describing the vulnerability more fully."
+          },
+          "severity": {
+            "type": "string",
+            "description": "How much the vulnerability impacts the software. Possible values are Info, Unknown, Low, Medium, High, or Critical. Note that some analyzers may not report all these possible values.",
+            "enum": [
+              "Info",
+              "Unknown",
+              "Low",
+              "Medium",
+              "High",
+              "Critical"
+            ]
+          },
+          "solution": {
+            "type": "string",
+            "maxLength": 7000,
+            "description": "Explanation of how to fix the vulnerability."
+          },
+          "identifiers": {
+            "type": "array",
+            "minItems": 1,
+            "description": "An ordered array of references that identify a vulnerability on internal or external databases. The first identifier is the Primary Identifier, which has special meaning.",
+            "items": {
+              "type": "object",
+              "required": [
+                "type",
+                "name",
+                "value"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                  "minLength": 1
+                },
+                "name": {
+                  "type": "string",
+                  "description": "Human-readable name of the identifier.",
+                  "minLength": 1
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the identifier's documentation.",
+                  "pattern": "^(https?|ftp)://.+"
+                },
+                "value": {
+                  "type": "string",
+                  "description": "Value of the identifier, for matching purpose.",
+                  "minLength": 1
+                }
+              }
+            }
+          },
+          "cvss_vectors": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 10,
+            "description": "An ordered array of CVSS vectors, each issued by a vendor to rate the vulnerability. The first item in the array is used as the primary CVSS vector, and is used to filter and sort the vulnerability.",
+            "items": {
+              "oneOf": [
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 16,
+                      "maxLength": 128,
+                      "pattern": "^((AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))/)*(AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 32,
+                      "maxLength": 128,
+                      "pattern": "^CVSS:3[.][01]/((AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])/)*(AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                }
+              ]
+            }
+          },
+          "links": {
+            "type": "array",
+            "description": "An array of references to external documentation or articles that describe the vulnerability.",
+            "items": {
+              "type": "object",
+              "required": [
+                "url"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "Name of the vulnerability details link."
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the vulnerability details document.",
+                  "pattern": "^(https?|ftp)://.+"
+                }
+              }
+            }
+          },
+          "details": {
+            "$ref": "#/definitions/named_list/properties/items"
+          },
+          "tracking": {
+            "type": "object",
+            "description": "Describes how this vulnerability should be tracked as the project changes.",
+            "oneOf": [
+              {
+                "description": "Declares that a series of items should be tracked using source-specific tracking methods.",
+                "required": [
+                  "items"
+                ],
+                "properties": {
+                  "type": {
+                    "const": "source"
+                  },
+                  "items": {
+                    "type": "array",
+                    "items": {
+                      "description": "An item that should be tracked using source-specific tracking methods.",
+                      "type": "object",
+                      "required": [
+                        "signatures"
+                      ],
+                      "properties": {
+                        "file": {
+                          "type": "string",
+                          "description": "Path to the file where the vulnerability is located."
+                        },
+                        "start_line": {
+                          "type": "number",
+                          "description": "The first line of the file that includes the vulnerability."
+                        },
+                        "end_line": {
+                          "type": "number",
+                          "description": "The last line of the file that includes the vulnerability."
+                        },
+                        "signatures": {
+                          "type": "array",
+                          "description": "An array of calculated tracking signatures for this tracking item.",
+                          "minItems": 1,
+                          "items": {
+                            "description": "A calculated tracking signature value and metadata.",
+                            "type": "object",
+                            "required": [
+                              "algorithm",
+                              "value"
+                            ],
+                            "properties": {
+                              "algorithm": {
+                                "type": "string",
+                                "description": "The algorithm used to generate the signature."
+                              },
+                              "value": {
+                                "type": "string",
+                                "description": "The result of this signature algorithm."
+                              }
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "Each tracking type must declare its own type."
+              }
+            }
+          },
+          "flags": {
+            "description": "Flags that can be attached to vulnerabilities.",
+            "type": "array",
+            "items": {
+              "type": "object",
+              "description": "Informational flags identified and assigned to a vulnerability.",
+              "required": [
+                "type",
+                "origin",
+                "description"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Result of the scan.",
+                  "enum": [
+                    "flagged-as-likely-false-positive"
+                  ]
+                },
+                "origin": {
+                  "minLength": 1,
+                  "description": "Tool that issued the flag.",
+                  "type": "string"
+                },
+                "description": {
+                  "minLength": 1,
+                  "description": "What the flag is about.",
+                  "type": "string"
+                }
+              }
+            }
+          },
+          "location": {
+            "type": "object",
+            "description": "Identifies the vulnerability's location.",
+            "required": [
+              "dependency",
+              "operating_system",
+              "image"
+            ],
+            "properties": {
+              "dependency": {
+                "type": "object",
+                "description": "Describes the dependency of a project where the vulnerability is located.",
+                "required": [
+                  "package",
+                  "version"
+                ],
+                "properties": {
+                  "package": {
+                    "type": "object",
+                    "description": "Provides information on the package where the vulnerability is located.",
+                    "required": [
+                      "name"
+                    ],
+                    "properties": {
+                      "name": {
+                        "type": "string",
+                        "description": "Name of the package where the vulnerability is located."
+                      }
+                    }
+                  },
+                  "version": {
+                    "type": "string",
+                    "description": "Version of the vulnerable package."
+                  },
+                  "direct": {
+                    "type": "boolean",
+                    "description": "Tells whether this is a direct, top-level dependency of the scanned project."
+                  }
+                }
+              },
+              "operating_system": {
+                "type": "string",
+                "minLength": 1,
+                "description": "The operating system that contains the vulnerable package."
+              },
+              "image": {
+                "type": "string",
+                "minLength": 1,
+                "description": "The analyzed Docker image."
+              },
+              "default_branch_image": {
+                "type": "string",
+                "maxLength": 255,
+                "description": "The name of the image on the default branch."
+              }
+            }
+          }
+        }
+      }
+    },
+    "remediations": {
+      "type": "array",
+      "description": "An array of objects containing information on available remediations, along with patch diffs to apply.",
+      "items": {
+        "type": "object",
+        "required": [
+          "fixes",
+          "summary",
+          "diff"
+        ],
+        "properties": {
+          "fixes": {
+            "type": "array",
+            "description": "An array of strings that represent references to vulnerabilities fixed by this remediation.",
+            "items": {
+              "type": "object",
+              "required": [
+                "id"
+              ],
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+                  "examples": [
+                    "642735a5-1425-428d-8d4e-3c854885a3c9"
+                  ]
+                }
+              }
+            }
+          },
+          "summary": {
+            "type": "string",
+            "minLength": 1,
+            "description": "An overview of how the vulnerabilities were fixed."
+          },
+          "diff": {
+            "type": "string",
+            "minLength": 1,
+            "description": "A base64-encoded remediation code diff, compatible with git apply."
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/coverage-fuzzing-report-format.json b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/coverage-fuzzing-report-format.json
new file mode 100644
index 00000000000..d1768591549
--- /dev/null
+++ b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/coverage-fuzzing-report-format.json
@@ -0,0 +1,1100 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://gitlab.com/gitlab-org/security-products/security-report-schemas/-/raw/master/dist/coverage-fuzzing-report-format.json",
+  "title": "Report format for GitLab Fuzz Testing",
+  "description": "This schema provides the report format for Coverage Guided Fuzz Testing (https://docs.gitlab.com/ee/user/application_security/coverage_fuzzing).",
+  "definitions": {
+    "detail_type": {
+      "oneOf": [
+        {
+          "$ref": "#/definitions/named_list"
+        },
+        {
+          "$ref": "#/definitions/list"
+        },
+        {
+          "$ref": "#/definitions/table"
+        },
+        {
+          "$ref": "#/definitions/text"
+        },
+        {
+          "$ref": "#/definitions/url"
+        },
+        {
+          "$ref": "#/definitions/code"
+        },
+        {
+          "$ref": "#/definitions/value"
+        },
+        {
+          "$ref": "#/definitions/diff"
+        },
+        {
+          "$ref": "#/definitions/markdown"
+        },
+        {
+          "$ref": "#/definitions/commit"
+        },
+        {
+          "$ref": "#/definitions/file_location"
+        },
+        {
+          "$ref": "#/definitions/module_location"
+        },
+        {
+          "$ref": "#/definitions/code_flows"
+        }
+      ]
+    },
+    "text_value": {
+      "type": "string"
+    },
+    "named_field": {
+      "type": "object",
+      "required": [
+        "name"
+      ],
+      "properties": {
+        "name": {
+          "$ref": "#/definitions/text_value",
+          "type": "string",
+          "minLength": 1
+        },
+        "description": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "named_list": {
+      "type": "object",
+      "description": "An object with named and typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "named-list"
+        },
+        "items": {
+          "type": "object",
+          "patternProperties": {
+            "^.*$": {
+              "allOf": [
+                {
+                  "$ref": "#/definitions/named_field"
+                },
+                {
+                  "$ref": "#/definitions/detail_type"
+                }
+              ]
+            }
+          }
+        }
+      }
+    },
+    "list": {
+      "type": "object",
+      "description": "A list of typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "list"
+        },
+        "items": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        }
+      }
+    },
+    "table": {
+      "type": "object",
+      "description": "A table of typed fields",
+      "required": [
+        "type",
+        "rows"
+      ],
+      "properties": {
+        "type": {
+          "const": "table"
+        },
+        "header": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        },
+        "rows": {
+          "type": "array",
+          "items": {
+            "type": "array",
+            "items": {
+              "$ref": "#/definitions/detail_type"
+            }
+          }
+        }
+      }
+    },
+    "text": {
+      "type": "object",
+      "description": "Raw text",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "text"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "url": {
+      "type": "object",
+      "description": "A single URL",
+      "required": [
+        "type",
+        "href"
+      ],
+      "properties": {
+        "type": {
+          "const": "url"
+        },
+        "text": {
+          "$ref": "#/definitions/text_value"
+        },
+        "href": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "http://mysite.com"
+          ]
+        }
+      }
+    },
+    "code": {
+      "type": "object",
+      "description": "A codeblock",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "code"
+        },
+        "value": {
+          "type": "string"
+        },
+        "lang": {
+          "type": "string",
+          "description": "A programming language"
+        }
+      }
+    },
+    "value": {
+      "type": "object",
+      "description": "A field that can store a range of types of value",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "value"
+        },
+        "value": {
+          "type": [
+            "number",
+            "string",
+            "boolean"
+          ]
+        }
+      }
+    },
+    "diff": {
+      "type": "object",
+      "description": "A diff",
+      "required": [
+        "type",
+        "before",
+        "after"
+      ],
+      "properties": {
+        "type": {
+          "const": "diff"
+        },
+        "before": {
+          "type": "string"
+        },
+        "after": {
+          "type": "string"
+        }
+      }
+    },
+    "markdown": {
+      "type": "object",
+      "description": "GitLab flavoured markdown, see https://docs.gitlab.com/ee/user/markdown.html",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "markdown"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value",
+          "examples": [
+            "Here is markdown `inline code` #1 [test](gitlab.com)\n\n![GitLab Logo](https://about.gitlab.com/images/press/logo/preview/gitlab-logo-white-preview.png)"
+          ]
+        }
+      }
+    },
+    "commit": {
+      "type": "object",
+      "description": "A commit/tag/branch within the GitLab project",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "commit"
+        },
+        "value": {
+          "type": "string",
+          "description": "The commit SHA",
+          "minLength": 1
+        }
+      }
+    },
+    "file_location": {
+      "type": "object",
+      "description": "A location within a file in the project",
+      "required": [
+        "type",
+        "file_name",
+        "line_start"
+      ],
+      "properties": {
+        "type": {
+          "const": "file-location"
+        },
+        "file_name": {
+          "type": "string",
+          "minLength": 1
+        },
+        "line_start": {
+          "type": "integer"
+        },
+        "line_end": {
+          "type": "integer"
+        }
+      }
+    },
+    "module_location": {
+      "type": "object",
+      "description": "A location within a binary module of the form module+relative_offset",
+      "required": [
+        "type",
+        "module_name",
+        "offset"
+      ],
+      "properties": {
+        "type": {
+          "const": "module-location"
+        },
+        "module_name": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "compiled_binary"
+          ]
+        },
+        "offset": {
+          "type": "integer",
+          "examples": [
+            100
+          ]
+        }
+      }
+    },
+    "code_flow_node": {
+      "type": "object",
+      "description": "A code flow node representing a part of a vulnerability flow from source to sink",
+      "required": [
+        "file_location",
+        "node_type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code-flow-node"
+        },
+        "file_location": {
+          "$ref": "#/definitions/file_location"
+        },
+        "node_type": {
+          "type": "string",
+          "description": "Describes a code flow node type",
+          "enum": [
+            "source",
+            "sink",
+            "propagation"
+          ]
+        }
+      },
+      "examples": [
+        {
+          "type": "code-flow-node",
+          "node_type": "propagation",
+          "file_location": {
+            "type": "file-location",
+            "file_name": "file_name.py",
+            "line_start": 4,
+            "line_end": 6
+          }
+        }
+      ]
+    },
+    "code_flows": {
+      "type": "object",
+      "description": "A code flow representing a vulnerability flow from source to sink",
+      "required": [
+        "items",
+        "type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code_flows"
+        },
+        "items": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 10,
+          "items": {
+            "type": "array",
+            "minItems": 1,
+            "items": {
+              "$ref": "#/definitions/code_flow_node"
+            }
+          }
+        }
+      },
+      "examples": [
+        {
+          "type": "code_flows",
+          "items": [
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 1,
+                  "line_end": 2
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "propagation",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 3
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ],
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "different_flow.py",
+                  "line_start": 100,
+                  "line_end": 102
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ]
+          ]
+        }
+      ]
+    }
+  },
+  "self": {
+    "version": "15.1.3"
+  },
+  "type": "object",
+  "required": [
+    "scan",
+    "version",
+    "vulnerabilities"
+  ],
+  "additionalProperties": true,
+  "properties": {
+    "scan": {
+      "type": "object",
+      "required": [
+        "analyzer",
+        "end_time",
+        "scanner",
+        "start_time",
+        "status",
+        "type"
+      ],
+      "properties": {
+        "end_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan finished.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-01-28T03:26:02"
+          ]
+        },
+        "messages": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "Communication intended for the initiator of a scan.",
+            "required": [
+              "level",
+              "value"
+            ],
+            "properties": {
+              "level": {
+                "type": "string",
+                "description": "Describes the severity of the communication. Use info to communicate normal scan behaviour; warn to communicate a potentially recoverable problem, or a partial error; fatal to communicate an issue that causes the scan to halt.",
+                "enum": [
+                  "info",
+                  "warn",
+                  "fatal"
+                ],
+                "examples": [
+                  "info"
+                ]
+              },
+              "value": {
+                "type": "string",
+                "description": "The message to communicate.",
+                "minLength": 1,
+                "examples": [
+                  "Permission denied, scanning aborted"
+                ]
+              }
+            }
+          }
+        },
+        "options": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "A configuration option used for this scan.",
+            "required": [
+              "name",
+              "value"
+            ],
+            "properties": {
+              "name": {
+                "type": "string",
+                "description": "The configuration option name.",
+                "maxLength": 255,
+                "minLength": 1,
+                "examples": [
+                  "DAST_FF_ENABLE_BAS",
+                  "DOCKER_TLS_CERTDIR",
+                  "DS_MAX_DEPTH",
+                  "SECURE_LOG_LEVEL"
+                ]
+              },
+              "source": {
+                "type": "string",
+                "description": "The source of this option.",
+                "enum": [
+                  "argument",
+                  "file",
+                  "env_variable",
+                  "other"
+                ]
+              },
+              "value": {
+                "type": [
+                  "boolean",
+                  "integer",
+                  "null",
+                  "string"
+                ],
+                "description": "The value used for this scan.",
+                "examples": [
+                  true,
+                  2,
+                  null,
+                  "fatal",
+                  ""
+                ]
+              }
+            }
+          }
+        },
+        "analyzer": {
+          "type": "object",
+          "description": "Object defining the analyzer used to perform the scan. Analyzers typically delegate to an underlying scanner to run the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "gitlab-dast"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the analyzer, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "GitLab DAST"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "pattern": "^https?://.+",
+              "description": "A link to more information about the analyzer.",
+              "examples": [
+                "https://docs.gitlab.com/ee/user/application_security/dast"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the analyzer.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            }
+          }
+        },
+        "scanner": {
+          "type": "object",
+          "description": "Object defining the scanner used to perform the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the scanner.",
+              "minLength": 1,
+              "examples": [
+                "my-sast-scanner"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the scanner, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "My SAST Scanner"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "description": "A link to more information about the scanner.",
+              "examples": [
+                "https://scanner.url"
+              ]
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the scanner.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the scanner.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "start_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan started.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-02-14T16:01:59"
+          ]
+        },
+        "status": {
+          "type": "string",
+          "description": "Result of the scan.",
+          "enum": [
+            "success",
+            "failure"
+          ]
+        },
+        "type": {
+          "type": "string",
+          "description": "Type of the scan.",
+          "enum": [
+            "coverage_fuzzing"
+          ]
+        },
+        "primary_identifiers": {
+          "type": "array",
+          "description": "An unordered array containing an exhaustive list of primary identifiers for which the analyzer may return results",
+          "items": {
+            "type": "object",
+            "required": [
+              "type",
+              "name",
+              "value"
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                "minLength": 1
+              },
+              "name": {
+                "type": "string",
+                "description": "Human-readable name of the identifier.",
+                "minLength": 1
+              },
+              "url": {
+                "type": "string",
+                "description": "URL of the identifier's documentation.",
+                "pattern": "^(https?|ftp)://.+"
+              },
+              "value": {
+                "type": "string",
+                "description": "Value of the identifier, for matching purpose.",
+                "minLength": 1
+              }
+            }
+          }
+        }
+      }
+    },
+    "schema": {
+      "type": "string",
+      "description": "URI pointing to the validating security report schema.",
+      "pattern": "^https?://.+"
+    },
+    "version": {
+      "type": "string",
+      "description": "The version of the schema to which the JSON report conforms.",
+      "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"
+    },
+    "vulnerabilities": {
+      "type": "array",
+      "description": "Array of vulnerability objects.",
+      "items": {
+        "type": "object",
+        "description": "Describes the vulnerability using GitLab Flavored Markdown",
+        "required": [
+          "id",
+          "identifiers",
+          "location"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+            "examples": [
+              "642735a5-1425-428d-8d4e-3c854885a3c9"
+            ]
+          },
+          "name": {
+            "type": "string",
+            "maxLength": 255,
+            "description": "The name of the vulnerability. This must not include the finding's specific information."
+          },
+          "description": {
+            "type": "string",
+            "maxLength": 1048576,
+            "description": "A long text section describing the vulnerability more fully."
+          },
+          "severity": {
+            "type": "string",
+            "description": "How much the vulnerability impacts the software. Possible values are Info, Unknown, Low, Medium, High, or Critical. Note that some analyzers may not report all these possible values.",
+            "enum": [
+              "Info",
+              "Unknown",
+              "Low",
+              "Medium",
+              "High",
+              "Critical"
+            ]
+          },
+          "solution": {
+            "type": "string",
+            "maxLength": 7000,
+            "description": "Explanation of how to fix the vulnerability."
+          },
+          "identifiers": {
+            "type": "array",
+            "minItems": 1,
+            "description": "An ordered array of references that identify a vulnerability on internal or external databases. The first identifier is the Primary Identifier, which has special meaning.",
+            "items": {
+              "type": "object",
+              "required": [
+                "type",
+                "name",
+                "value"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                  "minLength": 1
+                },
+                "name": {
+                  "type": "string",
+                  "description": "Human-readable name of the identifier.",
+                  "minLength": 1
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the identifier's documentation.",
+                  "pattern": "^(https?|ftp)://.+"
+                },
+                "value": {
+                  "type": "string",
+                  "description": "Value of the identifier, for matching purpose.",
+                  "minLength": 1
+                }
+              }
+            }
+          },
+          "cvss_vectors": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 10,
+            "description": "An ordered array of CVSS vectors, each issued by a vendor to rate the vulnerability. The first item in the array is used as the primary CVSS vector, and is used to filter and sort the vulnerability.",
+            "items": {
+              "oneOf": [
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 16,
+                      "maxLength": 128,
+                      "pattern": "^((AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))/)*(AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 32,
+                      "maxLength": 128,
+                      "pattern": "^CVSS:3[.][01]/((AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])/)*(AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                }
+              ]
+            }
+          },
+          "links": {
+            "type": "array",
+            "description": "An array of references to external documentation or articles that describe the vulnerability.",
+            "items": {
+              "type": "object",
+              "required": [
+                "url"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "Name of the vulnerability details link."
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the vulnerability details document.",
+                  "pattern": "^(https?|ftp)://.+"
+                }
+              }
+            }
+          },
+          "details": {
+            "$ref": "#/definitions/named_list/properties/items"
+          },
+          "tracking": {
+            "type": "object",
+            "description": "Describes how this vulnerability should be tracked as the project changes.",
+            "oneOf": [
+              {
+                "description": "Declares that a series of items should be tracked using source-specific tracking methods.",
+                "required": [
+                  "items"
+                ],
+                "properties": {
+                  "type": {
+                    "const": "source"
+                  },
+                  "items": {
+                    "type": "array",
+                    "items": {
+                      "description": "An item that should be tracked using source-specific tracking methods.",
+                      "type": "object",
+                      "required": [
+                        "signatures"
+                      ],
+                      "properties": {
+                        "file": {
+                          "type": "string",
+                          "description": "Path to the file where the vulnerability is located."
+                        },
+                        "start_line": {
+                          "type": "number",
+                          "description": "The first line of the file that includes the vulnerability."
+                        },
+                        "end_line": {
+                          "type": "number",
+                          "description": "The last line of the file that includes the vulnerability."
+                        },
+                        "signatures": {
+                          "type": "array",
+                          "description": "An array of calculated tracking signatures for this tracking item.",
+                          "minItems": 1,
+                          "items": {
+                            "description": "A calculated tracking signature value and metadata.",
+                            "type": "object",
+                            "required": [
+                              "algorithm",
+                              "value"
+                            ],
+                            "properties": {
+                              "algorithm": {
+                                "type": "string",
+                                "description": "The algorithm used to generate the signature."
+                              },
+                              "value": {
+                                "type": "string",
+                                "description": "The result of this signature algorithm."
+                              }
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "Each tracking type must declare its own type."
+              }
+            }
+          },
+          "flags": {
+            "description": "Flags that can be attached to vulnerabilities.",
+            "type": "array",
+            "items": {
+              "type": "object",
+              "description": "Informational flags identified and assigned to a vulnerability.",
+              "required": [
+                "type",
+                "origin",
+                "description"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Result of the scan.",
+                  "enum": [
+                    "flagged-as-likely-false-positive"
+                  ]
+                },
+                "origin": {
+                  "minLength": 1,
+                  "description": "Tool that issued the flag.",
+                  "type": "string"
+                },
+                "description": {
+                  "minLength": 1,
+                  "description": "What the flag is about.",
+                  "type": "string"
+                }
+              }
+            }
+          },
+          "location": {
+            "description": "The location of the error",
+            "type": "object",
+            "properties": {
+              "crash_address": {
+                "type": "string",
+                "description": "The relative address in memory were the crash occurred.",
+                "examples": [
+                  "0xabababab"
+                ]
+              },
+              "stacktrace_snippet": {
+                "type": "string",
+                "description": "The stack trace recorded during fuzzing resulting the crash.",
+                "examples": [
+                  "func_a+0xabcd\nfunc_b+0xabcc"
+                ]
+              },
+              "crash_state": {
+                "type": "string",
+                "description": "Minimised and normalized crash stack-trace (called crash_state).",
+                "examples": [
+                  "func_a+0xa\nfunc_b+0xb\nfunc_c+0xc"
+                ]
+              },
+              "crash_type": {
+                "type": "string",
+                "description": "Type of the crash.",
+                "examples": [
+                  "Heap-Buffer-overflow",
+                  "Division-by-zero"
+                ]
+              }
+            }
+          }
+        }
+      }
+    },
+    "remediations": {
+      "type": "array",
+      "description": "An array of objects containing information on available remediations, along with patch diffs to apply.",
+      "items": {
+        "type": "object",
+        "required": [
+          "fixes",
+          "summary",
+          "diff"
+        ],
+        "properties": {
+          "fixes": {
+            "type": "array",
+            "description": "An array of strings that represent references to vulnerabilities fixed by this remediation.",
+            "items": {
+              "type": "object",
+              "required": [
+                "id"
+              ],
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+                  "examples": [
+                    "642735a5-1425-428d-8d4e-3c854885a3c9"
+                  ]
+                }
+              }
+            }
+          },
+          "summary": {
+            "type": "string",
+            "minLength": 1,
+            "description": "An overview of how the vulnerabilities were fixed."
+          },
+          "diff": {
+            "type": "string",
+            "minLength": 1,
+            "description": "A base64-encoded remediation code diff, compatible with git apply."
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/dast-report-format.json b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/dast-report-format.json
new file mode 100644
index 00000000000..4b90c7d6e37
--- /dev/null
+++ b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/dast-report-format.json
@@ -0,0 +1,1505 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://gitlab.com/gitlab-org/security-products/security-report-schemas/-/raw/master/dist/dast-report-format.json",
+  "title": "Report format for GitLab DAST",
+  "description": "This schema provides the the report format for Dynamic Application Security Testing (https://docs.gitlab.com/ee/user/application_security/dast).",
+  "definitions": {
+    "detail_type": {
+      "oneOf": [
+        {
+          "$ref": "#/definitions/named_list"
+        },
+        {
+          "$ref": "#/definitions/list"
+        },
+        {
+          "$ref": "#/definitions/table"
+        },
+        {
+          "$ref": "#/definitions/text"
+        },
+        {
+          "$ref": "#/definitions/url"
+        },
+        {
+          "$ref": "#/definitions/code"
+        },
+        {
+          "$ref": "#/definitions/value"
+        },
+        {
+          "$ref": "#/definitions/diff"
+        },
+        {
+          "$ref": "#/definitions/markdown"
+        },
+        {
+          "$ref": "#/definitions/commit"
+        },
+        {
+          "$ref": "#/definitions/file_location"
+        },
+        {
+          "$ref": "#/definitions/module_location"
+        },
+        {
+          "$ref": "#/definitions/code_flows"
+        }
+      ]
+    },
+    "text_value": {
+      "type": "string"
+    },
+    "named_field": {
+      "type": "object",
+      "required": [
+        "name"
+      ],
+      "properties": {
+        "name": {
+          "$ref": "#/definitions/text_value",
+          "type": "string",
+          "minLength": 1
+        },
+        "description": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "named_list": {
+      "type": "object",
+      "description": "An object with named and typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "named-list"
+        },
+        "items": {
+          "type": "object",
+          "patternProperties": {
+            "^.*$": {
+              "allOf": [
+                {
+                  "$ref": "#/definitions/named_field"
+                },
+                {
+                  "$ref": "#/definitions/detail_type"
+                }
+              ]
+            }
+          }
+        }
+      }
+    },
+    "list": {
+      "type": "object",
+      "description": "A list of typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "list"
+        },
+        "items": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        }
+      }
+    },
+    "table": {
+      "type": "object",
+      "description": "A table of typed fields",
+      "required": [
+        "type",
+        "rows"
+      ],
+      "properties": {
+        "type": {
+          "const": "table"
+        },
+        "header": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        },
+        "rows": {
+          "type": "array",
+          "items": {
+            "type": "array",
+            "items": {
+              "$ref": "#/definitions/detail_type"
+            }
+          }
+        }
+      }
+    },
+    "text": {
+      "type": "object",
+      "description": "Raw text",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "text"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "url": {
+      "type": "object",
+      "description": "A single URL",
+      "required": [
+        "type",
+        "href"
+      ],
+      "properties": {
+        "type": {
+          "const": "url"
+        },
+        "text": {
+          "$ref": "#/definitions/text_value"
+        },
+        "href": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "http://mysite.com"
+          ]
+        }
+      }
+    },
+    "code": {
+      "type": "object",
+      "description": "A codeblock",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "code"
+        },
+        "value": {
+          "type": "string"
+        },
+        "lang": {
+          "type": "string",
+          "description": "A programming language"
+        }
+      }
+    },
+    "value": {
+      "type": "object",
+      "description": "A field that can store a range of types of value",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "value"
+        },
+        "value": {
+          "type": [
+            "number",
+            "string",
+            "boolean"
+          ]
+        }
+      }
+    },
+    "diff": {
+      "type": "object",
+      "description": "A diff",
+      "required": [
+        "type",
+        "before",
+        "after"
+      ],
+      "properties": {
+        "type": {
+          "const": "diff"
+        },
+        "before": {
+          "type": "string"
+        },
+        "after": {
+          "type": "string"
+        }
+      }
+    },
+    "markdown": {
+      "type": "object",
+      "description": "GitLab flavoured markdown, see https://docs.gitlab.com/ee/user/markdown.html",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "markdown"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value",
+          "examples": [
+            "Here is markdown `inline code` #1 [test](gitlab.com)\n\n![GitLab Logo](https://about.gitlab.com/images/press/logo/preview/gitlab-logo-white-preview.png)"
+          ]
+        }
+      }
+    },
+    "commit": {
+      "type": "object",
+      "description": "A commit/tag/branch within the GitLab project",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "commit"
+        },
+        "value": {
+          "type": "string",
+          "description": "The commit SHA",
+          "minLength": 1
+        }
+      }
+    },
+    "file_location": {
+      "type": "object",
+      "description": "A location within a file in the project",
+      "required": [
+        "type",
+        "file_name",
+        "line_start"
+      ],
+      "properties": {
+        "type": {
+          "const": "file-location"
+        },
+        "file_name": {
+          "type": "string",
+          "minLength": 1
+        },
+        "line_start": {
+          "type": "integer"
+        },
+        "line_end": {
+          "type": "integer"
+        }
+      }
+    },
+    "module_location": {
+      "type": "object",
+      "description": "A location within a binary module of the form module+relative_offset",
+      "required": [
+        "type",
+        "module_name",
+        "offset"
+      ],
+      "properties": {
+        "type": {
+          "const": "module-location"
+        },
+        "module_name": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "compiled_binary"
+          ]
+        },
+        "offset": {
+          "type": "integer",
+          "examples": [
+            100
+          ]
+        }
+      }
+    },
+    "code_flow_node": {
+      "type": "object",
+      "description": "A code flow node representing a part of a vulnerability flow from source to sink",
+      "required": [
+        "file_location",
+        "node_type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code-flow-node"
+        },
+        "file_location": {
+          "$ref": "#/definitions/file_location"
+        },
+        "node_type": {
+          "type": "string",
+          "description": "Describes a code flow node type",
+          "enum": [
+            "source",
+            "sink",
+            "propagation"
+          ]
+        }
+      },
+      "examples": [
+        {
+          "type": "code-flow-node",
+          "node_type": "propagation",
+          "file_location": {
+            "type": "file-location",
+            "file_name": "file_name.py",
+            "line_start": 4,
+            "line_end": 6
+          }
+        }
+      ]
+    },
+    "code_flows": {
+      "type": "object",
+      "description": "A code flow representing a vulnerability flow from source to sink",
+      "required": [
+        "items",
+        "type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code_flows"
+        },
+        "items": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 10,
+          "items": {
+            "type": "array",
+            "minItems": 1,
+            "items": {
+              "$ref": "#/definitions/code_flow_node"
+            }
+          }
+        }
+      },
+      "examples": [
+        {
+          "type": "code_flows",
+          "items": [
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 1,
+                  "line_end": 2
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "propagation",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 3
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ],
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "different_flow.py",
+                  "line_start": 100,
+                  "line_end": 102
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ]
+          ]
+        }
+      ]
+    }
+  },
+  "self": {
+    "version": "15.1.3"
+  },
+  "type": "object",
+  "required": [
+    "scan",
+    "version",
+    "vulnerabilities"
+  ],
+  "additionalProperties": true,
+  "properties": {
+    "scan": {
+      "type": "object",
+      "required": [
+        "analyzer",
+        "end_time",
+        "scanned_resources",
+        "scanner",
+        "start_time",
+        "status",
+        "type"
+      ],
+      "properties": {
+        "end_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan finished.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-01-28T03:26:02"
+          ]
+        },
+        "messages": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "Communication intended for the initiator of a scan.",
+            "required": [
+              "level",
+              "value"
+            ],
+            "properties": {
+              "level": {
+                "type": "string",
+                "description": "Describes the severity of the communication. Use info to communicate normal scan behaviour; warn to communicate a potentially recoverable problem, or a partial error; fatal to communicate an issue that causes the scan to halt.",
+                "enum": [
+                  "info",
+                  "warn",
+                  "fatal"
+                ],
+                "examples": [
+                  "info"
+                ]
+              },
+              "value": {
+                "type": "string",
+                "description": "The message to communicate.",
+                "minLength": 1,
+                "examples": [
+                  "Permission denied, scanning aborted"
+                ]
+              }
+            }
+          }
+        },
+        "options": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "A configuration option used for this scan.",
+            "required": [
+              "name",
+              "value"
+            ],
+            "properties": {
+              "name": {
+                "type": "string",
+                "description": "The configuration option name.",
+                "maxLength": 255,
+                "minLength": 1,
+                "examples": [
+                  "DAST_FF_ENABLE_BAS",
+                  "DOCKER_TLS_CERTDIR",
+                  "DS_MAX_DEPTH",
+                  "SECURE_LOG_LEVEL"
+                ]
+              },
+              "source": {
+                "type": "string",
+                "description": "The source of this option.",
+                "enum": [
+                  "argument",
+                  "file",
+                  "env_variable",
+                  "other"
+                ]
+              },
+              "value": {
+                "type": [
+                  "boolean",
+                  "integer",
+                  "null",
+                  "string"
+                ],
+                "description": "The value used for this scan.",
+                "examples": [
+                  true,
+                  2,
+                  null,
+                  "fatal",
+                  ""
+                ]
+              }
+            }
+          }
+        },
+        "analyzer": {
+          "type": "object",
+          "description": "Object defining the analyzer used to perform the scan. Analyzers typically delegate to an underlying scanner to run the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "gitlab-dast"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the analyzer, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "GitLab DAST"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "pattern": "^https?://.+",
+              "description": "A link to more information about the analyzer.",
+              "examples": [
+                "https://docs.gitlab.com/ee/user/application_security/dast"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the analyzer.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            }
+          }
+        },
+        "scanner": {
+          "type": "object",
+          "description": "Object defining the scanner used to perform the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the scanner.",
+              "minLength": 1,
+              "examples": [
+                "my-sast-scanner"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the scanner, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "My SAST Scanner"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "description": "A link to more information about the scanner.",
+              "examples": [
+                "https://scanner.url"
+              ]
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the scanner.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the scanner.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "start_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan started.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-02-14T16:01:59"
+          ]
+        },
+        "status": {
+          "type": "string",
+          "description": "Result of the scan.",
+          "enum": [
+            "success",
+            "failure"
+          ]
+        },
+        "type": {
+          "type": "string",
+          "description": "Type of the scan.",
+          "enum": [
+            "dast",
+            "api_fuzzing"
+          ]
+        },
+        "primary_identifiers": {
+          "type": "array",
+          "description": "An unordered array containing an exhaustive list of primary identifiers for which the analyzer may return results",
+          "items": {
+            "type": "object",
+            "required": [
+              "type",
+              "name",
+              "value"
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                "minLength": 1
+              },
+              "name": {
+                "type": "string",
+                "description": "Human-readable name of the identifier.",
+                "minLength": 1
+              },
+              "url": {
+                "type": "string",
+                "description": "URL of the identifier's documentation.",
+                "pattern": "^(https?|ftp)://.+"
+              },
+              "value": {
+                "type": "string",
+                "description": "Value of the identifier, for matching purpose.",
+                "minLength": 1
+              }
+            }
+          }
+        },
+        "scanned_resources": {
+          "type": "array",
+          "description": "The attack surface scanned by DAST.",
+          "items": {
+            "type": "object",
+            "required": [
+              "method",
+              "url",
+              "type"
+            ],
+            "properties": {
+              "method": {
+                "type": "string",
+                "minLength": 1,
+                "description": "HTTP method of the scanned resource.",
+                "examples": [
+                  "GET",
+                  "POST",
+                  "HEAD"
+                ]
+              },
+              "url": {
+                "type": "string",
+                "minLength": 1,
+                "description": "URL of the scanned resource.",
+                "examples": [
+                  "http://my.site.com/a-page"
+                ]
+              },
+              "type": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Type of the scanned resource, for DAST, this must be 'url'.",
+                "examples": [
+                  "url"
+                ]
+              }
+            }
+          }
+        }
+      }
+    },
+    "schema": {
+      "type": "string",
+      "description": "URI pointing to the validating security report schema.",
+      "pattern": "^https?://.+"
+    },
+    "version": {
+      "type": "string",
+      "description": "The version of the schema to which the JSON report conforms.",
+      "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"
+    },
+    "vulnerabilities": {
+      "type": "array",
+      "description": "Array of vulnerability objects.",
+      "items": {
+        "type": "object",
+        "description": "Describes the vulnerability using GitLab Flavored Markdown",
+        "required": [
+          "id",
+          "identifiers",
+          "location"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+            "examples": [
+              "642735a5-1425-428d-8d4e-3c854885a3c9"
+            ]
+          },
+          "name": {
+            "type": "string",
+            "maxLength": 255,
+            "description": "The name of the vulnerability. This must not include the finding's specific information."
+          },
+          "description": {
+            "type": "string",
+            "maxLength": 1048576,
+            "description": "A long text section describing the vulnerability more fully."
+          },
+          "severity": {
+            "type": "string",
+            "description": "How much the vulnerability impacts the software. Possible values are Info, Unknown, Low, Medium, High, or Critical. Note that some analyzers may not report all these possible values.",
+            "enum": [
+              "Info",
+              "Unknown",
+              "Low",
+              "Medium",
+              "High",
+              "Critical"
+            ]
+          },
+          "solution": {
+            "type": "string",
+            "maxLength": 7000,
+            "description": "Explanation of how to fix the vulnerability."
+          },
+          "identifiers": {
+            "type": "array",
+            "minItems": 1,
+            "description": "An ordered array of references that identify a vulnerability on internal or external databases. The first identifier is the Primary Identifier, which has special meaning.",
+            "items": {
+              "type": "object",
+              "required": [
+                "type",
+                "name",
+                "value"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                  "minLength": 1
+                },
+                "name": {
+                  "type": "string",
+                  "description": "Human-readable name of the identifier.",
+                  "minLength": 1
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the identifier's documentation.",
+                  "pattern": "^(https?|ftp)://.+"
+                },
+                "value": {
+                  "type": "string",
+                  "description": "Value of the identifier, for matching purpose.",
+                  "minLength": 1
+                }
+              }
+            }
+          },
+          "cvss_vectors": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 10,
+            "description": "An ordered array of CVSS vectors, each issued by a vendor to rate the vulnerability. The first item in the array is used as the primary CVSS vector, and is used to filter and sort the vulnerability.",
+            "items": {
+              "oneOf": [
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 16,
+                      "maxLength": 128,
+                      "pattern": "^((AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))/)*(AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 32,
+                      "maxLength": 128,
+                      "pattern": "^CVSS:3[.][01]/((AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])/)*(AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                }
+              ]
+            }
+          },
+          "links": {
+            "type": "array",
+            "description": "An array of references to external documentation or articles that describe the vulnerability.",
+            "items": {
+              "type": "object",
+              "required": [
+                "url"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "Name of the vulnerability details link."
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the vulnerability details document.",
+                  "pattern": "^(https?|ftp)://.+"
+                }
+              }
+            }
+          },
+          "details": {
+            "$ref": "#/definitions/named_list/properties/items"
+          },
+          "tracking": {
+            "type": "object",
+            "description": "Describes how this vulnerability should be tracked as the project changes.",
+            "oneOf": [
+              {
+                "description": "Declares that a series of items should be tracked using source-specific tracking methods.",
+                "required": [
+                  "items"
+                ],
+                "properties": {
+                  "type": {
+                    "const": "source"
+                  },
+                  "items": {
+                    "type": "array",
+                    "items": {
+                      "description": "An item that should be tracked using source-specific tracking methods.",
+                      "type": "object",
+                      "required": [
+                        "signatures"
+                      ],
+                      "properties": {
+                        "file": {
+                          "type": "string",
+                          "description": "Path to the file where the vulnerability is located."
+                        },
+                        "start_line": {
+                          "type": "number",
+                          "description": "The first line of the file that includes the vulnerability."
+                        },
+                        "end_line": {
+                          "type": "number",
+                          "description": "The last line of the file that includes the vulnerability."
+                        },
+                        "signatures": {
+                          "type": "array",
+                          "description": "An array of calculated tracking signatures for this tracking item.",
+                          "minItems": 1,
+                          "items": {
+                            "description": "A calculated tracking signature value and metadata.",
+                            "type": "object",
+                            "required": [
+                              "algorithm",
+                              "value"
+                            ],
+                            "properties": {
+                              "algorithm": {
+                                "type": "string",
+                                "description": "The algorithm used to generate the signature."
+                              },
+                              "value": {
+                                "type": "string",
+                                "description": "The result of this signature algorithm."
+                              }
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "Each tracking type must declare its own type."
+              }
+            }
+          },
+          "flags": {
+            "description": "Flags that can be attached to vulnerabilities.",
+            "type": "array",
+            "items": {
+              "type": "object",
+              "description": "Informational flags identified and assigned to a vulnerability.",
+              "required": [
+                "type",
+                "origin",
+                "description"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Result of the scan.",
+                  "enum": [
+                    "flagged-as-likely-false-positive"
+                  ]
+                },
+                "origin": {
+                  "minLength": 1,
+                  "description": "Tool that issued the flag.",
+                  "type": "string"
+                },
+                "description": {
+                  "minLength": 1,
+                  "description": "What the flag is about.",
+                  "type": "string"
+                }
+              }
+            }
+          },
+          "evidence": {
+            "type": "object",
+            "properties": {
+              "source": {
+                "type": "object",
+                "description": "Source of evidence",
+                "required": [
+                  "id",
+                  "name"
+                ],
+                "properties": {
+                  "id": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "Unique source identifier",
+                    "examples": [
+                      "assert:LogAnalysis",
+                      "assert:StatusCode"
+                    ]
+                  },
+                  "name": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "Source display name",
+                    "examples": [
+                      "Log Analysis",
+                      "Status Code"
+                    ]
+                  },
+                  "url": {
+                    "type": "string",
+                    "description": "Link to additional information",
+                    "examples": [
+                      "https://docs.gitlab.com/ee/development/integrations/secure.html"
+                    ]
+                  }
+                }
+              },
+              "summary": {
+                "type": "string",
+                "description": "Human readable string containing evidence of the vulnerability.",
+                "examples": [
+                  "Credit card 4111111111111111 found",
+                  "Server leaked information nginx/1.17.6"
+                ]
+              },
+              "request": {
+                "type": "object",
+                "description": "An HTTP request.",
+                "required": [
+                  "headers",
+                  "method",
+                  "url"
+                ],
+                "properties": {
+                  "headers": {
+                    "type": "array",
+                    "description": "HTTP headers present on the request.",
+                    "items": {
+                      "type": "object",
+                      "required": [
+                        "name",
+                        "value"
+                      ],
+                      "properties": {
+                        "name": {
+                          "type": "string",
+                          "minLength": 1,
+                          "description": "Name of the HTTP header.",
+                          "examples": [
+                            "Accept",
+                            "Content-Length",
+                            "Content-Type"
+                          ]
+                        },
+                        "value": {
+                          "type": "string",
+                          "description": "Value of the HTTP header.",
+                          "examples": [
+                            "*/*",
+                            "560",
+                            "application/json; charset=utf-8"
+                          ]
+                        }
+                      }
+                    }
+                  },
+                  "method": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "HTTP method used in the request.",
+                    "examples": [
+                      "GET",
+                      "POST"
+                    ]
+                  },
+                  "url": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "URL of the request.",
+                    "examples": [
+                      "http://my.site.com/vulnerable-endpoint?show-credit-card"
+                    ]
+                  },
+                  "body": {
+                    "type": "string",
+                    "description": "Body of the request for display purposes. Body must be suitable for display (not binary), and truncated to a reasonable size.",
+                    "examples": [
+                      "user=jsmith&first=%27&last=smith"
+                    ]
+                  }
+                }
+              },
+              "response": {
+                "type": "object",
+                "description": "An HTTP response.",
+                "required": [
+                  "headers",
+                  "reason_phrase",
+                  "status_code"
+                ],
+                "properties": {
+                  "headers": {
+                    "type": "array",
+                    "description": "HTTP headers present on the request.",
+                    "items": {
+                      "type": "object",
+                      "required": [
+                        "name",
+                        "value"
+                      ],
+                      "properties": {
+                        "name": {
+                          "type": "string",
+                          "minLength": 1,
+                          "description": "Name of the HTTP header.",
+                          "examples": [
+                            "Accept",
+                            "Content-Length",
+                            "Content-Type"
+                          ]
+                        },
+                        "value": {
+                          "type": "string",
+                          "description": "Value of the HTTP header.",
+                          "examples": [
+                            "*/*",
+                            "560",
+                            "application/json; charset=utf-8"
+                          ]
+                        }
+                      }
+                    }
+                  },
+                  "reason_phrase": {
+                    "type": "string",
+                    "description": "HTTP reason phrase of the response.",
+                    "examples": [
+                      "OK",
+                      "Internal Server Error"
+                    ]
+                  },
+                  "status_code": {
+                    "type": "integer",
+                    "description": "HTTP status code of the response.",
+                    "examples": [
+                      200,
+                      500
+                    ]
+                  },
+                  "body": {
+                    "type": "string",
+                    "description": "Body of the response for display purposes. Body must be suitable for display (not binary), and truncated to a reasonable size.",
+                    "examples": [
+                      "{\"user_id\": 2}"
+                    ]
+                  }
+                }
+              },
+              "supporting_messages": {
+                "type": "array",
+                "description": "Array of supporting http messages.",
+                "items": {
+                  "type": "object",
+                  "description": "A supporting http message.",
+                  "required": [
+                    "name"
+                  ],
+                  "properties": {
+                    "name": {
+                      "type": "string",
+                      "minLength": 1,
+                      "description": "Message display name.",
+                      "examples": [
+                        "Unmodified",
+                        "Recorded"
+                      ]
+                    },
+                    "request": {
+                      "type": "object",
+                      "description": "An HTTP request.",
+                      "required": [
+                        "headers",
+                        "method",
+                        "url"
+                      ],
+                      "properties": {
+                        "headers": {
+                          "type": "array",
+                          "description": "HTTP headers present on the request.",
+                          "items": {
+                            "type": "object",
+                            "required": [
+                              "name",
+                              "value"
+                            ],
+                            "properties": {
+                              "name": {
+                                "type": "string",
+                                "minLength": 1,
+                                "description": "Name of the HTTP header.",
+                                "examples": [
+                                  "Accept",
+                                  "Content-Length",
+                                  "Content-Type"
+                                ]
+                              },
+                              "value": {
+                                "type": "string",
+                                "description": "Value of the HTTP header.",
+                                "examples": [
+                                  "*/*",
+                                  "560",
+                                  "application/json; charset=utf-8"
+                                ]
+                              }
+                            }
+                          }
+                        },
+                        "method": {
+                          "type": "string",
+                          "minLength": 1,
+                          "description": "HTTP method used in the request.",
+                          "examples": [
+                            "GET",
+                            "POST"
+                          ]
+                        },
+                        "url": {
+                          "type": "string",
+                          "minLength": 1,
+                          "description": "URL of the request.",
+                          "examples": [
+                            "http://my.site.com/vulnerable-endpoint?show-credit-card"
+                          ]
+                        },
+                        "body": {
+                          "type": "string",
+                          "description": "Body of the request for display purposes. Body must be suitable for display (not binary), and truncated to a reasonable size.",
+                          "examples": [
+                            "user=jsmith&first=%27&last=smith"
+                          ]
+                        }
+                      }
+                    },
+                    "response": {
+                      "type": "object",
+                      "description": "An HTTP response.",
+                      "required": [
+                        "headers",
+                        "reason_phrase",
+                        "status_code"
+                      ],
+                      "properties": {
+                        "headers": {
+                          "type": "array",
+                          "description": "HTTP headers present on the request.",
+                          "items": {
+                            "type": "object",
+                            "required": [
+                              "name",
+                              "value"
+                            ],
+                            "properties": {
+                              "name": {
+                                "type": "string",
+                                "minLength": 1,
+                                "description": "Name of the HTTP header.",
+                                "examples": [
+                                  "Accept",
+                                  "Content-Length",
+                                  "Content-Type"
+                                ]
+                              },
+                              "value": {
+                                "type": "string",
+                                "description": "Value of the HTTP header.",
+                                "examples": [
+                                  "*/*",
+                                  "560",
+                                  "application/json; charset=utf-8"
+                                ]
+                              }
+                            }
+                          }
+                        },
+                        "reason_phrase": {
+                          "type": "string",
+                          "description": "HTTP reason phrase of the response.",
+                          "examples": [
+                            "OK",
+                            "Internal Server Error"
+                          ]
+                        },
+                        "status_code": {
+                          "type": "integer",
+                          "description": "HTTP status code of the response.",
+                          "examples": [
+                            200,
+                            500
+                          ]
+                        },
+                        "body": {
+                          "type": "string",
+                          "description": "Body of the response for display purposes. Body must be suitable for display (not binary), and truncated to a reasonable size.",
+                          "examples": [
+                            "{\"user_id\": 2}"
+                          ]
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "location": {
+            "type": "object",
+            "description": "Identifies the vulnerability's location.",
+            "properties": {
+              "hostname": {
+                "type": "string",
+                "description": "The protocol, domain, and port of the application where the vulnerability was found."
+              },
+              "method": {
+                "type": "string",
+                "description": "The HTTP method that was used to request the URL where the vulnerability was found."
+              },
+              "param": {
+                "type": "string",
+                "description": "A value provided by a vulnerability rule related to the found vulnerability. Examples include a header value, or a parameter used in a HTTP POST."
+              },
+              "path": {
+                "type": "string",
+                "description": "The path of the URL where the vulnerability was found. Typically, this would start with a forward slash."
+              }
+            }
+          },
+          "assets": {
+            "type": "array",
+            "description": "Array of build assets associated with vulnerability.",
+            "items": {
+              "type": "object",
+              "description": "Describes an asset associated with vulnerability.",
+              "required": [
+                "type",
+                "name",
+                "url"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "description": "The type of asset",
+                  "enum": [
+                    "http_session",
+                    "postman"
+                  ]
+                },
+                "name": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Display name for asset",
+                  "examples": [
+                    "HTTP Messages",
+                    "Postman Collection"
+                  ]
+                },
+                "url": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Link to asset in build artifacts",
+                  "examples": [
+                    "https://gitlab.com/gitlab-org/security-products/dast/-/jobs/626397001/artifacts/file//output/zap_session.data"
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "remediations": {
+      "type": "array",
+      "description": "An array of objects containing information on available remediations, along with patch diffs to apply.",
+      "items": {
+        "type": "object",
+        "required": [
+          "fixes",
+          "summary",
+          "diff"
+        ],
+        "properties": {
+          "fixes": {
+            "type": "array",
+            "description": "An array of strings that represent references to vulnerabilities fixed by this remediation.",
+            "items": {
+              "type": "object",
+              "required": [
+                "id"
+              ],
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+                  "examples": [
+                    "642735a5-1425-428d-8d4e-3c854885a3c9"
+                  ]
+                }
+              }
+            }
+          },
+          "summary": {
+            "type": "string",
+            "minLength": 1,
+            "description": "An overview of how the vulnerabilities were fixed."
+          },
+          "diff": {
+            "type": "string",
+            "minLength": 1,
+            "description": "A base64-encoded remediation code diff, compatible with git apply."
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/dependency-scanning-report-format.json b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/dependency-scanning-report-format.json
new file mode 100644
index 00000000000..e5ef083eb0f
--- /dev/null
+++ b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/dependency-scanning-report-format.json
@@ -0,0 +1,1111 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://gitlab.com/gitlab-org/security-products/security-report-schemas/-/raw/master/dist/dependency-scanning-report-format.json",
+  "title": "Report format for GitLab Dependency Scanning",
+  "description": "This schema provides the the report format for Dependency Scanning analyzers (https://docs.gitlab.com/ee/user/application_security/dependency_scanning).",
+  "definitions": {
+    "detail_type": {
+      "oneOf": [
+        {
+          "$ref": "#/definitions/named_list"
+        },
+        {
+          "$ref": "#/definitions/list"
+        },
+        {
+          "$ref": "#/definitions/table"
+        },
+        {
+          "$ref": "#/definitions/text"
+        },
+        {
+          "$ref": "#/definitions/url"
+        },
+        {
+          "$ref": "#/definitions/code"
+        },
+        {
+          "$ref": "#/definitions/value"
+        },
+        {
+          "$ref": "#/definitions/diff"
+        },
+        {
+          "$ref": "#/definitions/markdown"
+        },
+        {
+          "$ref": "#/definitions/commit"
+        },
+        {
+          "$ref": "#/definitions/file_location"
+        },
+        {
+          "$ref": "#/definitions/module_location"
+        },
+        {
+          "$ref": "#/definitions/code_flows"
+        }
+      ]
+    },
+    "text_value": {
+      "type": "string"
+    },
+    "named_field": {
+      "type": "object",
+      "required": [
+        "name"
+      ],
+      "properties": {
+        "name": {
+          "$ref": "#/definitions/text_value",
+          "type": "string",
+          "minLength": 1
+        },
+        "description": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "named_list": {
+      "type": "object",
+      "description": "An object with named and typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "named-list"
+        },
+        "items": {
+          "type": "object",
+          "patternProperties": {
+            "^.*$": {
+              "allOf": [
+                {
+                  "$ref": "#/definitions/named_field"
+                },
+                {
+                  "$ref": "#/definitions/detail_type"
+                }
+              ]
+            }
+          }
+        }
+      }
+    },
+    "list": {
+      "type": "object",
+      "description": "A list of typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "list"
+        },
+        "items": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        }
+      }
+    },
+    "table": {
+      "type": "object",
+      "description": "A table of typed fields",
+      "required": [
+        "type",
+        "rows"
+      ],
+      "properties": {
+        "type": {
+          "const": "table"
+        },
+        "header": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        },
+        "rows": {
+          "type": "array",
+          "items": {
+            "type": "array",
+            "items": {
+              "$ref": "#/definitions/detail_type"
+            }
+          }
+        }
+      }
+    },
+    "text": {
+      "type": "object",
+      "description": "Raw text",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "text"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "url": {
+      "type": "object",
+      "description": "A single URL",
+      "required": [
+        "type",
+        "href"
+      ],
+      "properties": {
+        "type": {
+          "const": "url"
+        },
+        "text": {
+          "$ref": "#/definitions/text_value"
+        },
+        "href": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "http://mysite.com"
+          ]
+        }
+      }
+    },
+    "code": {
+      "type": "object",
+      "description": "A codeblock",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "code"
+        },
+        "value": {
+          "type": "string"
+        },
+        "lang": {
+          "type": "string",
+          "description": "A programming language"
+        }
+      }
+    },
+    "value": {
+      "type": "object",
+      "description": "A field that can store a range of types of value",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "value"
+        },
+        "value": {
+          "type": [
+            "number",
+            "string",
+            "boolean"
+          ]
+        }
+      }
+    },
+    "diff": {
+      "type": "object",
+      "description": "A diff",
+      "required": [
+        "type",
+        "before",
+        "after"
+      ],
+      "properties": {
+        "type": {
+          "const": "diff"
+        },
+        "before": {
+          "type": "string"
+        },
+        "after": {
+          "type": "string"
+        }
+      }
+    },
+    "markdown": {
+      "type": "object",
+      "description": "GitLab flavoured markdown, see https://docs.gitlab.com/ee/user/markdown.html",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "markdown"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value",
+          "examples": [
+            "Here is markdown `inline code` #1 [test](gitlab.com)\n\n![GitLab Logo](https://about.gitlab.com/images/press/logo/preview/gitlab-logo-white-preview.png)"
+          ]
+        }
+      }
+    },
+    "commit": {
+      "type": "object",
+      "description": "A commit/tag/branch within the GitLab project",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "commit"
+        },
+        "value": {
+          "type": "string",
+          "description": "The commit SHA",
+          "minLength": 1
+        }
+      }
+    },
+    "file_location": {
+      "type": "object",
+      "description": "A location within a file in the project",
+      "required": [
+        "type",
+        "file_name",
+        "line_start"
+      ],
+      "properties": {
+        "type": {
+          "const": "file-location"
+        },
+        "file_name": {
+          "type": "string",
+          "minLength": 1
+        },
+        "line_start": {
+          "type": "integer"
+        },
+        "line_end": {
+          "type": "integer"
+        }
+      }
+    },
+    "module_location": {
+      "type": "object",
+      "description": "A location within a binary module of the form module+relative_offset",
+      "required": [
+        "type",
+        "module_name",
+        "offset"
+      ],
+      "properties": {
+        "type": {
+          "const": "module-location"
+        },
+        "module_name": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "compiled_binary"
+          ]
+        },
+        "offset": {
+          "type": "integer",
+          "examples": [
+            100
+          ]
+        }
+      }
+    },
+    "code_flow_node": {
+      "type": "object",
+      "description": "A code flow node representing a part of a vulnerability flow from source to sink",
+      "required": [
+        "file_location",
+        "node_type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code-flow-node"
+        },
+        "file_location": {
+          "$ref": "#/definitions/file_location"
+        },
+        "node_type": {
+          "type": "string",
+          "description": "Describes a code flow node type",
+          "enum": [
+            "source",
+            "sink",
+            "propagation"
+          ]
+        }
+      },
+      "examples": [
+        {
+          "type": "code-flow-node",
+          "node_type": "propagation",
+          "file_location": {
+            "type": "file-location",
+            "file_name": "file_name.py",
+            "line_start": 4,
+            "line_end": 6
+          }
+        }
+      ]
+    },
+    "code_flows": {
+      "type": "object",
+      "description": "A code flow representing a vulnerability flow from source to sink",
+      "required": [
+        "items",
+        "type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code_flows"
+        },
+        "items": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 10,
+          "items": {
+            "type": "array",
+            "minItems": 1,
+            "items": {
+              "$ref": "#/definitions/code_flow_node"
+            }
+          }
+        }
+      },
+      "examples": [
+        {
+          "type": "code_flows",
+          "items": [
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 1,
+                  "line_end": 2
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "propagation",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 3
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ],
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "different_flow.py",
+                  "line_start": 100,
+                  "line_end": 102
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ]
+          ]
+        }
+      ]
+    }
+  },
+  "self": {
+    "version": "15.1.3"
+  },
+  "type": "object",
+  "required": [
+    "scan",
+    "version",
+    "vulnerabilities"
+  ],
+  "additionalProperties": true,
+  "properties": {
+    "scan": {
+      "type": "object",
+      "required": [
+        "analyzer",
+        "end_time",
+        "scanner",
+        "start_time",
+        "status",
+        "type"
+      ],
+      "properties": {
+        "end_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan finished.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-01-28T03:26:02"
+          ]
+        },
+        "messages": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "Communication intended for the initiator of a scan.",
+            "required": [
+              "level",
+              "value"
+            ],
+            "properties": {
+              "level": {
+                "type": "string",
+                "description": "Describes the severity of the communication. Use info to communicate normal scan behaviour; warn to communicate a potentially recoverable problem, or a partial error; fatal to communicate an issue that causes the scan to halt.",
+                "enum": [
+                  "info",
+                  "warn",
+                  "fatal"
+                ],
+                "examples": [
+                  "info"
+                ]
+              },
+              "value": {
+                "type": "string",
+                "description": "The message to communicate.",
+                "minLength": 1,
+                "examples": [
+                  "Permission denied, scanning aborted"
+                ]
+              }
+            }
+          }
+        },
+        "options": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "A configuration option used for this scan.",
+            "required": [
+              "name",
+              "value"
+            ],
+            "properties": {
+              "name": {
+                "type": "string",
+                "description": "The configuration option name.",
+                "maxLength": 255,
+                "minLength": 1,
+                "examples": [
+                  "DAST_FF_ENABLE_BAS",
+                  "DOCKER_TLS_CERTDIR",
+                  "DS_MAX_DEPTH",
+                  "SECURE_LOG_LEVEL"
+                ]
+              },
+              "source": {
+                "type": "string",
+                "description": "The source of this option.",
+                "enum": [
+                  "argument",
+                  "file",
+                  "env_variable",
+                  "other"
+                ]
+              },
+              "value": {
+                "type": [
+                  "boolean",
+                  "integer",
+                  "null",
+                  "string"
+                ],
+                "description": "The value used for this scan.",
+                "examples": [
+                  true,
+                  2,
+                  null,
+                  "fatal",
+                  ""
+                ]
+              }
+            }
+          }
+        },
+        "analyzer": {
+          "type": "object",
+          "description": "Object defining the analyzer used to perform the scan. Analyzers typically delegate to an underlying scanner to run the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "gitlab-dast"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the analyzer, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "GitLab DAST"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "pattern": "^https?://.+",
+              "description": "A link to more information about the analyzer.",
+              "examples": [
+                "https://docs.gitlab.com/ee/user/application_security/dast"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the analyzer.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            }
+          }
+        },
+        "scanner": {
+          "type": "object",
+          "description": "Object defining the scanner used to perform the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the scanner.",
+              "minLength": 1,
+              "examples": [
+                "my-sast-scanner"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the scanner, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "My SAST Scanner"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "description": "A link to more information about the scanner.",
+              "examples": [
+                "https://scanner.url"
+              ]
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the scanner.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the scanner.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "start_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan started.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-02-14T16:01:59"
+          ]
+        },
+        "status": {
+          "type": "string",
+          "description": "Result of the scan.",
+          "enum": [
+            "success",
+            "failure"
+          ]
+        },
+        "type": {
+          "type": "string",
+          "description": "Type of the scan.",
+          "enum": [
+            "dependency_scanning"
+          ]
+        },
+        "primary_identifiers": {
+          "type": "array",
+          "description": "An unordered array containing an exhaustive list of primary identifiers for which the analyzer may return results",
+          "items": {
+            "type": "object",
+            "required": [
+              "type",
+              "name",
+              "value"
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                "minLength": 1
+              },
+              "name": {
+                "type": "string",
+                "description": "Human-readable name of the identifier.",
+                "minLength": 1
+              },
+              "url": {
+                "type": "string",
+                "description": "URL of the identifier's documentation.",
+                "pattern": "^(https?|ftp)://.+"
+              },
+              "value": {
+                "type": "string",
+                "description": "Value of the identifier, for matching purpose.",
+                "minLength": 1
+              }
+            }
+          }
+        }
+      }
+    },
+    "schema": {
+      "type": "string",
+      "description": "URI pointing to the validating security report schema.",
+      "pattern": "^https?://.+"
+    },
+    "version": {
+      "type": "string",
+      "description": "The version of the schema to which the JSON report conforms.",
+      "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"
+    },
+    "vulnerabilities": {
+      "type": "array",
+      "description": "Array of vulnerability objects.",
+      "items": {
+        "type": "object",
+        "description": "Describes the vulnerability using GitLab Flavored Markdown",
+        "required": [
+          "id",
+          "identifiers",
+          "location"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+            "examples": [
+              "642735a5-1425-428d-8d4e-3c854885a3c9"
+            ]
+          },
+          "name": {
+            "type": "string",
+            "maxLength": 255,
+            "description": "The name of the vulnerability. This must not include the finding's specific information."
+          },
+          "description": {
+            "type": "string",
+            "maxLength": 1048576,
+            "description": "A long text section describing the vulnerability more fully."
+          },
+          "severity": {
+            "type": "string",
+            "description": "How much the vulnerability impacts the software. Possible values are Info, Unknown, Low, Medium, High, or Critical. Note that some analyzers may not report all these possible values.",
+            "enum": [
+              "Info",
+              "Unknown",
+              "Low",
+              "Medium",
+              "High",
+              "Critical"
+            ]
+          },
+          "solution": {
+            "type": "string",
+            "maxLength": 7000,
+            "description": "Explanation of how to fix the vulnerability."
+          },
+          "identifiers": {
+            "type": "array",
+            "minItems": 1,
+            "description": "An ordered array of references that identify a vulnerability on internal or external databases. The first identifier is the Primary Identifier, which has special meaning.",
+            "items": {
+              "type": "object",
+              "required": [
+                "type",
+                "name",
+                "value"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                  "minLength": 1
+                },
+                "name": {
+                  "type": "string",
+                  "description": "Human-readable name of the identifier.",
+                  "minLength": 1
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the identifier's documentation.",
+                  "pattern": "^(https?|ftp)://.+"
+                },
+                "value": {
+                  "type": "string",
+                  "description": "Value of the identifier, for matching purpose.",
+                  "minLength": 1
+                }
+              }
+            }
+          },
+          "cvss_vectors": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 10,
+            "description": "An ordered array of CVSS vectors, each issued by a vendor to rate the vulnerability. The first item in the array is used as the primary CVSS vector, and is used to filter and sort the vulnerability.",
+            "items": {
+              "oneOf": [
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 16,
+                      "maxLength": 128,
+                      "pattern": "^((AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))/)*(AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 32,
+                      "maxLength": 128,
+                      "pattern": "^CVSS:3[.][01]/((AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])/)*(AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                }
+              ]
+            }
+          },
+          "links": {
+            "type": "array",
+            "description": "An array of references to external documentation or articles that describe the vulnerability.",
+            "items": {
+              "type": "object",
+              "required": [
+                "url"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "Name of the vulnerability details link."
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the vulnerability details document.",
+                  "pattern": "^(https?|ftp)://.+"
+                }
+              }
+            }
+          },
+          "details": {
+            "$ref": "#/definitions/named_list/properties/items"
+          },
+          "tracking": {
+            "type": "object",
+            "description": "Describes how this vulnerability should be tracked as the project changes.",
+            "oneOf": [
+              {
+                "description": "Declares that a series of items should be tracked using source-specific tracking methods.",
+                "required": [
+                  "items"
+                ],
+                "properties": {
+                  "type": {
+                    "const": "source"
+                  },
+                  "items": {
+                    "type": "array",
+                    "items": {
+                      "description": "An item that should be tracked using source-specific tracking methods.",
+                      "type": "object",
+                      "required": [
+                        "signatures"
+                      ],
+                      "properties": {
+                        "file": {
+                          "type": "string",
+                          "description": "Path to the file where the vulnerability is located."
+                        },
+                        "start_line": {
+                          "type": "number",
+                          "description": "The first line of the file that includes the vulnerability."
+                        },
+                        "end_line": {
+                          "type": "number",
+                          "description": "The last line of the file that includes the vulnerability."
+                        },
+                        "signatures": {
+                          "type": "array",
+                          "description": "An array of calculated tracking signatures for this tracking item.",
+                          "minItems": 1,
+                          "items": {
+                            "description": "A calculated tracking signature value and metadata.",
+                            "type": "object",
+                            "required": [
+                              "algorithm",
+                              "value"
+                            ],
+                            "properties": {
+                              "algorithm": {
+                                "type": "string",
+                                "description": "The algorithm used to generate the signature."
+                              },
+                              "value": {
+                                "type": "string",
+                                "description": "The result of this signature algorithm."
+                              }
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "Each tracking type must declare its own type."
+              }
+            }
+          },
+          "flags": {
+            "description": "Flags that can be attached to vulnerabilities.",
+            "type": "array",
+            "items": {
+              "type": "object",
+              "description": "Informational flags identified and assigned to a vulnerability.",
+              "required": [
+                "type",
+                "origin",
+                "description"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Result of the scan.",
+                  "enum": [
+                    "flagged-as-likely-false-positive"
+                  ]
+                },
+                "origin": {
+                  "minLength": 1,
+                  "description": "Tool that issued the flag.",
+                  "type": "string"
+                },
+                "description": {
+                  "minLength": 1,
+                  "description": "What the flag is about.",
+                  "type": "string"
+                }
+              }
+            }
+          },
+          "location": {
+            "type": "object",
+            "description": "Identifies the vulnerability's location.",
+            "required": [
+              "file",
+              "dependency"
+            ],
+            "properties": {
+              "file": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Path to the manifest or lock file where the dependency is declared (such as yarn.lock)."
+              },
+              "dependency": {
+                "type": "object",
+                "description": "Describes the dependency of a project where the vulnerability is located.",
+                "required": [
+                  "package",
+                  "version"
+                ],
+                "properties": {
+                  "package": {
+                    "type": "object",
+                    "description": "Provides information on the package where the vulnerability is located.",
+                    "required": [
+                      "name"
+                    ],
+                    "properties": {
+                      "name": {
+                        "type": "string",
+                        "description": "Name of the package where the vulnerability is located."
+                      }
+                    }
+                  },
+                  "version": {
+                    "type": "string",
+                    "description": "Version of the vulnerable package."
+                  },
+                  "direct": {
+                    "type": "boolean",
+                    "description": "Tells whether this is a direct, top-level dependency of the scanned project."
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "remediations": {
+      "type": "array",
+      "description": "An array of objects containing information on available remediations, along with patch diffs to apply.",
+      "items": {
+        "type": "object",
+        "required": [
+          "fixes",
+          "summary",
+          "diff"
+        ],
+        "properties": {
+          "fixes": {
+            "type": "array",
+            "description": "An array of strings that represent references to vulnerabilities fixed by this remediation.",
+            "items": {
+              "type": "object",
+              "required": [
+                "id"
+              ],
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+                  "examples": [
+                    "642735a5-1425-428d-8d4e-3c854885a3c9"
+                  ]
+                }
+              }
+            }
+          },
+          "summary": {
+            "type": "string",
+            "minLength": 1,
+            "description": "An overview of how the vulnerabilities were fixed."
+          },
+          "diff": {
+            "type": "string",
+            "minLength": 1,
+            "description": "A base64-encoded remediation code diff, compatible with git apply."
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/sast-report-format.json b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/sast-report-format.json
new file mode 100644
index 00000000000..24e403443aa
--- /dev/null
+++ b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/sast-report-format.json
@@ -0,0 +1,1095 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://gitlab.com/gitlab-org/security-products/security-report-schemas/-/raw/master/dist/sast-report-format.json",
+  "title": "Report format for GitLab SAST",
+  "description": "This schema provides the report format for Static Application Security Testing analyzers (https://docs.gitlab.com/ee/user/application_security/sast).",
+  "definitions": {
+    "detail_type": {
+      "oneOf": [
+        {
+          "$ref": "#/definitions/named_list"
+        },
+        {
+          "$ref": "#/definitions/list"
+        },
+        {
+          "$ref": "#/definitions/table"
+        },
+        {
+          "$ref": "#/definitions/text"
+        },
+        {
+          "$ref": "#/definitions/url"
+        },
+        {
+          "$ref": "#/definitions/code"
+        },
+        {
+          "$ref": "#/definitions/value"
+        },
+        {
+          "$ref": "#/definitions/diff"
+        },
+        {
+          "$ref": "#/definitions/markdown"
+        },
+        {
+          "$ref": "#/definitions/commit"
+        },
+        {
+          "$ref": "#/definitions/file_location"
+        },
+        {
+          "$ref": "#/definitions/module_location"
+        },
+        {
+          "$ref": "#/definitions/code_flows"
+        }
+      ]
+    },
+    "text_value": {
+      "type": "string"
+    },
+    "named_field": {
+      "type": "object",
+      "required": [
+        "name"
+      ],
+      "properties": {
+        "name": {
+          "$ref": "#/definitions/text_value",
+          "type": "string",
+          "minLength": 1
+        },
+        "description": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "named_list": {
+      "type": "object",
+      "description": "An object with named and typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "named-list"
+        },
+        "items": {
+          "type": "object",
+          "patternProperties": {
+            "^.*$": {
+              "allOf": [
+                {
+                  "$ref": "#/definitions/named_field"
+                },
+                {
+                  "$ref": "#/definitions/detail_type"
+                }
+              ]
+            }
+          }
+        }
+      }
+    },
+    "list": {
+      "type": "object",
+      "description": "A list of typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "list"
+        },
+        "items": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        }
+      }
+    },
+    "table": {
+      "type": "object",
+      "description": "A table of typed fields",
+      "required": [
+        "type",
+        "rows"
+      ],
+      "properties": {
+        "type": {
+          "const": "table"
+        },
+        "header": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        },
+        "rows": {
+          "type": "array",
+          "items": {
+            "type": "array",
+            "items": {
+              "$ref": "#/definitions/detail_type"
+            }
+          }
+        }
+      }
+    },
+    "text": {
+      "type": "object",
+      "description": "Raw text",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "text"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "url": {
+      "type": "object",
+      "description": "A single URL",
+      "required": [
+        "type",
+        "href"
+      ],
+      "properties": {
+        "type": {
+          "const": "url"
+        },
+        "text": {
+          "$ref": "#/definitions/text_value"
+        },
+        "href": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "http://mysite.com"
+          ]
+        }
+      }
+    },
+    "code": {
+      "type": "object",
+      "description": "A codeblock",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "code"
+        },
+        "value": {
+          "type": "string"
+        },
+        "lang": {
+          "type": "string",
+          "description": "A programming language"
+        }
+      }
+    },
+    "value": {
+      "type": "object",
+      "description": "A field that can store a range of types of value",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "value"
+        },
+        "value": {
+          "type": [
+            "number",
+            "string",
+            "boolean"
+          ]
+        }
+      }
+    },
+    "diff": {
+      "type": "object",
+      "description": "A diff",
+      "required": [
+        "type",
+        "before",
+        "after"
+      ],
+      "properties": {
+        "type": {
+          "const": "diff"
+        },
+        "before": {
+          "type": "string"
+        },
+        "after": {
+          "type": "string"
+        }
+      }
+    },
+    "markdown": {
+      "type": "object",
+      "description": "GitLab flavoured markdown, see https://docs.gitlab.com/ee/user/markdown.html",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "markdown"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value",
+          "examples": [
+            "Here is markdown `inline code` #1 [test](gitlab.com)\n\n![GitLab Logo](https://about.gitlab.com/images/press/logo/preview/gitlab-logo-white-preview.png)"
+          ]
+        }
+      }
+    },
+    "commit": {
+      "type": "object",
+      "description": "A commit/tag/branch within the GitLab project",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "commit"
+        },
+        "value": {
+          "type": "string",
+          "description": "The commit SHA",
+          "minLength": 1
+        }
+      }
+    },
+    "file_location": {
+      "type": "object",
+      "description": "A location within a file in the project",
+      "required": [
+        "type",
+        "file_name",
+        "line_start"
+      ],
+      "properties": {
+        "type": {
+          "const": "file-location"
+        },
+        "file_name": {
+          "type": "string",
+          "minLength": 1
+        },
+        "line_start": {
+          "type": "integer"
+        },
+        "line_end": {
+          "type": "integer"
+        }
+      }
+    },
+    "module_location": {
+      "type": "object",
+      "description": "A location within a binary module of the form module+relative_offset",
+      "required": [
+        "type",
+        "module_name",
+        "offset"
+      ],
+      "properties": {
+        "type": {
+          "const": "module-location"
+        },
+        "module_name": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "compiled_binary"
+          ]
+        },
+        "offset": {
+          "type": "integer",
+          "examples": [
+            100
+          ]
+        }
+      }
+    },
+    "code_flow_node": {
+      "type": "object",
+      "description": "A code flow node representing a part of a vulnerability flow from source to sink",
+      "required": [
+        "file_location",
+        "node_type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code-flow-node"
+        },
+        "file_location": {
+          "$ref": "#/definitions/file_location"
+        },
+        "node_type": {
+          "type": "string",
+          "description": "Describes a code flow node type",
+          "enum": [
+            "source",
+            "sink",
+            "propagation"
+          ]
+        }
+      },
+      "examples": [
+        {
+          "type": "code-flow-node",
+          "node_type": "propagation",
+          "file_location": {
+            "type": "file-location",
+            "file_name": "file_name.py",
+            "line_start": 4,
+            "line_end": 6
+          }
+        }
+      ]
+    },
+    "code_flows": {
+      "type": "object",
+      "description": "A code flow representing a vulnerability flow from source to sink",
+      "required": [
+        "items",
+        "type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code_flows"
+        },
+        "items": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 10,
+          "items": {
+            "type": "array",
+            "minItems": 1,
+            "items": {
+              "$ref": "#/definitions/code_flow_node"
+            }
+          }
+        }
+      },
+      "examples": [
+        {
+          "type": "code_flows",
+          "items": [
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 1,
+                  "line_end": 2
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "propagation",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 3
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ],
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "different_flow.py",
+                  "line_start": 100,
+                  "line_end": 102
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ]
+          ]
+        }
+      ]
+    }
+  },
+  "self": {
+    "version": "15.1.3"
+  },
+  "type": "object",
+  "required": [
+    "scan",
+    "version",
+    "vulnerabilities"
+  ],
+  "additionalProperties": true,
+  "properties": {
+    "scan": {
+      "type": "object",
+      "required": [
+        "analyzer",
+        "end_time",
+        "scanner",
+        "start_time",
+        "status",
+        "type"
+      ],
+      "properties": {
+        "end_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan finished.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-01-28T03:26:02"
+          ]
+        },
+        "messages": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "Communication intended for the initiator of a scan.",
+            "required": [
+              "level",
+              "value"
+            ],
+            "properties": {
+              "level": {
+                "type": "string",
+                "description": "Describes the severity of the communication. Use info to communicate normal scan behaviour; warn to communicate a potentially recoverable problem, or a partial error; fatal to communicate an issue that causes the scan to halt.",
+                "enum": [
+                  "info",
+                  "warn",
+                  "fatal"
+                ],
+                "examples": [
+                  "info"
+                ]
+              },
+              "value": {
+                "type": "string",
+                "description": "The message to communicate.",
+                "minLength": 1,
+                "examples": [
+                  "Permission denied, scanning aborted"
+                ]
+              }
+            }
+          }
+        },
+        "options": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "A configuration option used for this scan.",
+            "required": [
+              "name",
+              "value"
+            ],
+            "properties": {
+              "name": {
+                "type": "string",
+                "description": "The configuration option name.",
+                "maxLength": 255,
+                "minLength": 1,
+                "examples": [
+                  "DAST_FF_ENABLE_BAS",
+                  "DOCKER_TLS_CERTDIR",
+                  "DS_MAX_DEPTH",
+                  "SECURE_LOG_LEVEL"
+                ]
+              },
+              "source": {
+                "type": "string",
+                "description": "The source of this option.",
+                "enum": [
+                  "argument",
+                  "file",
+                  "env_variable",
+                  "other"
+                ]
+              },
+              "value": {
+                "type": [
+                  "boolean",
+                  "integer",
+                  "null",
+                  "string"
+                ],
+                "description": "The value used for this scan.",
+                "examples": [
+                  true,
+                  2,
+                  null,
+                  "fatal",
+                  ""
+                ]
+              }
+            }
+          }
+        },
+        "analyzer": {
+          "type": "object",
+          "description": "Object defining the analyzer used to perform the scan. Analyzers typically delegate to an underlying scanner to run the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "gitlab-dast"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the analyzer, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "GitLab DAST"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "pattern": "^https?://.+",
+              "description": "A link to more information about the analyzer.",
+              "examples": [
+                "https://docs.gitlab.com/ee/user/application_security/dast"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the analyzer.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            }
+          }
+        },
+        "scanner": {
+          "type": "object",
+          "description": "Object defining the scanner used to perform the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the scanner.",
+              "minLength": 1,
+              "examples": [
+                "my-sast-scanner"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the scanner, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "My SAST Scanner"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "description": "A link to more information about the scanner.",
+              "examples": [
+                "https://scanner.url"
+              ]
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the scanner.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the scanner.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "start_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan started.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-02-14T16:01:59"
+          ]
+        },
+        "status": {
+          "type": "string",
+          "description": "Result of the scan.",
+          "enum": [
+            "success",
+            "failure"
+          ]
+        },
+        "type": {
+          "type": "string",
+          "description": "Type of the scan.",
+          "enum": [
+            "sast"
+          ]
+        },
+        "primary_identifiers": {
+          "type": "array",
+          "description": "An unordered array containing an exhaustive list of primary identifiers for which the analyzer may return results",
+          "items": {
+            "type": "object",
+            "required": [
+              "type",
+              "name",
+              "value"
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                "minLength": 1
+              },
+              "name": {
+                "type": "string",
+                "description": "Human-readable name of the identifier.",
+                "minLength": 1
+              },
+              "url": {
+                "type": "string",
+                "description": "URL of the identifier's documentation.",
+                "pattern": "^(https?|ftp)://.+"
+              },
+              "value": {
+                "type": "string",
+                "description": "Value of the identifier, for matching purpose.",
+                "minLength": 1
+              }
+            }
+          }
+        }
+      }
+    },
+    "schema": {
+      "type": "string",
+      "description": "URI pointing to the validating security report schema.",
+      "pattern": "^https?://.+"
+    },
+    "version": {
+      "type": "string",
+      "description": "The version of the schema to which the JSON report conforms.",
+      "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"
+    },
+    "vulnerabilities": {
+      "type": "array",
+      "description": "Array of vulnerability objects.",
+      "items": {
+        "type": "object",
+        "description": "Describes the vulnerability using GitLab Flavored Markdown",
+        "required": [
+          "id",
+          "identifiers",
+          "location"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+            "examples": [
+              "642735a5-1425-428d-8d4e-3c854885a3c9"
+            ]
+          },
+          "name": {
+            "type": "string",
+            "maxLength": 255,
+            "description": "The name of the vulnerability. This must not include the finding's specific information."
+          },
+          "description": {
+            "type": "string",
+            "maxLength": 1048576,
+            "description": "A long text section describing the vulnerability more fully."
+          },
+          "severity": {
+            "type": "string",
+            "description": "How much the vulnerability impacts the software. Possible values are Info, Unknown, Low, Medium, High, or Critical. Note that some analyzers may not report all these possible values.",
+            "enum": [
+              "Info",
+              "Unknown",
+              "Low",
+              "Medium",
+              "High",
+              "Critical"
+            ]
+          },
+          "solution": {
+            "type": "string",
+            "maxLength": 7000,
+            "description": "Explanation of how to fix the vulnerability."
+          },
+          "identifiers": {
+            "type": "array",
+            "minItems": 1,
+            "description": "An ordered array of references that identify a vulnerability on internal or external databases. The first identifier is the Primary Identifier, which has special meaning.",
+            "items": {
+              "type": "object",
+              "required": [
+                "type",
+                "name",
+                "value"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                  "minLength": 1
+                },
+                "name": {
+                  "type": "string",
+                  "description": "Human-readable name of the identifier.",
+                  "minLength": 1
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the identifier's documentation.",
+                  "pattern": "^(https?|ftp)://.+"
+                },
+                "value": {
+                  "type": "string",
+                  "description": "Value of the identifier, for matching purpose.",
+                  "minLength": 1
+                }
+              }
+            }
+          },
+          "cvss_vectors": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 10,
+            "description": "An ordered array of CVSS vectors, each issued by a vendor to rate the vulnerability. The first item in the array is used as the primary CVSS vector, and is used to filter and sort the vulnerability.",
+            "items": {
+              "oneOf": [
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 16,
+                      "maxLength": 128,
+                      "pattern": "^((AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))/)*(AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 32,
+                      "maxLength": 128,
+                      "pattern": "^CVSS:3[.][01]/((AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])/)*(AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                }
+              ]
+            }
+          },
+          "links": {
+            "type": "array",
+            "description": "An array of references to external documentation or articles that describe the vulnerability.",
+            "items": {
+              "type": "object",
+              "required": [
+                "url"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "Name of the vulnerability details link."
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the vulnerability details document.",
+                  "pattern": "^(https?|ftp)://.+"
+                }
+              }
+            }
+          },
+          "details": {
+            "$ref": "#/definitions/named_list/properties/items"
+          },
+          "tracking": {
+            "type": "object",
+            "description": "Describes how this vulnerability should be tracked as the project changes.",
+            "oneOf": [
+              {
+                "description": "Declares that a series of items should be tracked using source-specific tracking methods.",
+                "required": [
+                  "items"
+                ],
+                "properties": {
+                  "type": {
+                    "const": "source"
+                  },
+                  "items": {
+                    "type": "array",
+                    "items": {
+                      "description": "An item that should be tracked using source-specific tracking methods.",
+                      "type": "object",
+                      "required": [
+                        "signatures"
+                      ],
+                      "properties": {
+                        "file": {
+                          "type": "string",
+                          "description": "Path to the file where the vulnerability is located."
+                        },
+                        "start_line": {
+                          "type": "number",
+                          "description": "The first line of the file that includes the vulnerability."
+                        },
+                        "end_line": {
+                          "type": "number",
+                          "description": "The last line of the file that includes the vulnerability."
+                        },
+                        "signatures": {
+                          "type": "array",
+                          "description": "An array of calculated tracking signatures for this tracking item.",
+                          "minItems": 1,
+                          "items": {
+                            "description": "A calculated tracking signature value and metadata.",
+                            "type": "object",
+                            "required": [
+                              "algorithm",
+                              "value"
+                            ],
+                            "properties": {
+                              "algorithm": {
+                                "type": "string",
+                                "description": "The algorithm used to generate the signature."
+                              },
+                              "value": {
+                                "type": "string",
+                                "description": "The result of this signature algorithm."
+                              }
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "Each tracking type must declare its own type."
+              }
+            }
+          },
+          "flags": {
+            "description": "Flags that can be attached to vulnerabilities.",
+            "type": "array",
+            "items": {
+              "type": "object",
+              "description": "Informational flags identified and assigned to a vulnerability.",
+              "required": [
+                "type",
+                "origin",
+                "description"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Result of the scan.",
+                  "enum": [
+                    "flagged-as-likely-false-positive"
+                  ]
+                },
+                "origin": {
+                  "minLength": 1,
+                  "description": "Tool that issued the flag.",
+                  "type": "string"
+                },
+                "description": {
+                  "minLength": 1,
+                  "description": "What the flag is about.",
+                  "type": "string"
+                }
+              }
+            }
+          },
+          "location": {
+            "type": "object",
+            "description": "Identifies the vulnerability's location.",
+            "properties": {
+              "file": {
+                "type": "string",
+                "description": "Path to the file where the vulnerability is located."
+              },
+              "start_line": {
+                "type": "number",
+                "description": "The first line of the code affected by the vulnerability."
+              },
+              "end_line": {
+                "type": "number",
+                "description": "The last line of the code affected by the vulnerability."
+              },
+              "class": {
+                "type": "string",
+                "description": "Provides the name of the class where the vulnerability is located."
+              },
+              "method": {
+                "type": "string",
+                "description": "Provides the name of the method where the vulnerability is located."
+              }
+            }
+          },
+          "raw_source_code_extract": {
+            "type": "string",
+            "description": "Provides an unsanitized excerpt of the affected source code."
+          }
+        }
+      }
+    },
+    "remediations": {
+      "type": "array",
+      "description": "An array of objects containing information on available remediations, along with patch diffs to apply.",
+      "items": {
+        "type": "object",
+        "required": [
+          "fixes",
+          "summary",
+          "diff"
+        ],
+        "properties": {
+          "fixes": {
+            "type": "array",
+            "description": "An array of strings that represent references to vulnerabilities fixed by this remediation.",
+            "items": {
+              "type": "object",
+              "required": [
+                "id"
+              ],
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+                  "examples": [
+                    "642735a5-1425-428d-8d4e-3c854885a3c9"
+                  ]
+                }
+              }
+            }
+          },
+          "summary": {
+            "type": "string",
+            "minLength": 1,
+            "description": "An overview of how the vulnerabilities were fixed."
+          },
+          "diff": {
+            "type": "string",
+            "minLength": 1,
+            "description": "A base64-encoded remediation code diff, compatible with git apply."
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/secret-detection-report-format.json b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/secret-detection-report-format.json
new file mode 100644
index 00000000000..619fa1e3c09
--- /dev/null
+++ b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.3/secret-detection-report-format.json
@@ -0,0 +1,1119 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://gitlab.com/gitlab-org/security-products/security-report-schemas/-/raw/master/dist/secret-detection-report-format.json",
+  "title": "Report format for GitLab Secret Detection",
+  "description": "This schema provides the the report format for the Secret Detection analyzer (https://docs.gitlab.com/ee/user/application_security/secret_detection)",
+  "definitions": {
+    "detail_type": {
+      "oneOf": [
+        {
+          "$ref": "#/definitions/named_list"
+        },
+        {
+          "$ref": "#/definitions/list"
+        },
+        {
+          "$ref": "#/definitions/table"
+        },
+        {
+          "$ref": "#/definitions/text"
+        },
+        {
+          "$ref": "#/definitions/url"
+        },
+        {
+          "$ref": "#/definitions/code"
+        },
+        {
+          "$ref": "#/definitions/value"
+        },
+        {
+          "$ref": "#/definitions/diff"
+        },
+        {
+          "$ref": "#/definitions/markdown"
+        },
+        {
+          "$ref": "#/definitions/commit"
+        },
+        {
+          "$ref": "#/definitions/file_location"
+        },
+        {
+          "$ref": "#/definitions/module_location"
+        },
+        {
+          "$ref": "#/definitions/code_flows"
+        }
+      ]
+    },
+    "text_value": {
+      "type": "string"
+    },
+    "named_field": {
+      "type": "object",
+      "required": [
+        "name"
+      ],
+      "properties": {
+        "name": {
+          "$ref": "#/definitions/text_value",
+          "type": "string",
+          "minLength": 1
+        },
+        "description": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "named_list": {
+      "type": "object",
+      "description": "An object with named and typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "named-list"
+        },
+        "items": {
+          "type": "object",
+          "patternProperties": {
+            "^.*$": {
+              "allOf": [
+                {
+                  "$ref": "#/definitions/named_field"
+                },
+                {
+                  "$ref": "#/definitions/detail_type"
+                }
+              ]
+            }
+          }
+        }
+      }
+    },
+    "list": {
+      "type": "object",
+      "description": "A list of typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "list"
+        },
+        "items": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        }
+      }
+    },
+    "table": {
+      "type": "object",
+      "description": "A table of typed fields",
+      "required": [
+        "type",
+        "rows"
+      ],
+      "properties": {
+        "type": {
+          "const": "table"
+        },
+        "header": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        },
+        "rows": {
+          "type": "array",
+          "items": {
+            "type": "array",
+            "items": {
+              "$ref": "#/definitions/detail_type"
+            }
+          }
+        }
+      }
+    },
+    "text": {
+      "type": "object",
+      "description": "Raw text",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "text"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "url": {
+      "type": "object",
+      "description": "A single URL",
+      "required": [
+        "type",
+        "href"
+      ],
+      "properties": {
+        "type": {
+          "const": "url"
+        },
+        "text": {
+          "$ref": "#/definitions/text_value"
+        },
+        "href": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "http://mysite.com"
+          ]
+        }
+      }
+    },
+    "code": {
+      "type": "object",
+      "description": "A codeblock",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "code"
+        },
+        "value": {
+          "type": "string"
+        },
+        "lang": {
+          "type": "string",
+          "description": "A programming language"
+        }
+      }
+    },
+    "value": {
+      "type": "object",
+      "description": "A field that can store a range of types of value",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "value"
+        },
+        "value": {
+          "type": [
+            "number",
+            "string",
+            "boolean"
+          ]
+        }
+      }
+    },
+    "diff": {
+      "type": "object",
+      "description": "A diff",
+      "required": [
+        "type",
+        "before",
+        "after"
+      ],
+      "properties": {
+        "type": {
+          "const": "diff"
+        },
+        "before": {
+          "type": "string"
+        },
+        "after": {
+          "type": "string"
+        }
+      }
+    },
+    "markdown": {
+      "type": "object",
+      "description": "GitLab flavoured markdown, see https://docs.gitlab.com/ee/user/markdown.html",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "markdown"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value",
+          "examples": [
+            "Here is markdown `inline code` #1 [test](gitlab.com)\n\n![GitLab Logo](https://about.gitlab.com/images/press/logo/preview/gitlab-logo-white-preview.png)"
+          ]
+        }
+      }
+    },
+    "commit": {
+      "type": "object",
+      "description": "A commit/tag/branch within the GitLab project",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "commit"
+        },
+        "value": {
+          "type": "string",
+          "description": "The commit SHA",
+          "minLength": 1
+        }
+      }
+    },
+    "file_location": {
+      "type": "object",
+      "description": "A location within a file in the project",
+      "required": [
+        "type",
+        "file_name",
+        "line_start"
+      ],
+      "properties": {
+        "type": {
+          "const": "file-location"
+        },
+        "file_name": {
+          "type": "string",
+          "minLength": 1
+        },
+        "line_start": {
+          "type": "integer"
+        },
+        "line_end": {
+          "type": "integer"
+        }
+      }
+    },
+    "module_location": {
+      "type": "object",
+      "description": "A location within a binary module of the form module+relative_offset",
+      "required": [
+        "type",
+        "module_name",
+        "offset"
+      ],
+      "properties": {
+        "type": {
+          "const": "module-location"
+        },
+        "module_name": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "compiled_binary"
+          ]
+        },
+        "offset": {
+          "type": "integer",
+          "examples": [
+            100
+          ]
+        }
+      }
+    },
+    "code_flow_node": {
+      "type": "object",
+      "description": "A code flow node representing a part of a vulnerability flow from source to sink",
+      "required": [
+        "file_location",
+        "node_type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code-flow-node"
+        },
+        "file_location": {
+          "$ref": "#/definitions/file_location"
+        },
+        "node_type": {
+          "type": "string",
+          "description": "Describes a code flow node type",
+          "enum": [
+            "source",
+            "sink",
+            "propagation"
+          ]
+        }
+      },
+      "examples": [
+        {
+          "type": "code-flow-node",
+          "node_type": "propagation",
+          "file_location": {
+            "type": "file-location",
+            "file_name": "file_name.py",
+            "line_start": 4,
+            "line_end": 6
+          }
+        }
+      ]
+    },
+    "code_flows": {
+      "type": "object",
+      "description": "A code flow representing a vulnerability flow from source to sink",
+      "required": [
+        "items",
+        "type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code_flows"
+        },
+        "items": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 10,
+          "items": {
+            "type": "array",
+            "minItems": 1,
+            "items": {
+              "$ref": "#/definitions/code_flow_node"
+            }
+          }
+        }
+      },
+      "examples": [
+        {
+          "type": "code_flows",
+          "items": [
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 1,
+                  "line_end": 2
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "propagation",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 3
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ],
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "different_flow.py",
+                  "line_start": 100,
+                  "line_end": 102
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ]
+          ]
+        }
+      ]
+    }
+  },
+  "self": {
+    "version": "15.1.3"
+  },
+  "type": "object",
+  "required": [
+    "scan",
+    "version",
+    "vulnerabilities"
+  ],
+  "additionalProperties": true,
+  "properties": {
+    "scan": {
+      "type": "object",
+      "required": [
+        "analyzer",
+        "end_time",
+        "scanner",
+        "start_time",
+        "status",
+        "type"
+      ],
+      "properties": {
+        "end_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan finished.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-01-28T03:26:02"
+          ]
+        },
+        "messages": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "Communication intended for the initiator of a scan.",
+            "required": [
+              "level",
+              "value"
+            ],
+            "properties": {
+              "level": {
+                "type": "string",
+                "description": "Describes the severity of the communication. Use info to communicate normal scan behaviour; warn to communicate a potentially recoverable problem, or a partial error; fatal to communicate an issue that causes the scan to halt.",
+                "enum": [
+                  "info",
+                  "warn",
+                  "fatal"
+                ],
+                "examples": [
+                  "info"
+                ]
+              },
+              "value": {
+                "type": "string",
+                "description": "The message to communicate.",
+                "minLength": 1,
+                "examples": [
+                  "Permission denied, scanning aborted"
+                ]
+              }
+            }
+          }
+        },
+        "options": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "A configuration option used for this scan.",
+            "required": [
+              "name",
+              "value"
+            ],
+            "properties": {
+              "name": {
+                "type": "string",
+                "description": "The configuration option name.",
+                "maxLength": 255,
+                "minLength": 1,
+                "examples": [
+                  "DAST_FF_ENABLE_BAS",
+                  "DOCKER_TLS_CERTDIR",
+                  "DS_MAX_DEPTH",
+                  "SECURE_LOG_LEVEL"
+                ]
+              },
+              "source": {
+                "type": "string",
+                "description": "The source of this option.",
+                "enum": [
+                  "argument",
+                  "file",
+                  "env_variable",
+                  "other"
+                ]
+              },
+              "value": {
+                "type": [
+                  "boolean",
+                  "integer",
+                  "null",
+                  "string"
+                ],
+                "description": "The value used for this scan.",
+                "examples": [
+                  true,
+                  2,
+                  null,
+                  "fatal",
+                  ""
+                ]
+              }
+            }
+          }
+        },
+        "analyzer": {
+          "type": "object",
+          "description": "Object defining the analyzer used to perform the scan. Analyzers typically delegate to an underlying scanner to run the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "gitlab-dast"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the analyzer, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "GitLab DAST"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "pattern": "^https?://.+",
+              "description": "A link to more information about the analyzer.",
+              "examples": [
+                "https://docs.gitlab.com/ee/user/application_security/dast"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the analyzer.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            }
+          }
+        },
+        "scanner": {
+          "type": "object",
+          "description": "Object defining the scanner used to perform the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the scanner.",
+              "minLength": 1,
+              "examples": [
+                "my-sast-scanner"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the scanner, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "My SAST Scanner"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "description": "A link to more information about the scanner.",
+              "examples": [
+                "https://scanner.url"
+              ]
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the scanner.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the scanner.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "start_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan started.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-02-14T16:01:59"
+          ]
+        },
+        "status": {
+          "type": "string",
+          "description": "Result of the scan.",
+          "enum": [
+            "success",
+            "failure"
+          ]
+        },
+        "type": {
+          "type": "string",
+          "description": "Type of the scan.",
+          "enum": [
+            "secret_detection"
+          ]
+        },
+        "primary_identifiers": {
+          "type": "array",
+          "description": "An unordered array containing an exhaustive list of primary identifiers for which the analyzer may return results",
+          "items": {
+            "type": "object",
+            "required": [
+              "type",
+              "name",
+              "value"
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                "minLength": 1
+              },
+              "name": {
+                "type": "string",
+                "description": "Human-readable name of the identifier.",
+                "minLength": 1
+              },
+              "url": {
+                "type": "string",
+                "description": "URL of the identifier's documentation.",
+                "pattern": "^(https?|ftp)://.+"
+              },
+              "value": {
+                "type": "string",
+                "description": "Value of the identifier, for matching purpose.",
+                "minLength": 1
+              }
+            }
+          }
+        }
+      }
+    },
+    "schema": {
+      "type": "string",
+      "description": "URI pointing to the validating security report schema.",
+      "pattern": "^https?://.+"
+    },
+    "version": {
+      "type": "string",
+      "description": "The version of the schema to which the JSON report conforms.",
+      "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"
+    },
+    "vulnerabilities": {
+      "type": "array",
+      "description": "Array of vulnerability objects.",
+      "items": {
+        "type": "object",
+        "description": "Describes the vulnerability using GitLab Flavored Markdown",
+        "required": [
+          "id",
+          "identifiers",
+          "location"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+            "examples": [
+              "642735a5-1425-428d-8d4e-3c854885a3c9"
+            ]
+          },
+          "name": {
+            "type": "string",
+            "maxLength": 255,
+            "description": "The name of the vulnerability. This must not include the finding's specific information."
+          },
+          "description": {
+            "type": "string",
+            "maxLength": 1048576,
+            "description": "A long text section describing the vulnerability more fully."
+          },
+          "severity": {
+            "type": "string",
+            "description": "How much the vulnerability impacts the software. Possible values are Info, Unknown, Low, Medium, High, or Critical. Note that some analyzers may not report all these possible values.",
+            "enum": [
+              "Info",
+              "Unknown",
+              "Low",
+              "Medium",
+              "High",
+              "Critical"
+            ]
+          },
+          "solution": {
+            "type": "string",
+            "maxLength": 7000,
+            "description": "Explanation of how to fix the vulnerability."
+          },
+          "identifiers": {
+            "type": "array",
+            "minItems": 1,
+            "description": "An ordered array of references that identify a vulnerability on internal or external databases. The first identifier is the Primary Identifier, which has special meaning.",
+            "items": {
+              "type": "object",
+              "required": [
+                "type",
+                "name",
+                "value"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                  "minLength": 1
+                },
+                "name": {
+                  "type": "string",
+                  "description": "Human-readable name of the identifier.",
+                  "minLength": 1
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the identifier's documentation.",
+                  "pattern": "^(https?|ftp)://.+"
+                },
+                "value": {
+                  "type": "string",
+                  "description": "Value of the identifier, for matching purpose.",
+                  "minLength": 1
+                }
+              }
+            }
+          },
+          "cvss_vectors": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 10,
+            "description": "An ordered array of CVSS vectors, each issued by a vendor to rate the vulnerability. The first item in the array is used as the primary CVSS vector, and is used to filter and sort the vulnerability.",
+            "items": {
+              "oneOf": [
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 16,
+                      "maxLength": 128,
+                      "pattern": "^((AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))/)*(AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 32,
+                      "maxLength": 128,
+                      "pattern": "^CVSS:3[.][01]/((AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])/)*(AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                }
+              ]
+            }
+          },
+          "links": {
+            "type": "array",
+            "description": "An array of references to external documentation or articles that describe the vulnerability.",
+            "items": {
+              "type": "object",
+              "required": [
+                "url"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "Name of the vulnerability details link."
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the vulnerability details document.",
+                  "pattern": "^(https?|ftp)://.+"
+                }
+              }
+            }
+          },
+          "details": {
+            "$ref": "#/definitions/named_list/properties/items"
+          },
+          "tracking": {
+            "type": "object",
+            "description": "Describes how this vulnerability should be tracked as the project changes.",
+            "oneOf": [
+              {
+                "description": "Declares that a series of items should be tracked using source-specific tracking methods.",
+                "required": [
+                  "items"
+                ],
+                "properties": {
+                  "type": {
+                    "const": "source"
+                  },
+                  "items": {
+                    "type": "array",
+                    "items": {
+                      "description": "An item that should be tracked using source-specific tracking methods.",
+                      "type": "object",
+                      "required": [
+                        "signatures"
+                      ],
+                      "properties": {
+                        "file": {
+                          "type": "string",
+                          "description": "Path to the file where the vulnerability is located."
+                        },
+                        "start_line": {
+                          "type": "number",
+                          "description": "The first line of the file that includes the vulnerability."
+                        },
+                        "end_line": {
+                          "type": "number",
+                          "description": "The last line of the file that includes the vulnerability."
+                        },
+                        "signatures": {
+                          "type": "array",
+                          "description": "An array of calculated tracking signatures for this tracking item.",
+                          "minItems": 1,
+                          "items": {
+                            "description": "A calculated tracking signature value and metadata.",
+                            "type": "object",
+                            "required": [
+                              "algorithm",
+                              "value"
+                            ],
+                            "properties": {
+                              "algorithm": {
+                                "type": "string",
+                                "description": "The algorithm used to generate the signature."
+                              },
+                              "value": {
+                                "type": "string",
+                                "description": "The result of this signature algorithm."
+                              }
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "Each tracking type must declare its own type."
+              }
+            }
+          },
+          "flags": {
+            "description": "Flags that can be attached to vulnerabilities.",
+            "type": "array",
+            "items": {
+              "type": "object",
+              "description": "Informational flags identified and assigned to a vulnerability.",
+              "required": [
+                "type",
+                "origin",
+                "description"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Result of the scan.",
+                  "enum": [
+                    "flagged-as-likely-false-positive"
+                  ]
+                },
+                "origin": {
+                  "minLength": 1,
+                  "description": "Tool that issued the flag.",
+                  "type": "string"
+                },
+                "description": {
+                  "minLength": 1,
+                  "description": "What the flag is about.",
+                  "type": "string"
+                }
+              }
+            }
+          },
+          "location": {
+            "required": [
+              "commit"
+            ],
+            "type": "object",
+            "properties": {
+              "file": {
+                "type": "string",
+                "description": "Path to the file where the vulnerability is located"
+              },
+              "commit": {
+                "type": "object",
+                "description": "Represents the commit in which the vulnerability was detected",
+                "required": [
+                  "sha"
+                ],
+                "properties": {
+                  "author": {
+                    "type": "string"
+                  },
+                  "date": {
+                    "type": "string"
+                  },
+                  "message": {
+                    "type": "string"
+                  },
+                  "sha": {
+                    "type": "string",
+                    "minLength": 1
+                  }
+                }
+              },
+              "start_line": {
+                "type": "number",
+                "description": "The first line of the code affected by the vulnerability"
+              },
+              "end_line": {
+                "type": "number",
+                "description": "The last line of the code affected by the vulnerability"
+              },
+              "class": {
+                "type": "string",
+                "description": "Provides the name of the class where the vulnerability is located"
+              },
+              "method": {
+                "type": "string",
+                "description": "Provides the name of the method where the vulnerability is located"
+              }
+            }
+          },
+          "raw_source_code_extract": {
+            "type": "string",
+            "description": "Provides an unsanitized excerpt of the affected source code."
+          }
+        }
+      }
+    },
+    "remediations": {
+      "type": "array",
+      "description": "An array of objects containing information on available remediations, along with patch diffs to apply.",
+      "items": {
+        "type": "object",
+        "required": [
+          "fixes",
+          "summary",
+          "diff"
+        ],
+        "properties": {
+          "fixes": {
+            "type": "array",
+            "description": "An array of strings that represent references to vulnerabilities fixed by this remediation.",
+            "items": {
+              "type": "object",
+              "required": [
+                "id"
+              ],
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+                  "examples": [
+                    "642735a5-1425-428d-8d4e-3c854885a3c9"
+                  ]
+                }
+              }
+            }
+          },
+          "summary": {
+            "type": "string",
+            "minLength": 1,
+            "description": "An overview of how the vulnerabilities were fixed."
+          },
+          "diff": {
+            "type": "string",
+            "minLength": 1,
+            "description": "A base64-encoded remediation code diff, compatible with git apply."
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/cluster-image-scanning-report-format.json b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/cluster-image-scanning-report-format.json
new file mode 100644
index 00000000000..24b98328fff
--- /dev/null
+++ b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/cluster-image-scanning-report-format.json
@@ -0,0 +1,1190 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://gitlab.com/gitlab-org/security-products/security-report-schemas/-/raw/master/dist/cluster-image-scanning-report-format.json",
+  "title": "Report format for GitLab Cluster Image Scanning",
+  "description": "This schema provides the the report format for Cluster Image Scanning (https://docs.gitlab.com/ee/user/application_security/cluster_image_scanning/).",
+  "definitions": {
+    "detail_type": {
+      "oneOf": [
+        {
+          "$ref": "#/definitions/named_list"
+        },
+        {
+          "$ref": "#/definitions/list"
+        },
+        {
+          "$ref": "#/definitions/table"
+        },
+        {
+          "$ref": "#/definitions/text"
+        },
+        {
+          "$ref": "#/definitions/url"
+        },
+        {
+          "$ref": "#/definitions/code"
+        },
+        {
+          "$ref": "#/definitions/value"
+        },
+        {
+          "$ref": "#/definitions/diff"
+        },
+        {
+          "$ref": "#/definitions/markdown"
+        },
+        {
+          "$ref": "#/definitions/commit"
+        },
+        {
+          "$ref": "#/definitions/file_location"
+        },
+        {
+          "$ref": "#/definitions/module_location"
+        },
+        {
+          "$ref": "#/definitions/code_flows"
+        }
+      ]
+    },
+    "text_value": {
+      "type": "string"
+    },
+    "named_field": {
+      "type": "object",
+      "required": [
+        "name"
+      ],
+      "properties": {
+        "name": {
+          "$ref": "#/definitions/text_value",
+          "type": "string",
+          "minLength": 1
+        },
+        "description": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "named_list": {
+      "type": "object",
+      "description": "An object with named and typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "named-list"
+        },
+        "items": {
+          "type": "object",
+          "patternProperties": {
+            "^.*$": {
+              "allOf": [
+                {
+                  "$ref": "#/definitions/named_field"
+                },
+                {
+                  "$ref": "#/definitions/detail_type"
+                }
+              ]
+            }
+          }
+        }
+      }
+    },
+    "list": {
+      "type": "object",
+      "description": "A list of typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "list"
+        },
+        "items": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        }
+      }
+    },
+    "table": {
+      "type": "object",
+      "description": "A table of typed fields",
+      "required": [
+        "type",
+        "rows"
+      ],
+      "properties": {
+        "type": {
+          "const": "table"
+        },
+        "header": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        },
+        "rows": {
+          "type": "array",
+          "items": {
+            "type": "array",
+            "items": {
+              "$ref": "#/definitions/detail_type"
+            }
+          }
+        }
+      }
+    },
+    "text": {
+      "type": "object",
+      "description": "Raw text",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "text"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "url": {
+      "type": "object",
+      "description": "A single URL",
+      "required": [
+        "type",
+        "href"
+      ],
+      "properties": {
+        "type": {
+          "const": "url"
+        },
+        "text": {
+          "$ref": "#/definitions/text_value"
+        },
+        "href": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "http://mysite.com"
+          ]
+        }
+      }
+    },
+    "code": {
+      "type": "object",
+      "description": "A codeblock",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "code"
+        },
+        "value": {
+          "type": "string"
+        },
+        "lang": {
+          "type": "string",
+          "description": "A programming language"
+        }
+      }
+    },
+    "value": {
+      "type": "object",
+      "description": "A field that can store a range of types of value",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "value"
+        },
+        "value": {
+          "type": [
+            "number",
+            "string",
+            "boolean"
+          ]
+        }
+      }
+    },
+    "diff": {
+      "type": "object",
+      "description": "A diff",
+      "required": [
+        "type",
+        "before",
+        "after"
+      ],
+      "properties": {
+        "type": {
+          "const": "diff"
+        },
+        "before": {
+          "type": "string"
+        },
+        "after": {
+          "type": "string"
+        }
+      }
+    },
+    "markdown": {
+      "type": "object",
+      "description": "GitLab flavoured markdown, see https://docs.gitlab.com/ee/user/markdown.html",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "markdown"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value",
+          "examples": [
+            "Here is markdown `inline code` #1 [test](gitlab.com)\n\n![GitLab Logo](https://about.gitlab.com/images/press/logo/preview/gitlab-logo-white-preview.png)"
+          ]
+        }
+      }
+    },
+    "commit": {
+      "type": "object",
+      "description": "A commit/tag/branch within the GitLab project",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "commit"
+        },
+        "value": {
+          "type": "string",
+          "description": "The commit SHA",
+          "minLength": 1
+        }
+      }
+    },
+    "file_location": {
+      "type": "object",
+      "description": "A location within a file in the project",
+      "required": [
+        "type",
+        "file_name",
+        "line_start"
+      ],
+      "properties": {
+        "type": {
+          "const": "file-location"
+        },
+        "file_name": {
+          "type": "string",
+          "minLength": 1
+        },
+        "line_start": {
+          "type": "integer"
+        },
+        "line_end": {
+          "type": "integer"
+        }
+      }
+    },
+    "module_location": {
+      "type": "object",
+      "description": "A location within a binary module of the form module+relative_offset",
+      "required": [
+        "type",
+        "module_name",
+        "offset"
+      ],
+      "properties": {
+        "type": {
+          "const": "module-location"
+        },
+        "module_name": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "compiled_binary"
+          ]
+        },
+        "offset": {
+          "type": "integer",
+          "examples": [
+            100
+          ]
+        }
+      }
+    },
+    "code_flow_node": {
+      "type": "object",
+      "description": "A code flow node representing a part of a vulnerability flow from source to sink",
+      "required": [
+        "file_location",
+        "node_type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code-flow-node"
+        },
+        "file_location": {
+          "$ref": "#/definitions/file_location"
+        },
+        "node_type": {
+          "type": "string",
+          "description": "Describes a code flow node type",
+          "enum": [
+            "source",
+            "sink",
+            "propagation"
+          ]
+        }
+      },
+      "examples": [
+        {
+          "type": "code-flow-node",
+          "node_type": "propagation",
+          "file_location": {
+            "type": "file-location",
+            "file_name": "file_name.py",
+            "line_start": 4,
+            "line_end": 6
+          }
+        }
+      ]
+    },
+    "code_flows": {
+      "type": "object",
+      "description": "A code flow representing a vulnerability flow from source to sink",
+      "required": [
+        "items",
+        "type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code-flows"
+        },
+        "items": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 10,
+          "items": {
+            "type": "array",
+            "minItems": 1,
+            "items": {
+              "$ref": "#/definitions/code_flow_node"
+            }
+          }
+        }
+      },
+      "examples": [
+        {
+          "type": "code-flows",
+          "items": [
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 1,
+                  "line_end": 2
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "propagation",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 3
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ],
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "different_flow.py",
+                  "line_start": 100,
+                  "line_end": 102
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ]
+          ]
+        }
+      ]
+    }
+  },
+  "self": {
+    "version": "15.1.4"
+  },
+  "type": "object",
+  "required": [
+    "scan",
+    "version",
+    "vulnerabilities"
+  ],
+  "additionalProperties": true,
+  "properties": {
+    "scan": {
+      "type": "object",
+      "required": [
+        "analyzer",
+        "end_time",
+        "scanner",
+        "start_time",
+        "status",
+        "type"
+      ],
+      "properties": {
+        "end_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan finished.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-01-28T03:26:02"
+          ]
+        },
+        "messages": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "Communication intended for the initiator of a scan.",
+            "required": [
+              "level",
+              "value"
+            ],
+            "properties": {
+              "level": {
+                "type": "string",
+                "description": "Describes the severity of the communication. Use info to communicate normal scan behaviour; warn to communicate a potentially recoverable problem, or a partial error; fatal to communicate an issue that causes the scan to halt.",
+                "enum": [
+                  "info",
+                  "warn",
+                  "fatal"
+                ],
+                "examples": [
+                  "info"
+                ]
+              },
+              "value": {
+                "type": "string",
+                "description": "The message to communicate.",
+                "minLength": 1,
+                "examples": [
+                  "Permission denied, scanning aborted"
+                ]
+              }
+            }
+          }
+        },
+        "options": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "A configuration option used for this scan.",
+            "required": [
+              "name",
+              "value"
+            ],
+            "properties": {
+              "name": {
+                "type": "string",
+                "description": "The configuration option name.",
+                "maxLength": 255,
+                "minLength": 1,
+                "examples": [
+                  "DAST_FF_ENABLE_BAS",
+                  "DOCKER_TLS_CERTDIR",
+                  "DS_MAX_DEPTH",
+                  "SECURE_LOG_LEVEL"
+                ]
+              },
+              "source": {
+                "type": "string",
+                "description": "The source of this option.",
+                "enum": [
+                  "argument",
+                  "file",
+                  "env_variable",
+                  "other"
+                ]
+              },
+              "value": {
+                "type": [
+                  "boolean",
+                  "integer",
+                  "null",
+                  "string"
+                ],
+                "description": "The value used for this scan.",
+                "examples": [
+                  true,
+                  2,
+                  null,
+                  "fatal",
+                  ""
+                ]
+              }
+            }
+          }
+        },
+        "analyzer": {
+          "type": "object",
+          "description": "Object defining the analyzer used to perform the scan. Analyzers typically delegate to an underlying scanner to run the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "gitlab-dast"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the analyzer, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "GitLab DAST"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "pattern": "^https?://.+",
+              "description": "A link to more information about the analyzer.",
+              "examples": [
+                "https://docs.gitlab.com/ee/user/application_security/dast"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the analyzer.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            }
+          }
+        },
+        "scanner": {
+          "type": "object",
+          "description": "Object defining the scanner used to perform the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the scanner.",
+              "minLength": 1,
+              "examples": [
+                "my-sast-scanner"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the scanner, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "My SAST Scanner"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "description": "A link to more information about the scanner.",
+              "examples": [
+                "https://scanner.url"
+              ]
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the scanner.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the scanner.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "start_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan started.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-02-14T16:01:59"
+          ]
+        },
+        "status": {
+          "type": "string",
+          "description": "Result of the scan.",
+          "enum": [
+            "success",
+            "failure"
+          ]
+        },
+        "type": {
+          "type": "string",
+          "description": "Type of the scan.",
+          "enum": [
+            "cluster_image_scanning"
+          ]
+        },
+        "primary_identifiers": {
+          "type": "array",
+          "description": "An unordered array containing an exhaustive list of primary identifiers for which the analyzer may return results",
+          "items": {
+            "type": "object",
+            "required": [
+              "type",
+              "name",
+              "value"
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                "minLength": 1
+              },
+              "name": {
+                "type": "string",
+                "description": "Human-readable name of the identifier.",
+                "minLength": 1
+              },
+              "url": {
+                "type": "string",
+                "description": "URL of the identifier's documentation.",
+                "pattern": "^(https?|ftp)://.+"
+              },
+              "value": {
+                "type": "string",
+                "description": "Value of the identifier, for matching purpose.",
+                "minLength": 1
+              }
+            }
+          }
+        }
+      }
+    },
+    "schema": {
+      "type": "string",
+      "description": "URI pointing to the validating security report schema.",
+      "pattern": "^https?://.+"
+    },
+    "version": {
+      "type": "string",
+      "description": "The version of the schema to which the JSON report conforms.",
+      "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"
+    },
+    "vulnerabilities": {
+      "type": "array",
+      "description": "Array of vulnerability objects.",
+      "items": {
+        "type": "object",
+        "description": "Describes the vulnerability using GitLab Flavored Markdown",
+        "required": [
+          "id",
+          "identifiers",
+          "location"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+            "examples": [
+              "642735a5-1425-428d-8d4e-3c854885a3c9"
+            ]
+          },
+          "name": {
+            "type": "string",
+            "maxLength": 255,
+            "description": "The name of the vulnerability. This must not include the finding's specific information."
+          },
+          "description": {
+            "type": "string",
+            "maxLength": 1048576,
+            "description": "A long text section describing the vulnerability more fully."
+          },
+          "severity": {
+            "type": "string",
+            "description": "How much the vulnerability impacts the software. Possible values are Info, Unknown, Low, Medium, High, or Critical. Note that some analyzers may not report all these possible values.",
+            "enum": [
+              "Info",
+              "Unknown",
+              "Low",
+              "Medium",
+              "High",
+              "Critical"
+            ]
+          },
+          "solution": {
+            "type": "string",
+            "maxLength": 7000,
+            "description": "Explanation of how to fix the vulnerability."
+          },
+          "identifiers": {
+            "type": "array",
+            "minItems": 1,
+            "description": "An ordered array of references that identify a vulnerability on internal or external databases. The first identifier is the Primary Identifier, which has special meaning.",
+            "items": {
+              "type": "object",
+              "required": [
+                "type",
+                "name",
+                "value"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                  "minLength": 1
+                },
+                "name": {
+                  "type": "string",
+                  "description": "Human-readable name of the identifier.",
+                  "minLength": 1
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the identifier's documentation.",
+                  "pattern": "^(https?|ftp)://.+"
+                },
+                "value": {
+                  "type": "string",
+                  "description": "Value of the identifier, for matching purpose.",
+                  "minLength": 1
+                }
+              }
+            }
+          },
+          "cvss_vectors": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 10,
+            "description": "An ordered array of CVSS vectors, each issued by a vendor to rate the vulnerability. The first item in the array is used as the primary CVSS vector, and is used to filter and sort the vulnerability.",
+            "items": {
+              "oneOf": [
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 16,
+                      "maxLength": 128,
+                      "pattern": "^((AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))/)*(AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 32,
+                      "maxLength": 128,
+                      "pattern": "^CVSS:3[.][01]/((AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])/)*(AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                }
+              ]
+            }
+          },
+          "links": {
+            "type": "array",
+            "description": "An array of references to external documentation or articles that describe the vulnerability.",
+            "items": {
+              "type": "object",
+              "required": [
+                "url"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "Name of the vulnerability details link."
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the vulnerability details document.",
+                  "pattern": "^(https?|ftp)://.+"
+                }
+              }
+            }
+          },
+          "details": {
+            "$ref": "#/definitions/named_list/properties/items"
+          },
+          "tracking": {
+            "type": "object",
+            "description": "Describes how this vulnerability should be tracked as the project changes.",
+            "oneOf": [
+              {
+                "description": "Declares that a series of items should be tracked using source-specific tracking methods.",
+                "required": [
+                  "items"
+                ],
+                "properties": {
+                  "type": {
+                    "const": "source"
+                  },
+                  "items": {
+                    "type": "array",
+                    "items": {
+                      "description": "An item that should be tracked using source-specific tracking methods.",
+                      "type": "object",
+                      "required": [
+                        "signatures"
+                      ],
+                      "properties": {
+                        "file": {
+                          "type": "string",
+                          "description": "Path to the file where the vulnerability is located."
+                        },
+                        "start_line": {
+                          "type": "number",
+                          "description": "The first line of the file that includes the vulnerability."
+                        },
+                        "end_line": {
+                          "type": "number",
+                          "description": "The last line of the file that includes the vulnerability."
+                        },
+                        "signatures": {
+                          "type": "array",
+                          "description": "An array of calculated tracking signatures for this tracking item.",
+                          "minItems": 1,
+                          "items": {
+                            "description": "A calculated tracking signature value and metadata.",
+                            "type": "object",
+                            "required": [
+                              "algorithm",
+                              "value"
+                            ],
+                            "properties": {
+                              "algorithm": {
+                                "type": "string",
+                                "description": "The algorithm used to generate the signature."
+                              },
+                              "value": {
+                                "type": "string",
+                                "description": "The result of this signature algorithm."
+                              }
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "Each tracking type must declare its own type."
+              }
+            }
+          },
+          "flags": {
+            "description": "Flags that can be attached to vulnerabilities.",
+            "type": "array",
+            "items": {
+              "type": "object",
+              "description": "Informational flags identified and assigned to a vulnerability.",
+              "required": [
+                "type",
+                "origin",
+                "description"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Result of the scan.",
+                  "enum": [
+                    "flagged-as-likely-false-positive"
+                  ]
+                },
+                "origin": {
+                  "minLength": 1,
+                  "description": "Tool that issued the flag.",
+                  "type": "string"
+                },
+                "description": {
+                  "minLength": 1,
+                  "description": "What the flag is about.",
+                  "type": "string"
+                }
+              }
+            }
+          },
+          "location": {
+            "type": "object",
+            "description": "Identifies the vulnerability's location.",
+            "required": [
+              "dependency",
+              "image",
+              "kubernetes_resource"
+            ],
+            "properties": {
+              "dependency": {
+                "type": "object",
+                "description": "Describes the dependency of a project where the vulnerability is located.",
+                "required": [
+                  "package",
+                  "version"
+                ],
+                "properties": {
+                  "package": {
+                    "type": "object",
+                    "description": "Provides information on the package where the vulnerability is located.",
+                    "required": [
+                      "name"
+                    ],
+                    "properties": {
+                      "name": {
+                        "type": "string",
+                        "description": "Name of the package where the vulnerability is located."
+                      }
+                    }
+                  },
+                  "version": {
+                    "type": "string",
+                    "description": "Version of the vulnerable package."
+                  },
+                  "direct": {
+                    "type": "boolean",
+                    "description": "Tells whether this is a direct, top-level dependency of the scanned project."
+                  }
+                }
+              },
+              "operating_system": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 255,
+                "description": "The operating system that contains the vulnerable package."
+              },
+              "image": {
+                "type": "string",
+                "minLength": 1,
+                "description": "The analyzed Docker image.",
+                "examples": [
+                  "index.docker.io/library/nginx:1.21"
+                ]
+              },
+              "kubernetes_resource": {
+                "type": "object",
+                "description": "The specific Kubernetes resource that was scanned.",
+                "required": [
+                  "namespace",
+                  "kind",
+                  "name",
+                  "container_name"
+                ],
+                "properties": {
+                  "namespace": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 255,
+                    "description": "The Kubernetes namespace the resource that had its image scanned.",
+                    "examples": [
+                      "default",
+                      "staging",
+                      "production"
+                    ]
+                  },
+                  "kind": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 255,
+                    "description": "The Kubernetes kind the resource that had its image scanned.",
+                    "examples": [
+                      "Deployment",
+                      "DaemonSet"
+                    ]
+                  },
+                  "name": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 255,
+                    "description": "The name of the resource that had its image scanned.",
+                    "examples": [
+                      "nginx-ingress"
+                    ]
+                  },
+                  "container_name": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 255,
+                    "description": "The name of the container that had its image scanned.",
+                    "examples": [
+                      "nginx"
+                    ]
+                  },
+                  "agent_id": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 255,
+                    "description": "The GitLab ID of the Kubernetes Agent which performed the scan.",
+                    "examples": [
+                      "1234"
+                    ]
+                  },
+                  "cluster_id": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 255,
+                    "description": "The GitLab ID of the Kubernetes cluster when using cluster integration.",
+                    "examples": [
+                      "1234"
+                    ]
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "remediations": {
+      "type": "array",
+      "description": "An array of objects containing information on available remediations, along with patch diffs to apply.",
+      "items": {
+        "type": "object",
+        "required": [
+          "fixes",
+          "summary",
+          "diff"
+        ],
+        "properties": {
+          "fixes": {
+            "type": "array",
+            "description": "An array of strings that represent references to vulnerabilities fixed by this remediation.",
+            "items": {
+              "type": "object",
+              "required": [
+                "id"
+              ],
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+                  "examples": [
+                    "642735a5-1425-428d-8d4e-3c854885a3c9"
+                  ]
+                }
+              }
+            }
+          },
+          "summary": {
+            "type": "string",
+            "minLength": 1,
+            "description": "An overview of how the vulnerabilities were fixed."
+          },
+          "diff": {
+            "type": "string",
+            "minLength": 1,
+            "description": "A base64-encoded remediation code diff, compatible with git apply."
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/container-scanning-report-format.json b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/container-scanning-report-format.json
new file mode 100644
index 00000000000..3a8112e6fb9
--- /dev/null
+++ b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/container-scanning-report-format.json
@@ -0,0 +1,1123 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://gitlab.com/gitlab-org/security-products/security-report-schemas/-/raw/master/dist/container-scanning-report-format.json",
+  "title": "Report format for GitLab Container Scanning",
+  "description": "This schema provides the the report format for Container Scanning (https://docs.gitlab.com/ee/user/application_security/container_scanning).",
+  "definitions": {
+    "detail_type": {
+      "oneOf": [
+        {
+          "$ref": "#/definitions/named_list"
+        },
+        {
+          "$ref": "#/definitions/list"
+        },
+        {
+          "$ref": "#/definitions/table"
+        },
+        {
+          "$ref": "#/definitions/text"
+        },
+        {
+          "$ref": "#/definitions/url"
+        },
+        {
+          "$ref": "#/definitions/code"
+        },
+        {
+          "$ref": "#/definitions/value"
+        },
+        {
+          "$ref": "#/definitions/diff"
+        },
+        {
+          "$ref": "#/definitions/markdown"
+        },
+        {
+          "$ref": "#/definitions/commit"
+        },
+        {
+          "$ref": "#/definitions/file_location"
+        },
+        {
+          "$ref": "#/definitions/module_location"
+        },
+        {
+          "$ref": "#/definitions/code_flows"
+        }
+      ]
+    },
+    "text_value": {
+      "type": "string"
+    },
+    "named_field": {
+      "type": "object",
+      "required": [
+        "name"
+      ],
+      "properties": {
+        "name": {
+          "$ref": "#/definitions/text_value",
+          "type": "string",
+          "minLength": 1
+        },
+        "description": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "named_list": {
+      "type": "object",
+      "description": "An object with named and typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "named-list"
+        },
+        "items": {
+          "type": "object",
+          "patternProperties": {
+            "^.*$": {
+              "allOf": [
+                {
+                  "$ref": "#/definitions/named_field"
+                },
+                {
+                  "$ref": "#/definitions/detail_type"
+                }
+              ]
+            }
+          }
+        }
+      }
+    },
+    "list": {
+      "type": "object",
+      "description": "A list of typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "list"
+        },
+        "items": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        }
+      }
+    },
+    "table": {
+      "type": "object",
+      "description": "A table of typed fields",
+      "required": [
+        "type",
+        "rows"
+      ],
+      "properties": {
+        "type": {
+          "const": "table"
+        },
+        "header": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        },
+        "rows": {
+          "type": "array",
+          "items": {
+            "type": "array",
+            "items": {
+              "$ref": "#/definitions/detail_type"
+            }
+          }
+        }
+      }
+    },
+    "text": {
+      "type": "object",
+      "description": "Raw text",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "text"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "url": {
+      "type": "object",
+      "description": "A single URL",
+      "required": [
+        "type",
+        "href"
+      ],
+      "properties": {
+        "type": {
+          "const": "url"
+        },
+        "text": {
+          "$ref": "#/definitions/text_value"
+        },
+        "href": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "http://mysite.com"
+          ]
+        }
+      }
+    },
+    "code": {
+      "type": "object",
+      "description": "A codeblock",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "code"
+        },
+        "value": {
+          "type": "string"
+        },
+        "lang": {
+          "type": "string",
+          "description": "A programming language"
+        }
+      }
+    },
+    "value": {
+      "type": "object",
+      "description": "A field that can store a range of types of value",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "value"
+        },
+        "value": {
+          "type": [
+            "number",
+            "string",
+            "boolean"
+          ]
+        }
+      }
+    },
+    "diff": {
+      "type": "object",
+      "description": "A diff",
+      "required": [
+        "type",
+        "before",
+        "after"
+      ],
+      "properties": {
+        "type": {
+          "const": "diff"
+        },
+        "before": {
+          "type": "string"
+        },
+        "after": {
+          "type": "string"
+        }
+      }
+    },
+    "markdown": {
+      "type": "object",
+      "description": "GitLab flavoured markdown, see https://docs.gitlab.com/ee/user/markdown.html",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "markdown"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value",
+          "examples": [
+            "Here is markdown `inline code` #1 [test](gitlab.com)\n\n![GitLab Logo](https://about.gitlab.com/images/press/logo/preview/gitlab-logo-white-preview.png)"
+          ]
+        }
+      }
+    },
+    "commit": {
+      "type": "object",
+      "description": "A commit/tag/branch within the GitLab project",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "commit"
+        },
+        "value": {
+          "type": "string",
+          "description": "The commit SHA",
+          "minLength": 1
+        }
+      }
+    },
+    "file_location": {
+      "type": "object",
+      "description": "A location within a file in the project",
+      "required": [
+        "type",
+        "file_name",
+        "line_start"
+      ],
+      "properties": {
+        "type": {
+          "const": "file-location"
+        },
+        "file_name": {
+          "type": "string",
+          "minLength": 1
+        },
+        "line_start": {
+          "type": "integer"
+        },
+        "line_end": {
+          "type": "integer"
+        }
+      }
+    },
+    "module_location": {
+      "type": "object",
+      "description": "A location within a binary module of the form module+relative_offset",
+      "required": [
+        "type",
+        "module_name",
+        "offset"
+      ],
+      "properties": {
+        "type": {
+          "const": "module-location"
+        },
+        "module_name": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "compiled_binary"
+          ]
+        },
+        "offset": {
+          "type": "integer",
+          "examples": [
+            100
+          ]
+        }
+      }
+    },
+    "code_flow_node": {
+      "type": "object",
+      "description": "A code flow node representing a part of a vulnerability flow from source to sink",
+      "required": [
+        "file_location",
+        "node_type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code-flow-node"
+        },
+        "file_location": {
+          "$ref": "#/definitions/file_location"
+        },
+        "node_type": {
+          "type": "string",
+          "description": "Describes a code flow node type",
+          "enum": [
+            "source",
+            "sink",
+            "propagation"
+          ]
+        }
+      },
+      "examples": [
+        {
+          "type": "code-flow-node",
+          "node_type": "propagation",
+          "file_location": {
+            "type": "file-location",
+            "file_name": "file_name.py",
+            "line_start": 4,
+            "line_end": 6
+          }
+        }
+      ]
+    },
+    "code_flows": {
+      "type": "object",
+      "description": "A code flow representing a vulnerability flow from source to sink",
+      "required": [
+        "items",
+        "type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code-flows"
+        },
+        "items": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 10,
+          "items": {
+            "type": "array",
+            "minItems": 1,
+            "items": {
+              "$ref": "#/definitions/code_flow_node"
+            }
+          }
+        }
+      },
+      "examples": [
+        {
+          "type": "code-flows",
+          "items": [
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 1,
+                  "line_end": 2
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "propagation",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 3
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ],
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "different_flow.py",
+                  "line_start": 100,
+                  "line_end": 102
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ]
+          ]
+        }
+      ]
+    }
+  },
+  "self": {
+    "version": "15.1.4"
+  },
+  "type": "object",
+  "required": [
+    "scan",
+    "version",
+    "vulnerabilities"
+  ],
+  "additionalProperties": true,
+  "properties": {
+    "scan": {
+      "type": "object",
+      "required": [
+        "analyzer",
+        "end_time",
+        "scanner",
+        "start_time",
+        "status",
+        "type"
+      ],
+      "properties": {
+        "end_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan finished.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-01-28T03:26:02"
+          ]
+        },
+        "messages": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "Communication intended for the initiator of a scan.",
+            "required": [
+              "level",
+              "value"
+            ],
+            "properties": {
+              "level": {
+                "type": "string",
+                "description": "Describes the severity of the communication. Use info to communicate normal scan behaviour; warn to communicate a potentially recoverable problem, or a partial error; fatal to communicate an issue that causes the scan to halt.",
+                "enum": [
+                  "info",
+                  "warn",
+                  "fatal"
+                ],
+                "examples": [
+                  "info"
+                ]
+              },
+              "value": {
+                "type": "string",
+                "description": "The message to communicate.",
+                "minLength": 1,
+                "examples": [
+                  "Permission denied, scanning aborted"
+                ]
+              }
+            }
+          }
+        },
+        "options": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "A configuration option used for this scan.",
+            "required": [
+              "name",
+              "value"
+            ],
+            "properties": {
+              "name": {
+                "type": "string",
+                "description": "The configuration option name.",
+                "maxLength": 255,
+                "minLength": 1,
+                "examples": [
+                  "DAST_FF_ENABLE_BAS",
+                  "DOCKER_TLS_CERTDIR",
+                  "DS_MAX_DEPTH",
+                  "SECURE_LOG_LEVEL"
+                ]
+              },
+              "source": {
+                "type": "string",
+                "description": "The source of this option.",
+                "enum": [
+                  "argument",
+                  "file",
+                  "env_variable",
+                  "other"
+                ]
+              },
+              "value": {
+                "type": [
+                  "boolean",
+                  "integer",
+                  "null",
+                  "string"
+                ],
+                "description": "The value used for this scan.",
+                "examples": [
+                  true,
+                  2,
+                  null,
+                  "fatal",
+                  ""
+                ]
+              }
+            }
+          }
+        },
+        "analyzer": {
+          "type": "object",
+          "description": "Object defining the analyzer used to perform the scan. Analyzers typically delegate to an underlying scanner to run the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "gitlab-dast"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the analyzer, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "GitLab DAST"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "pattern": "^https?://.+",
+              "description": "A link to more information about the analyzer.",
+              "examples": [
+                "https://docs.gitlab.com/ee/user/application_security/dast"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the analyzer.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            }
+          }
+        },
+        "scanner": {
+          "type": "object",
+          "description": "Object defining the scanner used to perform the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the scanner.",
+              "minLength": 1,
+              "examples": [
+                "my-sast-scanner"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the scanner, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "My SAST Scanner"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "description": "A link to more information about the scanner.",
+              "examples": [
+                "https://scanner.url"
+              ]
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the scanner.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the scanner.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "start_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan started.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-02-14T16:01:59"
+          ]
+        },
+        "status": {
+          "type": "string",
+          "description": "Result of the scan.",
+          "enum": [
+            "success",
+            "failure"
+          ]
+        },
+        "type": {
+          "type": "string",
+          "description": "Type of the scan.",
+          "enum": [
+            "container_scanning",
+            "container_scanning_for_registry"
+          ]
+        },
+        "primary_identifiers": {
+          "type": "array",
+          "description": "An unordered array containing an exhaustive list of primary identifiers for which the analyzer may return results",
+          "items": {
+            "type": "object",
+            "required": [
+              "type",
+              "name",
+              "value"
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                "minLength": 1
+              },
+              "name": {
+                "type": "string",
+                "description": "Human-readable name of the identifier.",
+                "minLength": 1
+              },
+              "url": {
+                "type": "string",
+                "description": "URL of the identifier's documentation.",
+                "pattern": "^(https?|ftp)://.+"
+              },
+              "value": {
+                "type": "string",
+                "description": "Value of the identifier, for matching purpose.",
+                "minLength": 1
+              }
+            }
+          }
+        }
+      }
+    },
+    "schema": {
+      "type": "string",
+      "description": "URI pointing to the validating security report schema.",
+      "pattern": "^https?://.+"
+    },
+    "version": {
+      "type": "string",
+      "description": "The version of the schema to which the JSON report conforms.",
+      "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"
+    },
+    "vulnerabilities": {
+      "type": "array",
+      "description": "Array of vulnerability objects.",
+      "items": {
+        "type": "object",
+        "description": "Describes the vulnerability using GitLab Flavored Markdown",
+        "required": [
+          "id",
+          "identifiers",
+          "location"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+            "examples": [
+              "642735a5-1425-428d-8d4e-3c854885a3c9"
+            ]
+          },
+          "name": {
+            "type": "string",
+            "maxLength": 255,
+            "description": "The name of the vulnerability. This must not include the finding's specific information."
+          },
+          "description": {
+            "type": "string",
+            "maxLength": 1048576,
+            "description": "A long text section describing the vulnerability more fully."
+          },
+          "severity": {
+            "type": "string",
+            "description": "How much the vulnerability impacts the software. Possible values are Info, Unknown, Low, Medium, High, or Critical. Note that some analyzers may not report all these possible values.",
+            "enum": [
+              "Info",
+              "Unknown",
+              "Low",
+              "Medium",
+              "High",
+              "Critical"
+            ]
+          },
+          "solution": {
+            "type": "string",
+            "maxLength": 7000,
+            "description": "Explanation of how to fix the vulnerability."
+          },
+          "identifiers": {
+            "type": "array",
+            "minItems": 1,
+            "description": "An ordered array of references that identify a vulnerability on internal or external databases. The first identifier is the Primary Identifier, which has special meaning.",
+            "items": {
+              "type": "object",
+              "required": [
+                "type",
+                "name",
+                "value"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                  "minLength": 1
+                },
+                "name": {
+                  "type": "string",
+                  "description": "Human-readable name of the identifier.",
+                  "minLength": 1
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the identifier's documentation.",
+                  "pattern": "^(https?|ftp)://.+"
+                },
+                "value": {
+                  "type": "string",
+                  "description": "Value of the identifier, for matching purpose.",
+                  "minLength": 1
+                }
+              }
+            }
+          },
+          "cvss_vectors": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 10,
+            "description": "An ordered array of CVSS vectors, each issued by a vendor to rate the vulnerability. The first item in the array is used as the primary CVSS vector, and is used to filter and sort the vulnerability.",
+            "items": {
+              "oneOf": [
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 16,
+                      "maxLength": 128,
+                      "pattern": "^((AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))/)*(AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 32,
+                      "maxLength": 128,
+                      "pattern": "^CVSS:3[.][01]/((AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])/)*(AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                }
+              ]
+            }
+          },
+          "links": {
+            "type": "array",
+            "description": "An array of references to external documentation or articles that describe the vulnerability.",
+            "items": {
+              "type": "object",
+              "required": [
+                "url"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "Name of the vulnerability details link."
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the vulnerability details document.",
+                  "pattern": "^(https?|ftp)://.+"
+                }
+              }
+            }
+          },
+          "details": {
+            "$ref": "#/definitions/named_list/properties/items"
+          },
+          "tracking": {
+            "type": "object",
+            "description": "Describes how this vulnerability should be tracked as the project changes.",
+            "oneOf": [
+              {
+                "description": "Declares that a series of items should be tracked using source-specific tracking methods.",
+                "required": [
+                  "items"
+                ],
+                "properties": {
+                  "type": {
+                    "const": "source"
+                  },
+                  "items": {
+                    "type": "array",
+                    "items": {
+                      "description": "An item that should be tracked using source-specific tracking methods.",
+                      "type": "object",
+                      "required": [
+                        "signatures"
+                      ],
+                      "properties": {
+                        "file": {
+                          "type": "string",
+                          "description": "Path to the file where the vulnerability is located."
+                        },
+                        "start_line": {
+                          "type": "number",
+                          "description": "The first line of the file that includes the vulnerability."
+                        },
+                        "end_line": {
+                          "type": "number",
+                          "description": "The last line of the file that includes the vulnerability."
+                        },
+                        "signatures": {
+                          "type": "array",
+                          "description": "An array of calculated tracking signatures for this tracking item.",
+                          "minItems": 1,
+                          "items": {
+                            "description": "A calculated tracking signature value and metadata.",
+                            "type": "object",
+                            "required": [
+                              "algorithm",
+                              "value"
+                            ],
+                            "properties": {
+                              "algorithm": {
+                                "type": "string",
+                                "description": "The algorithm used to generate the signature."
+                              },
+                              "value": {
+                                "type": "string",
+                                "description": "The result of this signature algorithm."
+                              }
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "Each tracking type must declare its own type."
+              }
+            }
+          },
+          "flags": {
+            "description": "Flags that can be attached to vulnerabilities.",
+            "type": "array",
+            "items": {
+              "type": "object",
+              "description": "Informational flags identified and assigned to a vulnerability.",
+              "required": [
+                "type",
+                "origin",
+                "description"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Result of the scan.",
+                  "enum": [
+                    "flagged-as-likely-false-positive"
+                  ]
+                },
+                "origin": {
+                  "minLength": 1,
+                  "description": "Tool that issued the flag.",
+                  "type": "string"
+                },
+                "description": {
+                  "minLength": 1,
+                  "description": "What the flag is about.",
+                  "type": "string"
+                }
+              }
+            }
+          },
+          "location": {
+            "type": "object",
+            "description": "Identifies the vulnerability's location.",
+            "required": [
+              "dependency",
+              "operating_system",
+              "image"
+            ],
+            "properties": {
+              "dependency": {
+                "type": "object",
+                "description": "Describes the dependency of a project where the vulnerability is located.",
+                "required": [
+                  "package",
+                  "version"
+                ],
+                "properties": {
+                  "package": {
+                    "type": "object",
+                    "description": "Provides information on the package where the vulnerability is located.",
+                    "required": [
+                      "name"
+                    ],
+                    "properties": {
+                      "name": {
+                        "type": "string",
+                        "description": "Name of the package where the vulnerability is located."
+                      }
+                    }
+                  },
+                  "version": {
+                    "type": "string",
+                    "description": "Version of the vulnerable package."
+                  },
+                  "direct": {
+                    "type": "boolean",
+                    "description": "Tells whether this is a direct, top-level dependency of the scanned project."
+                  }
+                }
+              },
+              "operating_system": {
+                "type": "string",
+                "minLength": 1,
+                "description": "The operating system that contains the vulnerable package."
+              },
+              "image": {
+                "type": "string",
+                "minLength": 1,
+                "description": "The analyzed Docker image."
+              },
+              "default_branch_image": {
+                "type": "string",
+                "maxLength": 255,
+                "description": "The name of the image on the default branch."
+              }
+            }
+          }
+        }
+      }
+    },
+    "remediations": {
+      "type": "array",
+      "description": "An array of objects containing information on available remediations, along with patch diffs to apply.",
+      "items": {
+        "type": "object",
+        "required": [
+          "fixes",
+          "summary",
+          "diff"
+        ],
+        "properties": {
+          "fixes": {
+            "type": "array",
+            "description": "An array of strings that represent references to vulnerabilities fixed by this remediation.",
+            "items": {
+              "type": "object",
+              "required": [
+                "id"
+              ],
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+                  "examples": [
+                    "642735a5-1425-428d-8d4e-3c854885a3c9"
+                  ]
+                }
+              }
+            }
+          },
+          "summary": {
+            "type": "string",
+            "minLength": 1,
+            "description": "An overview of how the vulnerabilities were fixed."
+          },
+          "diff": {
+            "type": "string",
+            "minLength": 1,
+            "description": "A base64-encoded remediation code diff, compatible with git apply."
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/coverage-fuzzing-report-format.json b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/coverage-fuzzing-report-format.json
new file mode 100644
index 00000000000..335211bf275
--- /dev/null
+++ b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/coverage-fuzzing-report-format.json
@@ -0,0 +1,1100 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://gitlab.com/gitlab-org/security-products/security-report-schemas/-/raw/master/dist/coverage-fuzzing-report-format.json",
+  "title": "Report format for GitLab Fuzz Testing",
+  "description": "This schema provides the report format for Coverage Guided Fuzz Testing (https://docs.gitlab.com/ee/user/application_security/coverage_fuzzing).",
+  "definitions": {
+    "detail_type": {
+      "oneOf": [
+        {
+          "$ref": "#/definitions/named_list"
+        },
+        {
+          "$ref": "#/definitions/list"
+        },
+        {
+          "$ref": "#/definitions/table"
+        },
+        {
+          "$ref": "#/definitions/text"
+        },
+        {
+          "$ref": "#/definitions/url"
+        },
+        {
+          "$ref": "#/definitions/code"
+        },
+        {
+          "$ref": "#/definitions/value"
+        },
+        {
+          "$ref": "#/definitions/diff"
+        },
+        {
+          "$ref": "#/definitions/markdown"
+        },
+        {
+          "$ref": "#/definitions/commit"
+        },
+        {
+          "$ref": "#/definitions/file_location"
+        },
+        {
+          "$ref": "#/definitions/module_location"
+        },
+        {
+          "$ref": "#/definitions/code_flows"
+        }
+      ]
+    },
+    "text_value": {
+      "type": "string"
+    },
+    "named_field": {
+      "type": "object",
+      "required": [
+        "name"
+      ],
+      "properties": {
+        "name": {
+          "$ref": "#/definitions/text_value",
+          "type": "string",
+          "minLength": 1
+        },
+        "description": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "named_list": {
+      "type": "object",
+      "description": "An object with named and typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "named-list"
+        },
+        "items": {
+          "type": "object",
+          "patternProperties": {
+            "^.*$": {
+              "allOf": [
+                {
+                  "$ref": "#/definitions/named_field"
+                },
+                {
+                  "$ref": "#/definitions/detail_type"
+                }
+              ]
+            }
+          }
+        }
+      }
+    },
+    "list": {
+      "type": "object",
+      "description": "A list of typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "list"
+        },
+        "items": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        }
+      }
+    },
+    "table": {
+      "type": "object",
+      "description": "A table of typed fields",
+      "required": [
+        "type",
+        "rows"
+      ],
+      "properties": {
+        "type": {
+          "const": "table"
+        },
+        "header": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        },
+        "rows": {
+          "type": "array",
+          "items": {
+            "type": "array",
+            "items": {
+              "$ref": "#/definitions/detail_type"
+            }
+          }
+        }
+      }
+    },
+    "text": {
+      "type": "object",
+      "description": "Raw text",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "text"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "url": {
+      "type": "object",
+      "description": "A single URL",
+      "required": [
+        "type",
+        "href"
+      ],
+      "properties": {
+        "type": {
+          "const": "url"
+        },
+        "text": {
+          "$ref": "#/definitions/text_value"
+        },
+        "href": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "http://mysite.com"
+          ]
+        }
+      }
+    },
+    "code": {
+      "type": "object",
+      "description": "A codeblock",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "code"
+        },
+        "value": {
+          "type": "string"
+        },
+        "lang": {
+          "type": "string",
+          "description": "A programming language"
+        }
+      }
+    },
+    "value": {
+      "type": "object",
+      "description": "A field that can store a range of types of value",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "value"
+        },
+        "value": {
+          "type": [
+            "number",
+            "string",
+            "boolean"
+          ]
+        }
+      }
+    },
+    "diff": {
+      "type": "object",
+      "description": "A diff",
+      "required": [
+        "type",
+        "before",
+        "after"
+      ],
+      "properties": {
+        "type": {
+          "const": "diff"
+        },
+        "before": {
+          "type": "string"
+        },
+        "after": {
+          "type": "string"
+        }
+      }
+    },
+    "markdown": {
+      "type": "object",
+      "description": "GitLab flavoured markdown, see https://docs.gitlab.com/ee/user/markdown.html",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "markdown"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value",
+          "examples": [
+            "Here is markdown `inline code` #1 [test](gitlab.com)\n\n![GitLab Logo](https://about.gitlab.com/images/press/logo/preview/gitlab-logo-white-preview.png)"
+          ]
+        }
+      }
+    },
+    "commit": {
+      "type": "object",
+      "description": "A commit/tag/branch within the GitLab project",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "commit"
+        },
+        "value": {
+          "type": "string",
+          "description": "The commit SHA",
+          "minLength": 1
+        }
+      }
+    },
+    "file_location": {
+      "type": "object",
+      "description": "A location within a file in the project",
+      "required": [
+        "type",
+        "file_name",
+        "line_start"
+      ],
+      "properties": {
+        "type": {
+          "const": "file-location"
+        },
+        "file_name": {
+          "type": "string",
+          "minLength": 1
+        },
+        "line_start": {
+          "type": "integer"
+        },
+        "line_end": {
+          "type": "integer"
+        }
+      }
+    },
+    "module_location": {
+      "type": "object",
+      "description": "A location within a binary module of the form module+relative_offset",
+      "required": [
+        "type",
+        "module_name",
+        "offset"
+      ],
+      "properties": {
+        "type": {
+          "const": "module-location"
+        },
+        "module_name": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "compiled_binary"
+          ]
+        },
+        "offset": {
+          "type": "integer",
+          "examples": [
+            100
+          ]
+        }
+      }
+    },
+    "code_flow_node": {
+      "type": "object",
+      "description": "A code flow node representing a part of a vulnerability flow from source to sink",
+      "required": [
+        "file_location",
+        "node_type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code-flow-node"
+        },
+        "file_location": {
+          "$ref": "#/definitions/file_location"
+        },
+        "node_type": {
+          "type": "string",
+          "description": "Describes a code flow node type",
+          "enum": [
+            "source",
+            "sink",
+            "propagation"
+          ]
+        }
+      },
+      "examples": [
+        {
+          "type": "code-flow-node",
+          "node_type": "propagation",
+          "file_location": {
+            "type": "file-location",
+            "file_name": "file_name.py",
+            "line_start": 4,
+            "line_end": 6
+          }
+        }
+      ]
+    },
+    "code_flows": {
+      "type": "object",
+      "description": "A code flow representing a vulnerability flow from source to sink",
+      "required": [
+        "items",
+        "type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code-flows"
+        },
+        "items": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 10,
+          "items": {
+            "type": "array",
+            "minItems": 1,
+            "items": {
+              "$ref": "#/definitions/code_flow_node"
+            }
+          }
+        }
+      },
+      "examples": [
+        {
+          "type": "code-flows",
+          "items": [
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 1,
+                  "line_end": 2
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "propagation",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 3
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ],
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "different_flow.py",
+                  "line_start": 100,
+                  "line_end": 102
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ]
+          ]
+        }
+      ]
+    }
+  },
+  "self": {
+    "version": "15.1.4"
+  },
+  "type": "object",
+  "required": [
+    "scan",
+    "version",
+    "vulnerabilities"
+  ],
+  "additionalProperties": true,
+  "properties": {
+    "scan": {
+      "type": "object",
+      "required": [
+        "analyzer",
+        "end_time",
+        "scanner",
+        "start_time",
+        "status",
+        "type"
+      ],
+      "properties": {
+        "end_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan finished.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-01-28T03:26:02"
+          ]
+        },
+        "messages": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "Communication intended for the initiator of a scan.",
+            "required": [
+              "level",
+              "value"
+            ],
+            "properties": {
+              "level": {
+                "type": "string",
+                "description": "Describes the severity of the communication. Use info to communicate normal scan behaviour; warn to communicate a potentially recoverable problem, or a partial error; fatal to communicate an issue that causes the scan to halt.",
+                "enum": [
+                  "info",
+                  "warn",
+                  "fatal"
+                ],
+                "examples": [
+                  "info"
+                ]
+              },
+              "value": {
+                "type": "string",
+                "description": "The message to communicate.",
+                "minLength": 1,
+                "examples": [
+                  "Permission denied, scanning aborted"
+                ]
+              }
+            }
+          }
+        },
+        "options": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "A configuration option used for this scan.",
+            "required": [
+              "name",
+              "value"
+            ],
+            "properties": {
+              "name": {
+                "type": "string",
+                "description": "The configuration option name.",
+                "maxLength": 255,
+                "minLength": 1,
+                "examples": [
+                  "DAST_FF_ENABLE_BAS",
+                  "DOCKER_TLS_CERTDIR",
+                  "DS_MAX_DEPTH",
+                  "SECURE_LOG_LEVEL"
+                ]
+              },
+              "source": {
+                "type": "string",
+                "description": "The source of this option.",
+                "enum": [
+                  "argument",
+                  "file",
+                  "env_variable",
+                  "other"
+                ]
+              },
+              "value": {
+                "type": [
+                  "boolean",
+                  "integer",
+                  "null",
+                  "string"
+                ],
+                "description": "The value used for this scan.",
+                "examples": [
+                  true,
+                  2,
+                  null,
+                  "fatal",
+                  ""
+                ]
+              }
+            }
+          }
+        },
+        "analyzer": {
+          "type": "object",
+          "description": "Object defining the analyzer used to perform the scan. Analyzers typically delegate to an underlying scanner to run the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "gitlab-dast"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the analyzer, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "GitLab DAST"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "pattern": "^https?://.+",
+              "description": "A link to more information about the analyzer.",
+              "examples": [
+                "https://docs.gitlab.com/ee/user/application_security/dast"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the analyzer.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            }
+          }
+        },
+        "scanner": {
+          "type": "object",
+          "description": "Object defining the scanner used to perform the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the scanner.",
+              "minLength": 1,
+              "examples": [
+                "my-sast-scanner"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the scanner, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "My SAST Scanner"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "description": "A link to more information about the scanner.",
+              "examples": [
+                "https://scanner.url"
+              ]
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the scanner.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the scanner.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "start_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan started.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-02-14T16:01:59"
+          ]
+        },
+        "status": {
+          "type": "string",
+          "description": "Result of the scan.",
+          "enum": [
+            "success",
+            "failure"
+          ]
+        },
+        "type": {
+          "type": "string",
+          "description": "Type of the scan.",
+          "enum": [
+            "coverage_fuzzing"
+          ]
+        },
+        "primary_identifiers": {
+          "type": "array",
+          "description": "An unordered array containing an exhaustive list of primary identifiers for which the analyzer may return results",
+          "items": {
+            "type": "object",
+            "required": [
+              "type",
+              "name",
+              "value"
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                "minLength": 1
+              },
+              "name": {
+                "type": "string",
+                "description": "Human-readable name of the identifier.",
+                "minLength": 1
+              },
+              "url": {
+                "type": "string",
+                "description": "URL of the identifier's documentation.",
+                "pattern": "^(https?|ftp)://.+"
+              },
+              "value": {
+                "type": "string",
+                "description": "Value of the identifier, for matching purpose.",
+                "minLength": 1
+              }
+            }
+          }
+        }
+      }
+    },
+    "schema": {
+      "type": "string",
+      "description": "URI pointing to the validating security report schema.",
+      "pattern": "^https?://.+"
+    },
+    "version": {
+      "type": "string",
+      "description": "The version of the schema to which the JSON report conforms.",
+      "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"
+    },
+    "vulnerabilities": {
+      "type": "array",
+      "description": "Array of vulnerability objects.",
+      "items": {
+        "type": "object",
+        "description": "Describes the vulnerability using GitLab Flavored Markdown",
+        "required": [
+          "id",
+          "identifiers",
+          "location"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+            "examples": [
+              "642735a5-1425-428d-8d4e-3c854885a3c9"
+            ]
+          },
+          "name": {
+            "type": "string",
+            "maxLength": 255,
+            "description": "The name of the vulnerability. This must not include the finding's specific information."
+          },
+          "description": {
+            "type": "string",
+            "maxLength": 1048576,
+            "description": "A long text section describing the vulnerability more fully."
+          },
+          "severity": {
+            "type": "string",
+            "description": "How much the vulnerability impacts the software. Possible values are Info, Unknown, Low, Medium, High, or Critical. Note that some analyzers may not report all these possible values.",
+            "enum": [
+              "Info",
+              "Unknown",
+              "Low",
+              "Medium",
+              "High",
+              "Critical"
+            ]
+          },
+          "solution": {
+            "type": "string",
+            "maxLength": 7000,
+            "description": "Explanation of how to fix the vulnerability."
+          },
+          "identifiers": {
+            "type": "array",
+            "minItems": 1,
+            "description": "An ordered array of references that identify a vulnerability on internal or external databases. The first identifier is the Primary Identifier, which has special meaning.",
+            "items": {
+              "type": "object",
+              "required": [
+                "type",
+                "name",
+                "value"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                  "minLength": 1
+                },
+                "name": {
+                  "type": "string",
+                  "description": "Human-readable name of the identifier.",
+                  "minLength": 1
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the identifier's documentation.",
+                  "pattern": "^(https?|ftp)://.+"
+                },
+                "value": {
+                  "type": "string",
+                  "description": "Value of the identifier, for matching purpose.",
+                  "minLength": 1
+                }
+              }
+            }
+          },
+          "cvss_vectors": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 10,
+            "description": "An ordered array of CVSS vectors, each issued by a vendor to rate the vulnerability. The first item in the array is used as the primary CVSS vector, and is used to filter and sort the vulnerability.",
+            "items": {
+              "oneOf": [
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 16,
+                      "maxLength": 128,
+                      "pattern": "^((AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))/)*(AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 32,
+                      "maxLength": 128,
+                      "pattern": "^CVSS:3[.][01]/((AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])/)*(AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                }
+              ]
+            }
+          },
+          "links": {
+            "type": "array",
+            "description": "An array of references to external documentation or articles that describe the vulnerability.",
+            "items": {
+              "type": "object",
+              "required": [
+                "url"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "Name of the vulnerability details link."
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the vulnerability details document.",
+                  "pattern": "^(https?|ftp)://.+"
+                }
+              }
+            }
+          },
+          "details": {
+            "$ref": "#/definitions/named_list/properties/items"
+          },
+          "tracking": {
+            "type": "object",
+            "description": "Describes how this vulnerability should be tracked as the project changes.",
+            "oneOf": [
+              {
+                "description": "Declares that a series of items should be tracked using source-specific tracking methods.",
+                "required": [
+                  "items"
+                ],
+                "properties": {
+                  "type": {
+                    "const": "source"
+                  },
+                  "items": {
+                    "type": "array",
+                    "items": {
+                      "description": "An item that should be tracked using source-specific tracking methods.",
+                      "type": "object",
+                      "required": [
+                        "signatures"
+                      ],
+                      "properties": {
+                        "file": {
+                          "type": "string",
+                          "description": "Path to the file where the vulnerability is located."
+                        },
+                        "start_line": {
+                          "type": "number",
+                          "description": "The first line of the file that includes the vulnerability."
+                        },
+                        "end_line": {
+                          "type": "number",
+                          "description": "The last line of the file that includes the vulnerability."
+                        },
+                        "signatures": {
+                          "type": "array",
+                          "description": "An array of calculated tracking signatures for this tracking item.",
+                          "minItems": 1,
+                          "items": {
+                            "description": "A calculated tracking signature value and metadata.",
+                            "type": "object",
+                            "required": [
+                              "algorithm",
+                              "value"
+                            ],
+                            "properties": {
+                              "algorithm": {
+                                "type": "string",
+                                "description": "The algorithm used to generate the signature."
+                              },
+                              "value": {
+                                "type": "string",
+                                "description": "The result of this signature algorithm."
+                              }
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "Each tracking type must declare its own type."
+              }
+            }
+          },
+          "flags": {
+            "description": "Flags that can be attached to vulnerabilities.",
+            "type": "array",
+            "items": {
+              "type": "object",
+              "description": "Informational flags identified and assigned to a vulnerability.",
+              "required": [
+                "type",
+                "origin",
+                "description"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Result of the scan.",
+                  "enum": [
+                    "flagged-as-likely-false-positive"
+                  ]
+                },
+                "origin": {
+                  "minLength": 1,
+                  "description": "Tool that issued the flag.",
+                  "type": "string"
+                },
+                "description": {
+                  "minLength": 1,
+                  "description": "What the flag is about.",
+                  "type": "string"
+                }
+              }
+            }
+          },
+          "location": {
+            "description": "The location of the error",
+            "type": "object",
+            "properties": {
+              "crash_address": {
+                "type": "string",
+                "description": "The relative address in memory were the crash occurred.",
+                "examples": [
+                  "0xabababab"
+                ]
+              },
+              "stacktrace_snippet": {
+                "type": "string",
+                "description": "The stack trace recorded during fuzzing resulting the crash.",
+                "examples": [
+                  "func_a+0xabcd\nfunc_b+0xabcc"
+                ]
+              },
+              "crash_state": {
+                "type": "string",
+                "description": "Minimised and normalized crash stack-trace (called crash_state).",
+                "examples": [
+                  "func_a+0xa\nfunc_b+0xb\nfunc_c+0xc"
+                ]
+              },
+              "crash_type": {
+                "type": "string",
+                "description": "Type of the crash.",
+                "examples": [
+                  "Heap-Buffer-overflow",
+                  "Division-by-zero"
+                ]
+              }
+            }
+          }
+        }
+      }
+    },
+    "remediations": {
+      "type": "array",
+      "description": "An array of objects containing information on available remediations, along with patch diffs to apply.",
+      "items": {
+        "type": "object",
+        "required": [
+          "fixes",
+          "summary",
+          "diff"
+        ],
+        "properties": {
+          "fixes": {
+            "type": "array",
+            "description": "An array of strings that represent references to vulnerabilities fixed by this remediation.",
+            "items": {
+              "type": "object",
+              "required": [
+                "id"
+              ],
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+                  "examples": [
+                    "642735a5-1425-428d-8d4e-3c854885a3c9"
+                  ]
+                }
+              }
+            }
+          },
+          "summary": {
+            "type": "string",
+            "minLength": 1,
+            "description": "An overview of how the vulnerabilities were fixed."
+          },
+          "diff": {
+            "type": "string",
+            "minLength": 1,
+            "description": "A base64-encoded remediation code diff, compatible with git apply."
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/dast-report-format.json b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/dast-report-format.json
new file mode 100644
index 00000000000..d7ca652a64e
--- /dev/null
+++ b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/dast-report-format.json
@@ -0,0 +1,1505 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://gitlab.com/gitlab-org/security-products/security-report-schemas/-/raw/master/dist/dast-report-format.json",
+  "title": "Report format for GitLab DAST",
+  "description": "This schema provides the the report format for Dynamic Application Security Testing (https://docs.gitlab.com/ee/user/application_security/dast).",
+  "definitions": {
+    "detail_type": {
+      "oneOf": [
+        {
+          "$ref": "#/definitions/named_list"
+        },
+        {
+          "$ref": "#/definitions/list"
+        },
+        {
+          "$ref": "#/definitions/table"
+        },
+        {
+          "$ref": "#/definitions/text"
+        },
+        {
+          "$ref": "#/definitions/url"
+        },
+        {
+          "$ref": "#/definitions/code"
+        },
+        {
+          "$ref": "#/definitions/value"
+        },
+        {
+          "$ref": "#/definitions/diff"
+        },
+        {
+          "$ref": "#/definitions/markdown"
+        },
+        {
+          "$ref": "#/definitions/commit"
+        },
+        {
+          "$ref": "#/definitions/file_location"
+        },
+        {
+          "$ref": "#/definitions/module_location"
+        },
+        {
+          "$ref": "#/definitions/code_flows"
+        }
+      ]
+    },
+    "text_value": {
+      "type": "string"
+    },
+    "named_field": {
+      "type": "object",
+      "required": [
+        "name"
+      ],
+      "properties": {
+        "name": {
+          "$ref": "#/definitions/text_value",
+          "type": "string",
+          "minLength": 1
+        },
+        "description": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "named_list": {
+      "type": "object",
+      "description": "An object with named and typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "named-list"
+        },
+        "items": {
+          "type": "object",
+          "patternProperties": {
+            "^.*$": {
+              "allOf": [
+                {
+                  "$ref": "#/definitions/named_field"
+                },
+                {
+                  "$ref": "#/definitions/detail_type"
+                }
+              ]
+            }
+          }
+        }
+      }
+    },
+    "list": {
+      "type": "object",
+      "description": "A list of typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "list"
+        },
+        "items": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        }
+      }
+    },
+    "table": {
+      "type": "object",
+      "description": "A table of typed fields",
+      "required": [
+        "type",
+        "rows"
+      ],
+      "properties": {
+        "type": {
+          "const": "table"
+        },
+        "header": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        },
+        "rows": {
+          "type": "array",
+          "items": {
+            "type": "array",
+            "items": {
+              "$ref": "#/definitions/detail_type"
+            }
+          }
+        }
+      }
+    },
+    "text": {
+      "type": "object",
+      "description": "Raw text",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "text"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "url": {
+      "type": "object",
+      "description": "A single URL",
+      "required": [
+        "type",
+        "href"
+      ],
+      "properties": {
+        "type": {
+          "const": "url"
+        },
+        "text": {
+          "$ref": "#/definitions/text_value"
+        },
+        "href": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "http://mysite.com"
+          ]
+        }
+      }
+    },
+    "code": {
+      "type": "object",
+      "description": "A codeblock",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "code"
+        },
+        "value": {
+          "type": "string"
+        },
+        "lang": {
+          "type": "string",
+          "description": "A programming language"
+        }
+      }
+    },
+    "value": {
+      "type": "object",
+      "description": "A field that can store a range of types of value",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "value"
+        },
+        "value": {
+          "type": [
+            "number",
+            "string",
+            "boolean"
+          ]
+        }
+      }
+    },
+    "diff": {
+      "type": "object",
+      "description": "A diff",
+      "required": [
+        "type",
+        "before",
+        "after"
+      ],
+      "properties": {
+        "type": {
+          "const": "diff"
+        },
+        "before": {
+          "type": "string"
+        },
+        "after": {
+          "type": "string"
+        }
+      }
+    },
+    "markdown": {
+      "type": "object",
+      "description": "GitLab flavoured markdown, see https://docs.gitlab.com/ee/user/markdown.html",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "markdown"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value",
+          "examples": [
+            "Here is markdown `inline code` #1 [test](gitlab.com)\n\n![GitLab Logo](https://about.gitlab.com/images/press/logo/preview/gitlab-logo-white-preview.png)"
+          ]
+        }
+      }
+    },
+    "commit": {
+      "type": "object",
+      "description": "A commit/tag/branch within the GitLab project",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "commit"
+        },
+        "value": {
+          "type": "string",
+          "description": "The commit SHA",
+          "minLength": 1
+        }
+      }
+    },
+    "file_location": {
+      "type": "object",
+      "description": "A location within a file in the project",
+      "required": [
+        "type",
+        "file_name",
+        "line_start"
+      ],
+      "properties": {
+        "type": {
+          "const": "file-location"
+        },
+        "file_name": {
+          "type": "string",
+          "minLength": 1
+        },
+        "line_start": {
+          "type": "integer"
+        },
+        "line_end": {
+          "type": "integer"
+        }
+      }
+    },
+    "module_location": {
+      "type": "object",
+      "description": "A location within a binary module of the form module+relative_offset",
+      "required": [
+        "type",
+        "module_name",
+        "offset"
+      ],
+      "properties": {
+        "type": {
+          "const": "module-location"
+        },
+        "module_name": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "compiled_binary"
+          ]
+        },
+        "offset": {
+          "type": "integer",
+          "examples": [
+            100
+          ]
+        }
+      }
+    },
+    "code_flow_node": {
+      "type": "object",
+      "description": "A code flow node representing a part of a vulnerability flow from source to sink",
+      "required": [
+        "file_location",
+        "node_type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code-flow-node"
+        },
+        "file_location": {
+          "$ref": "#/definitions/file_location"
+        },
+        "node_type": {
+          "type": "string",
+          "description": "Describes a code flow node type",
+          "enum": [
+            "source",
+            "sink",
+            "propagation"
+          ]
+        }
+      },
+      "examples": [
+        {
+          "type": "code-flow-node",
+          "node_type": "propagation",
+          "file_location": {
+            "type": "file-location",
+            "file_name": "file_name.py",
+            "line_start": 4,
+            "line_end": 6
+          }
+        }
+      ]
+    },
+    "code_flows": {
+      "type": "object",
+      "description": "A code flow representing a vulnerability flow from source to sink",
+      "required": [
+        "items",
+        "type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code-flows"
+        },
+        "items": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 10,
+          "items": {
+            "type": "array",
+            "minItems": 1,
+            "items": {
+              "$ref": "#/definitions/code_flow_node"
+            }
+          }
+        }
+      },
+      "examples": [
+        {
+          "type": "code-flows",
+          "items": [
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 1,
+                  "line_end": 2
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "propagation",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 3
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ],
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "different_flow.py",
+                  "line_start": 100,
+                  "line_end": 102
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ]
+          ]
+        }
+      ]
+    }
+  },
+  "self": {
+    "version": "15.1.4"
+  },
+  "type": "object",
+  "required": [
+    "scan",
+    "version",
+    "vulnerabilities"
+  ],
+  "additionalProperties": true,
+  "properties": {
+    "scan": {
+      "type": "object",
+      "required": [
+        "analyzer",
+        "end_time",
+        "scanned_resources",
+        "scanner",
+        "start_time",
+        "status",
+        "type"
+      ],
+      "properties": {
+        "end_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan finished.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-01-28T03:26:02"
+          ]
+        },
+        "messages": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "Communication intended for the initiator of a scan.",
+            "required": [
+              "level",
+              "value"
+            ],
+            "properties": {
+              "level": {
+                "type": "string",
+                "description": "Describes the severity of the communication. Use info to communicate normal scan behaviour; warn to communicate a potentially recoverable problem, or a partial error; fatal to communicate an issue that causes the scan to halt.",
+                "enum": [
+                  "info",
+                  "warn",
+                  "fatal"
+                ],
+                "examples": [
+                  "info"
+                ]
+              },
+              "value": {
+                "type": "string",
+                "description": "The message to communicate.",
+                "minLength": 1,
+                "examples": [
+                  "Permission denied, scanning aborted"
+                ]
+              }
+            }
+          }
+        },
+        "options": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "A configuration option used for this scan.",
+            "required": [
+              "name",
+              "value"
+            ],
+            "properties": {
+              "name": {
+                "type": "string",
+                "description": "The configuration option name.",
+                "maxLength": 255,
+                "minLength": 1,
+                "examples": [
+                  "DAST_FF_ENABLE_BAS",
+                  "DOCKER_TLS_CERTDIR",
+                  "DS_MAX_DEPTH",
+                  "SECURE_LOG_LEVEL"
+                ]
+              },
+              "source": {
+                "type": "string",
+                "description": "The source of this option.",
+                "enum": [
+                  "argument",
+                  "file",
+                  "env_variable",
+                  "other"
+                ]
+              },
+              "value": {
+                "type": [
+                  "boolean",
+                  "integer",
+                  "null",
+                  "string"
+                ],
+                "description": "The value used for this scan.",
+                "examples": [
+                  true,
+                  2,
+                  null,
+                  "fatal",
+                  ""
+                ]
+              }
+            }
+          }
+        },
+        "analyzer": {
+          "type": "object",
+          "description": "Object defining the analyzer used to perform the scan. Analyzers typically delegate to an underlying scanner to run the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "gitlab-dast"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the analyzer, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "GitLab DAST"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "pattern": "^https?://.+",
+              "description": "A link to more information about the analyzer.",
+              "examples": [
+                "https://docs.gitlab.com/ee/user/application_security/dast"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the analyzer.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            }
+          }
+        },
+        "scanner": {
+          "type": "object",
+          "description": "Object defining the scanner used to perform the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the scanner.",
+              "minLength": 1,
+              "examples": [
+                "my-sast-scanner"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the scanner, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "My SAST Scanner"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "description": "A link to more information about the scanner.",
+              "examples": [
+                "https://scanner.url"
+              ]
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the scanner.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the scanner.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "start_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan started.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-02-14T16:01:59"
+          ]
+        },
+        "status": {
+          "type": "string",
+          "description": "Result of the scan.",
+          "enum": [
+            "success",
+            "failure"
+          ]
+        },
+        "type": {
+          "type": "string",
+          "description": "Type of the scan.",
+          "enum": [
+            "dast",
+            "api_fuzzing"
+          ]
+        },
+        "primary_identifiers": {
+          "type": "array",
+          "description": "An unordered array containing an exhaustive list of primary identifiers for which the analyzer may return results",
+          "items": {
+            "type": "object",
+            "required": [
+              "type",
+              "name",
+              "value"
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                "minLength": 1
+              },
+              "name": {
+                "type": "string",
+                "description": "Human-readable name of the identifier.",
+                "minLength": 1
+              },
+              "url": {
+                "type": "string",
+                "description": "URL of the identifier's documentation.",
+                "pattern": "^(https?|ftp)://.+"
+              },
+              "value": {
+                "type": "string",
+                "description": "Value of the identifier, for matching purpose.",
+                "minLength": 1
+              }
+            }
+          }
+        },
+        "scanned_resources": {
+          "type": "array",
+          "description": "The attack surface scanned by DAST.",
+          "items": {
+            "type": "object",
+            "required": [
+              "method",
+              "url",
+              "type"
+            ],
+            "properties": {
+              "method": {
+                "type": "string",
+                "minLength": 1,
+                "description": "HTTP method of the scanned resource.",
+                "examples": [
+                  "GET",
+                  "POST",
+                  "HEAD"
+                ]
+              },
+              "url": {
+                "type": "string",
+                "minLength": 1,
+                "description": "URL of the scanned resource.",
+                "examples": [
+                  "http://my.site.com/a-page"
+                ]
+              },
+              "type": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Type of the scanned resource, for DAST, this must be 'url'.",
+                "examples": [
+                  "url"
+                ]
+              }
+            }
+          }
+        }
+      }
+    },
+    "schema": {
+      "type": "string",
+      "description": "URI pointing to the validating security report schema.",
+      "pattern": "^https?://.+"
+    },
+    "version": {
+      "type": "string",
+      "description": "The version of the schema to which the JSON report conforms.",
+      "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"
+    },
+    "vulnerabilities": {
+      "type": "array",
+      "description": "Array of vulnerability objects.",
+      "items": {
+        "type": "object",
+        "description": "Describes the vulnerability using GitLab Flavored Markdown",
+        "required": [
+          "id",
+          "identifiers",
+          "location"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+            "examples": [
+              "642735a5-1425-428d-8d4e-3c854885a3c9"
+            ]
+          },
+          "name": {
+            "type": "string",
+            "maxLength": 255,
+            "description": "The name of the vulnerability. This must not include the finding's specific information."
+          },
+          "description": {
+            "type": "string",
+            "maxLength": 1048576,
+            "description": "A long text section describing the vulnerability more fully."
+          },
+          "severity": {
+            "type": "string",
+            "description": "How much the vulnerability impacts the software. Possible values are Info, Unknown, Low, Medium, High, or Critical. Note that some analyzers may not report all these possible values.",
+            "enum": [
+              "Info",
+              "Unknown",
+              "Low",
+              "Medium",
+              "High",
+              "Critical"
+            ]
+          },
+          "solution": {
+            "type": "string",
+            "maxLength": 7000,
+            "description": "Explanation of how to fix the vulnerability."
+          },
+          "identifiers": {
+            "type": "array",
+            "minItems": 1,
+            "description": "An ordered array of references that identify a vulnerability on internal or external databases. The first identifier is the Primary Identifier, which has special meaning.",
+            "items": {
+              "type": "object",
+              "required": [
+                "type",
+                "name",
+                "value"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                  "minLength": 1
+                },
+                "name": {
+                  "type": "string",
+                  "description": "Human-readable name of the identifier.",
+                  "minLength": 1
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the identifier's documentation.",
+                  "pattern": "^(https?|ftp)://.+"
+                },
+                "value": {
+                  "type": "string",
+                  "description": "Value of the identifier, for matching purpose.",
+                  "minLength": 1
+                }
+              }
+            }
+          },
+          "cvss_vectors": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 10,
+            "description": "An ordered array of CVSS vectors, each issued by a vendor to rate the vulnerability. The first item in the array is used as the primary CVSS vector, and is used to filter and sort the vulnerability.",
+            "items": {
+              "oneOf": [
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 16,
+                      "maxLength": 128,
+                      "pattern": "^((AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))/)*(AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 32,
+                      "maxLength": 128,
+                      "pattern": "^CVSS:3[.][01]/((AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])/)*(AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                }
+              ]
+            }
+          },
+          "links": {
+            "type": "array",
+            "description": "An array of references to external documentation or articles that describe the vulnerability.",
+            "items": {
+              "type": "object",
+              "required": [
+                "url"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "Name of the vulnerability details link."
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the vulnerability details document.",
+                  "pattern": "^(https?|ftp)://.+"
+                }
+              }
+            }
+          },
+          "details": {
+            "$ref": "#/definitions/named_list/properties/items"
+          },
+          "tracking": {
+            "type": "object",
+            "description": "Describes how this vulnerability should be tracked as the project changes.",
+            "oneOf": [
+              {
+                "description": "Declares that a series of items should be tracked using source-specific tracking methods.",
+                "required": [
+                  "items"
+                ],
+                "properties": {
+                  "type": {
+                    "const": "source"
+                  },
+                  "items": {
+                    "type": "array",
+                    "items": {
+                      "description": "An item that should be tracked using source-specific tracking methods.",
+                      "type": "object",
+                      "required": [
+                        "signatures"
+                      ],
+                      "properties": {
+                        "file": {
+                          "type": "string",
+                          "description": "Path to the file where the vulnerability is located."
+                        },
+                        "start_line": {
+                          "type": "number",
+                          "description": "The first line of the file that includes the vulnerability."
+                        },
+                        "end_line": {
+                          "type": "number",
+                          "description": "The last line of the file that includes the vulnerability."
+                        },
+                        "signatures": {
+                          "type": "array",
+                          "description": "An array of calculated tracking signatures for this tracking item.",
+                          "minItems": 1,
+                          "items": {
+                            "description": "A calculated tracking signature value and metadata.",
+                            "type": "object",
+                            "required": [
+                              "algorithm",
+                              "value"
+                            ],
+                            "properties": {
+                              "algorithm": {
+                                "type": "string",
+                                "description": "The algorithm used to generate the signature."
+                              },
+                              "value": {
+                                "type": "string",
+                                "description": "The result of this signature algorithm."
+                              }
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "Each tracking type must declare its own type."
+              }
+            }
+          },
+          "flags": {
+            "description": "Flags that can be attached to vulnerabilities.",
+            "type": "array",
+            "items": {
+              "type": "object",
+              "description": "Informational flags identified and assigned to a vulnerability.",
+              "required": [
+                "type",
+                "origin",
+                "description"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Result of the scan.",
+                  "enum": [
+                    "flagged-as-likely-false-positive"
+                  ]
+                },
+                "origin": {
+                  "minLength": 1,
+                  "description": "Tool that issued the flag.",
+                  "type": "string"
+                },
+                "description": {
+                  "minLength": 1,
+                  "description": "What the flag is about.",
+                  "type": "string"
+                }
+              }
+            }
+          },
+          "evidence": {
+            "type": "object",
+            "properties": {
+              "source": {
+                "type": "object",
+                "description": "Source of evidence",
+                "required": [
+                  "id",
+                  "name"
+                ],
+                "properties": {
+                  "id": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "Unique source identifier",
+                    "examples": [
+                      "assert:LogAnalysis",
+                      "assert:StatusCode"
+                    ]
+                  },
+                  "name": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "Source display name",
+                    "examples": [
+                      "Log Analysis",
+                      "Status Code"
+                    ]
+                  },
+                  "url": {
+                    "type": "string",
+                    "description": "Link to additional information",
+                    "examples": [
+                      "https://docs.gitlab.com/ee/development/integrations/secure.html"
+                    ]
+                  }
+                }
+              },
+              "summary": {
+                "type": "string",
+                "description": "Human readable string containing evidence of the vulnerability.",
+                "examples": [
+                  "Credit card 4111111111111111 found",
+                  "Server leaked information nginx/1.17.6"
+                ]
+              },
+              "request": {
+                "type": "object",
+                "description": "An HTTP request.",
+                "required": [
+                  "headers",
+                  "method",
+                  "url"
+                ],
+                "properties": {
+                  "headers": {
+                    "type": "array",
+                    "description": "HTTP headers present on the request.",
+                    "items": {
+                      "type": "object",
+                      "required": [
+                        "name",
+                        "value"
+                      ],
+                      "properties": {
+                        "name": {
+                          "type": "string",
+                          "minLength": 1,
+                          "description": "Name of the HTTP header.",
+                          "examples": [
+                            "Accept",
+                            "Content-Length",
+                            "Content-Type"
+                          ]
+                        },
+                        "value": {
+                          "type": "string",
+                          "description": "Value of the HTTP header.",
+                          "examples": [
+                            "*/*",
+                            "560",
+                            "application/json; charset=utf-8"
+                          ]
+                        }
+                      }
+                    }
+                  },
+                  "method": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "HTTP method used in the request.",
+                    "examples": [
+                      "GET",
+                      "POST"
+                    ]
+                  },
+                  "url": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "URL of the request.",
+                    "examples": [
+                      "http://my.site.com/vulnerable-endpoint?show-credit-card"
+                    ]
+                  },
+                  "body": {
+                    "type": "string",
+                    "description": "Body of the request for display purposes. Body must be suitable for display (not binary), and truncated to a reasonable size.",
+                    "examples": [
+                      "user=jsmith&first=%27&last=smith"
+                    ]
+                  }
+                }
+              },
+              "response": {
+                "type": "object",
+                "description": "An HTTP response.",
+                "required": [
+                  "headers",
+                  "reason_phrase",
+                  "status_code"
+                ],
+                "properties": {
+                  "headers": {
+                    "type": "array",
+                    "description": "HTTP headers present on the request.",
+                    "items": {
+                      "type": "object",
+                      "required": [
+                        "name",
+                        "value"
+                      ],
+                      "properties": {
+                        "name": {
+                          "type": "string",
+                          "minLength": 1,
+                          "description": "Name of the HTTP header.",
+                          "examples": [
+                            "Accept",
+                            "Content-Length",
+                            "Content-Type"
+                          ]
+                        },
+                        "value": {
+                          "type": "string",
+                          "description": "Value of the HTTP header.",
+                          "examples": [
+                            "*/*",
+                            "560",
+                            "application/json; charset=utf-8"
+                          ]
+                        }
+                      }
+                    }
+                  },
+                  "reason_phrase": {
+                    "type": "string",
+                    "description": "HTTP reason phrase of the response.",
+                    "examples": [
+                      "OK",
+                      "Internal Server Error"
+                    ]
+                  },
+                  "status_code": {
+                    "type": "integer",
+                    "description": "HTTP status code of the response.",
+                    "examples": [
+                      200,
+                      500
+                    ]
+                  },
+                  "body": {
+                    "type": "string",
+                    "description": "Body of the response for display purposes. Body must be suitable for display (not binary), and truncated to a reasonable size.",
+                    "examples": [
+                      "{\"user_id\": 2}"
+                    ]
+                  }
+                }
+              },
+              "supporting_messages": {
+                "type": "array",
+                "description": "Array of supporting http messages.",
+                "items": {
+                  "type": "object",
+                  "description": "A supporting http message.",
+                  "required": [
+                    "name"
+                  ],
+                  "properties": {
+                    "name": {
+                      "type": "string",
+                      "minLength": 1,
+                      "description": "Message display name.",
+                      "examples": [
+                        "Unmodified",
+                        "Recorded"
+                      ]
+                    },
+                    "request": {
+                      "type": "object",
+                      "description": "An HTTP request.",
+                      "required": [
+                        "headers",
+                        "method",
+                        "url"
+                      ],
+                      "properties": {
+                        "headers": {
+                          "type": "array",
+                          "description": "HTTP headers present on the request.",
+                          "items": {
+                            "type": "object",
+                            "required": [
+                              "name",
+                              "value"
+                            ],
+                            "properties": {
+                              "name": {
+                                "type": "string",
+                                "minLength": 1,
+                                "description": "Name of the HTTP header.",
+                                "examples": [
+                                  "Accept",
+                                  "Content-Length",
+                                  "Content-Type"
+                                ]
+                              },
+                              "value": {
+                                "type": "string",
+                                "description": "Value of the HTTP header.",
+                                "examples": [
+                                  "*/*",
+                                  "560",
+                                  "application/json; charset=utf-8"
+                                ]
+                              }
+                            }
+                          }
+                        },
+                        "method": {
+                          "type": "string",
+                          "minLength": 1,
+                          "description": "HTTP method used in the request.",
+                          "examples": [
+                            "GET",
+                            "POST"
+                          ]
+                        },
+                        "url": {
+                          "type": "string",
+                          "minLength": 1,
+                          "description": "URL of the request.",
+                          "examples": [
+                            "http://my.site.com/vulnerable-endpoint?show-credit-card"
+                          ]
+                        },
+                        "body": {
+                          "type": "string",
+                          "description": "Body of the request for display purposes. Body must be suitable for display (not binary), and truncated to a reasonable size.",
+                          "examples": [
+                            "user=jsmith&first=%27&last=smith"
+                          ]
+                        }
+                      }
+                    },
+                    "response": {
+                      "type": "object",
+                      "description": "An HTTP response.",
+                      "required": [
+                        "headers",
+                        "reason_phrase",
+                        "status_code"
+                      ],
+                      "properties": {
+                        "headers": {
+                          "type": "array",
+                          "description": "HTTP headers present on the request.",
+                          "items": {
+                            "type": "object",
+                            "required": [
+                              "name",
+                              "value"
+                            ],
+                            "properties": {
+                              "name": {
+                                "type": "string",
+                                "minLength": 1,
+                                "description": "Name of the HTTP header.",
+                                "examples": [
+                                  "Accept",
+                                  "Content-Length",
+                                  "Content-Type"
+                                ]
+                              },
+                              "value": {
+                                "type": "string",
+                                "description": "Value of the HTTP header.",
+                                "examples": [
+                                  "*/*",
+                                  "560",
+                                  "application/json; charset=utf-8"
+                                ]
+                              }
+                            }
+                          }
+                        },
+                        "reason_phrase": {
+                          "type": "string",
+                          "description": "HTTP reason phrase of the response.",
+                          "examples": [
+                            "OK",
+                            "Internal Server Error"
+                          ]
+                        },
+                        "status_code": {
+                          "type": "integer",
+                          "description": "HTTP status code of the response.",
+                          "examples": [
+                            200,
+                            500
+                          ]
+                        },
+                        "body": {
+                          "type": "string",
+                          "description": "Body of the response for display purposes. Body must be suitable for display (not binary), and truncated to a reasonable size.",
+                          "examples": [
+                            "{\"user_id\": 2}"
+                          ]
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "location": {
+            "type": "object",
+            "description": "Identifies the vulnerability's location.",
+            "properties": {
+              "hostname": {
+                "type": "string",
+                "description": "The protocol, domain, and port of the application where the vulnerability was found."
+              },
+              "method": {
+                "type": "string",
+                "description": "The HTTP method that was used to request the URL where the vulnerability was found."
+              },
+              "param": {
+                "type": "string",
+                "description": "A value provided by a vulnerability rule related to the found vulnerability. Examples include a header value, or a parameter used in a HTTP POST."
+              },
+              "path": {
+                "type": "string",
+                "description": "The path of the URL where the vulnerability was found. Typically, this would start with a forward slash."
+              }
+            }
+          },
+          "assets": {
+            "type": "array",
+            "description": "Array of build assets associated with vulnerability.",
+            "items": {
+              "type": "object",
+              "description": "Describes an asset associated with vulnerability.",
+              "required": [
+                "type",
+                "name",
+                "url"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "description": "The type of asset",
+                  "enum": [
+                    "http_session",
+                    "postman"
+                  ]
+                },
+                "name": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Display name for asset",
+                  "examples": [
+                    "HTTP Messages",
+                    "Postman Collection"
+                  ]
+                },
+                "url": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Link to asset in build artifacts",
+                  "examples": [
+                    "https://gitlab.com/gitlab-org/security-products/dast/-/jobs/626397001/artifacts/file//output/zap_session.data"
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "remediations": {
+      "type": "array",
+      "description": "An array of objects containing information on available remediations, along with patch diffs to apply.",
+      "items": {
+        "type": "object",
+        "required": [
+          "fixes",
+          "summary",
+          "diff"
+        ],
+        "properties": {
+          "fixes": {
+            "type": "array",
+            "description": "An array of strings that represent references to vulnerabilities fixed by this remediation.",
+            "items": {
+              "type": "object",
+              "required": [
+                "id"
+              ],
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+                  "examples": [
+                    "642735a5-1425-428d-8d4e-3c854885a3c9"
+                  ]
+                }
+              }
+            }
+          },
+          "summary": {
+            "type": "string",
+            "minLength": 1,
+            "description": "An overview of how the vulnerabilities were fixed."
+          },
+          "diff": {
+            "type": "string",
+            "minLength": 1,
+            "description": "A base64-encoded remediation code diff, compatible with git apply."
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/dependency-scanning-report-format.json b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/dependency-scanning-report-format.json
new file mode 100644
index 00000000000..0025c60bfdf
--- /dev/null
+++ b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/dependency-scanning-report-format.json
@@ -0,0 +1,1111 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://gitlab.com/gitlab-org/security-products/security-report-schemas/-/raw/master/dist/dependency-scanning-report-format.json",
+  "title": "Report format for GitLab Dependency Scanning",
+  "description": "This schema provides the the report format for Dependency Scanning analyzers (https://docs.gitlab.com/ee/user/application_security/dependency_scanning).",
+  "definitions": {
+    "detail_type": {
+      "oneOf": [
+        {
+          "$ref": "#/definitions/named_list"
+        },
+        {
+          "$ref": "#/definitions/list"
+        },
+        {
+          "$ref": "#/definitions/table"
+        },
+        {
+          "$ref": "#/definitions/text"
+        },
+        {
+          "$ref": "#/definitions/url"
+        },
+        {
+          "$ref": "#/definitions/code"
+        },
+        {
+          "$ref": "#/definitions/value"
+        },
+        {
+          "$ref": "#/definitions/diff"
+        },
+        {
+          "$ref": "#/definitions/markdown"
+        },
+        {
+          "$ref": "#/definitions/commit"
+        },
+        {
+          "$ref": "#/definitions/file_location"
+        },
+        {
+          "$ref": "#/definitions/module_location"
+        },
+        {
+          "$ref": "#/definitions/code_flows"
+        }
+      ]
+    },
+    "text_value": {
+      "type": "string"
+    },
+    "named_field": {
+      "type": "object",
+      "required": [
+        "name"
+      ],
+      "properties": {
+        "name": {
+          "$ref": "#/definitions/text_value",
+          "type": "string",
+          "minLength": 1
+        },
+        "description": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "named_list": {
+      "type": "object",
+      "description": "An object with named and typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "named-list"
+        },
+        "items": {
+          "type": "object",
+          "patternProperties": {
+            "^.*$": {
+              "allOf": [
+                {
+                  "$ref": "#/definitions/named_field"
+                },
+                {
+                  "$ref": "#/definitions/detail_type"
+                }
+              ]
+            }
+          }
+        }
+      }
+    },
+    "list": {
+      "type": "object",
+      "description": "A list of typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "list"
+        },
+        "items": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        }
+      }
+    },
+    "table": {
+      "type": "object",
+      "description": "A table of typed fields",
+      "required": [
+        "type",
+        "rows"
+      ],
+      "properties": {
+        "type": {
+          "const": "table"
+        },
+        "header": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        },
+        "rows": {
+          "type": "array",
+          "items": {
+            "type": "array",
+            "items": {
+              "$ref": "#/definitions/detail_type"
+            }
+          }
+        }
+      }
+    },
+    "text": {
+      "type": "object",
+      "description": "Raw text",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "text"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "url": {
+      "type": "object",
+      "description": "A single URL",
+      "required": [
+        "type",
+        "href"
+      ],
+      "properties": {
+        "type": {
+          "const": "url"
+        },
+        "text": {
+          "$ref": "#/definitions/text_value"
+        },
+        "href": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "http://mysite.com"
+          ]
+        }
+      }
+    },
+    "code": {
+      "type": "object",
+      "description": "A codeblock",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "code"
+        },
+        "value": {
+          "type": "string"
+        },
+        "lang": {
+          "type": "string",
+          "description": "A programming language"
+        }
+      }
+    },
+    "value": {
+      "type": "object",
+      "description": "A field that can store a range of types of value",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "value"
+        },
+        "value": {
+          "type": [
+            "number",
+            "string",
+            "boolean"
+          ]
+        }
+      }
+    },
+    "diff": {
+      "type": "object",
+      "description": "A diff",
+      "required": [
+        "type",
+        "before",
+        "after"
+      ],
+      "properties": {
+        "type": {
+          "const": "diff"
+        },
+        "before": {
+          "type": "string"
+        },
+        "after": {
+          "type": "string"
+        }
+      }
+    },
+    "markdown": {
+      "type": "object",
+      "description": "GitLab flavoured markdown, see https://docs.gitlab.com/ee/user/markdown.html",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "markdown"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value",
+          "examples": [
+            "Here is markdown `inline code` #1 [test](gitlab.com)\n\n![GitLab Logo](https://about.gitlab.com/images/press/logo/preview/gitlab-logo-white-preview.png)"
+          ]
+        }
+      }
+    },
+    "commit": {
+      "type": "object",
+      "description": "A commit/tag/branch within the GitLab project",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "commit"
+        },
+        "value": {
+          "type": "string",
+          "description": "The commit SHA",
+          "minLength": 1
+        }
+      }
+    },
+    "file_location": {
+      "type": "object",
+      "description": "A location within a file in the project",
+      "required": [
+        "type",
+        "file_name",
+        "line_start"
+      ],
+      "properties": {
+        "type": {
+          "const": "file-location"
+        },
+        "file_name": {
+          "type": "string",
+          "minLength": 1
+        },
+        "line_start": {
+          "type": "integer"
+        },
+        "line_end": {
+          "type": "integer"
+        }
+      }
+    },
+    "module_location": {
+      "type": "object",
+      "description": "A location within a binary module of the form module+relative_offset",
+      "required": [
+        "type",
+        "module_name",
+        "offset"
+      ],
+      "properties": {
+        "type": {
+          "const": "module-location"
+        },
+        "module_name": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "compiled_binary"
+          ]
+        },
+        "offset": {
+          "type": "integer",
+          "examples": [
+            100
+          ]
+        }
+      }
+    },
+    "code_flow_node": {
+      "type": "object",
+      "description": "A code flow node representing a part of a vulnerability flow from source to sink",
+      "required": [
+        "file_location",
+        "node_type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code-flow-node"
+        },
+        "file_location": {
+          "$ref": "#/definitions/file_location"
+        },
+        "node_type": {
+          "type": "string",
+          "description": "Describes a code flow node type",
+          "enum": [
+            "source",
+            "sink",
+            "propagation"
+          ]
+        }
+      },
+      "examples": [
+        {
+          "type": "code-flow-node",
+          "node_type": "propagation",
+          "file_location": {
+            "type": "file-location",
+            "file_name": "file_name.py",
+            "line_start": 4,
+            "line_end": 6
+          }
+        }
+      ]
+    },
+    "code_flows": {
+      "type": "object",
+      "description": "A code flow representing a vulnerability flow from source to sink",
+      "required": [
+        "items",
+        "type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code-flows"
+        },
+        "items": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 10,
+          "items": {
+            "type": "array",
+            "minItems": 1,
+            "items": {
+              "$ref": "#/definitions/code_flow_node"
+            }
+          }
+        }
+      },
+      "examples": [
+        {
+          "type": "code-flows",
+          "items": [
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 1,
+                  "line_end": 2
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "propagation",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 3
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ],
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "different_flow.py",
+                  "line_start": 100,
+                  "line_end": 102
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ]
+          ]
+        }
+      ]
+    }
+  },
+  "self": {
+    "version": "15.1.4"
+  },
+  "type": "object",
+  "required": [
+    "scan",
+    "version",
+    "vulnerabilities"
+  ],
+  "additionalProperties": true,
+  "properties": {
+    "scan": {
+      "type": "object",
+      "required": [
+        "analyzer",
+        "end_time",
+        "scanner",
+        "start_time",
+        "status",
+        "type"
+      ],
+      "properties": {
+        "end_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan finished.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-01-28T03:26:02"
+          ]
+        },
+        "messages": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "Communication intended for the initiator of a scan.",
+            "required": [
+              "level",
+              "value"
+            ],
+            "properties": {
+              "level": {
+                "type": "string",
+                "description": "Describes the severity of the communication. Use info to communicate normal scan behaviour; warn to communicate a potentially recoverable problem, or a partial error; fatal to communicate an issue that causes the scan to halt.",
+                "enum": [
+                  "info",
+                  "warn",
+                  "fatal"
+                ],
+                "examples": [
+                  "info"
+                ]
+              },
+              "value": {
+                "type": "string",
+                "description": "The message to communicate.",
+                "minLength": 1,
+                "examples": [
+                  "Permission denied, scanning aborted"
+                ]
+              }
+            }
+          }
+        },
+        "options": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "A configuration option used for this scan.",
+            "required": [
+              "name",
+              "value"
+            ],
+            "properties": {
+              "name": {
+                "type": "string",
+                "description": "The configuration option name.",
+                "maxLength": 255,
+                "minLength": 1,
+                "examples": [
+                  "DAST_FF_ENABLE_BAS",
+                  "DOCKER_TLS_CERTDIR",
+                  "DS_MAX_DEPTH",
+                  "SECURE_LOG_LEVEL"
+                ]
+              },
+              "source": {
+                "type": "string",
+                "description": "The source of this option.",
+                "enum": [
+                  "argument",
+                  "file",
+                  "env_variable",
+                  "other"
+                ]
+              },
+              "value": {
+                "type": [
+                  "boolean",
+                  "integer",
+                  "null",
+                  "string"
+                ],
+                "description": "The value used for this scan.",
+                "examples": [
+                  true,
+                  2,
+                  null,
+                  "fatal",
+                  ""
+                ]
+              }
+            }
+          }
+        },
+        "analyzer": {
+          "type": "object",
+          "description": "Object defining the analyzer used to perform the scan. Analyzers typically delegate to an underlying scanner to run the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "gitlab-dast"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the analyzer, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "GitLab DAST"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "pattern": "^https?://.+",
+              "description": "A link to more information about the analyzer.",
+              "examples": [
+                "https://docs.gitlab.com/ee/user/application_security/dast"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the analyzer.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            }
+          }
+        },
+        "scanner": {
+          "type": "object",
+          "description": "Object defining the scanner used to perform the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the scanner.",
+              "minLength": 1,
+              "examples": [
+                "my-sast-scanner"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the scanner, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "My SAST Scanner"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "description": "A link to more information about the scanner.",
+              "examples": [
+                "https://scanner.url"
+              ]
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the scanner.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the scanner.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "start_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan started.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-02-14T16:01:59"
+          ]
+        },
+        "status": {
+          "type": "string",
+          "description": "Result of the scan.",
+          "enum": [
+            "success",
+            "failure"
+          ]
+        },
+        "type": {
+          "type": "string",
+          "description": "Type of the scan.",
+          "enum": [
+            "dependency_scanning"
+          ]
+        },
+        "primary_identifiers": {
+          "type": "array",
+          "description": "An unordered array containing an exhaustive list of primary identifiers for which the analyzer may return results",
+          "items": {
+            "type": "object",
+            "required": [
+              "type",
+              "name",
+              "value"
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                "minLength": 1
+              },
+              "name": {
+                "type": "string",
+                "description": "Human-readable name of the identifier.",
+                "minLength": 1
+              },
+              "url": {
+                "type": "string",
+                "description": "URL of the identifier's documentation.",
+                "pattern": "^(https?|ftp)://.+"
+              },
+              "value": {
+                "type": "string",
+                "description": "Value of the identifier, for matching purpose.",
+                "minLength": 1
+              }
+            }
+          }
+        }
+      }
+    },
+    "schema": {
+      "type": "string",
+      "description": "URI pointing to the validating security report schema.",
+      "pattern": "^https?://.+"
+    },
+    "version": {
+      "type": "string",
+      "description": "The version of the schema to which the JSON report conforms.",
+      "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"
+    },
+    "vulnerabilities": {
+      "type": "array",
+      "description": "Array of vulnerability objects.",
+      "items": {
+        "type": "object",
+        "description": "Describes the vulnerability using GitLab Flavored Markdown",
+        "required": [
+          "id",
+          "identifiers",
+          "location"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+            "examples": [
+              "642735a5-1425-428d-8d4e-3c854885a3c9"
+            ]
+          },
+          "name": {
+            "type": "string",
+            "maxLength": 255,
+            "description": "The name of the vulnerability. This must not include the finding's specific information."
+          },
+          "description": {
+            "type": "string",
+            "maxLength": 1048576,
+            "description": "A long text section describing the vulnerability more fully."
+          },
+          "severity": {
+            "type": "string",
+            "description": "How much the vulnerability impacts the software. Possible values are Info, Unknown, Low, Medium, High, or Critical. Note that some analyzers may not report all these possible values.",
+            "enum": [
+              "Info",
+              "Unknown",
+              "Low",
+              "Medium",
+              "High",
+              "Critical"
+            ]
+          },
+          "solution": {
+            "type": "string",
+            "maxLength": 7000,
+            "description": "Explanation of how to fix the vulnerability."
+          },
+          "identifiers": {
+            "type": "array",
+            "minItems": 1,
+            "description": "An ordered array of references that identify a vulnerability on internal or external databases. The first identifier is the Primary Identifier, which has special meaning.",
+            "items": {
+              "type": "object",
+              "required": [
+                "type",
+                "name",
+                "value"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                  "minLength": 1
+                },
+                "name": {
+                  "type": "string",
+                  "description": "Human-readable name of the identifier.",
+                  "minLength": 1
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the identifier's documentation.",
+                  "pattern": "^(https?|ftp)://.+"
+                },
+                "value": {
+                  "type": "string",
+                  "description": "Value of the identifier, for matching purpose.",
+                  "minLength": 1
+                }
+              }
+            }
+          },
+          "cvss_vectors": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 10,
+            "description": "An ordered array of CVSS vectors, each issued by a vendor to rate the vulnerability. The first item in the array is used as the primary CVSS vector, and is used to filter and sort the vulnerability.",
+            "items": {
+              "oneOf": [
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 16,
+                      "maxLength": 128,
+                      "pattern": "^((AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))/)*(AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 32,
+                      "maxLength": 128,
+                      "pattern": "^CVSS:3[.][01]/((AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])/)*(AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                }
+              ]
+            }
+          },
+          "links": {
+            "type": "array",
+            "description": "An array of references to external documentation or articles that describe the vulnerability.",
+            "items": {
+              "type": "object",
+              "required": [
+                "url"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "Name of the vulnerability details link."
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the vulnerability details document.",
+                  "pattern": "^(https?|ftp)://.+"
+                }
+              }
+            }
+          },
+          "details": {
+            "$ref": "#/definitions/named_list/properties/items"
+          },
+          "tracking": {
+            "type": "object",
+            "description": "Describes how this vulnerability should be tracked as the project changes.",
+            "oneOf": [
+              {
+                "description": "Declares that a series of items should be tracked using source-specific tracking methods.",
+                "required": [
+                  "items"
+                ],
+                "properties": {
+                  "type": {
+                    "const": "source"
+                  },
+                  "items": {
+                    "type": "array",
+                    "items": {
+                      "description": "An item that should be tracked using source-specific tracking methods.",
+                      "type": "object",
+                      "required": [
+                        "signatures"
+                      ],
+                      "properties": {
+                        "file": {
+                          "type": "string",
+                          "description": "Path to the file where the vulnerability is located."
+                        },
+                        "start_line": {
+                          "type": "number",
+                          "description": "The first line of the file that includes the vulnerability."
+                        },
+                        "end_line": {
+                          "type": "number",
+                          "description": "The last line of the file that includes the vulnerability."
+                        },
+                        "signatures": {
+                          "type": "array",
+                          "description": "An array of calculated tracking signatures for this tracking item.",
+                          "minItems": 1,
+                          "items": {
+                            "description": "A calculated tracking signature value and metadata.",
+                            "type": "object",
+                            "required": [
+                              "algorithm",
+                              "value"
+                            ],
+                            "properties": {
+                              "algorithm": {
+                                "type": "string",
+                                "description": "The algorithm used to generate the signature."
+                              },
+                              "value": {
+                                "type": "string",
+                                "description": "The result of this signature algorithm."
+                              }
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "Each tracking type must declare its own type."
+              }
+            }
+          },
+          "flags": {
+            "description": "Flags that can be attached to vulnerabilities.",
+            "type": "array",
+            "items": {
+              "type": "object",
+              "description": "Informational flags identified and assigned to a vulnerability.",
+              "required": [
+                "type",
+                "origin",
+                "description"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Result of the scan.",
+                  "enum": [
+                    "flagged-as-likely-false-positive"
+                  ]
+                },
+                "origin": {
+                  "minLength": 1,
+                  "description": "Tool that issued the flag.",
+                  "type": "string"
+                },
+                "description": {
+                  "minLength": 1,
+                  "description": "What the flag is about.",
+                  "type": "string"
+                }
+              }
+            }
+          },
+          "location": {
+            "type": "object",
+            "description": "Identifies the vulnerability's location.",
+            "required": [
+              "file",
+              "dependency"
+            ],
+            "properties": {
+              "file": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Path to the manifest or lock file where the dependency is declared (such as yarn.lock)."
+              },
+              "dependency": {
+                "type": "object",
+                "description": "Describes the dependency of a project where the vulnerability is located.",
+                "required": [
+                  "package",
+                  "version"
+                ],
+                "properties": {
+                  "package": {
+                    "type": "object",
+                    "description": "Provides information on the package where the vulnerability is located.",
+                    "required": [
+                      "name"
+                    ],
+                    "properties": {
+                      "name": {
+                        "type": "string",
+                        "description": "Name of the package where the vulnerability is located."
+                      }
+                    }
+                  },
+                  "version": {
+                    "type": "string",
+                    "description": "Version of the vulnerable package."
+                  },
+                  "direct": {
+                    "type": "boolean",
+                    "description": "Tells whether this is a direct, top-level dependency of the scanned project."
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "remediations": {
+      "type": "array",
+      "description": "An array of objects containing information on available remediations, along with patch diffs to apply.",
+      "items": {
+        "type": "object",
+        "required": [
+          "fixes",
+          "summary",
+          "diff"
+        ],
+        "properties": {
+          "fixes": {
+            "type": "array",
+            "description": "An array of strings that represent references to vulnerabilities fixed by this remediation.",
+            "items": {
+              "type": "object",
+              "required": [
+                "id"
+              ],
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+                  "examples": [
+                    "642735a5-1425-428d-8d4e-3c854885a3c9"
+                  ]
+                }
+              }
+            }
+          },
+          "summary": {
+            "type": "string",
+            "minLength": 1,
+            "description": "An overview of how the vulnerabilities were fixed."
+          },
+          "diff": {
+            "type": "string",
+            "minLength": 1,
+            "description": "A base64-encoded remediation code diff, compatible with git apply."
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/sast-report-format.json b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/sast-report-format.json
new file mode 100644
index 00000000000..2ed55fc7c2f
--- /dev/null
+++ b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/sast-report-format.json
@@ -0,0 +1,1095 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://gitlab.com/gitlab-org/security-products/security-report-schemas/-/raw/master/dist/sast-report-format.json",
+  "title": "Report format for GitLab SAST",
+  "description": "This schema provides the report format for Static Application Security Testing analyzers (https://docs.gitlab.com/ee/user/application_security/sast).",
+  "definitions": {
+    "detail_type": {
+      "oneOf": [
+        {
+          "$ref": "#/definitions/named_list"
+        },
+        {
+          "$ref": "#/definitions/list"
+        },
+        {
+          "$ref": "#/definitions/table"
+        },
+        {
+          "$ref": "#/definitions/text"
+        },
+        {
+          "$ref": "#/definitions/url"
+        },
+        {
+          "$ref": "#/definitions/code"
+        },
+        {
+          "$ref": "#/definitions/value"
+        },
+        {
+          "$ref": "#/definitions/diff"
+        },
+        {
+          "$ref": "#/definitions/markdown"
+        },
+        {
+          "$ref": "#/definitions/commit"
+        },
+        {
+          "$ref": "#/definitions/file_location"
+        },
+        {
+          "$ref": "#/definitions/module_location"
+        },
+        {
+          "$ref": "#/definitions/code_flows"
+        }
+      ]
+    },
+    "text_value": {
+      "type": "string"
+    },
+    "named_field": {
+      "type": "object",
+      "required": [
+        "name"
+      ],
+      "properties": {
+        "name": {
+          "$ref": "#/definitions/text_value",
+          "type": "string",
+          "minLength": 1
+        },
+        "description": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "named_list": {
+      "type": "object",
+      "description": "An object with named and typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "named-list"
+        },
+        "items": {
+          "type": "object",
+          "patternProperties": {
+            "^.*$": {
+              "allOf": [
+                {
+                  "$ref": "#/definitions/named_field"
+                },
+                {
+                  "$ref": "#/definitions/detail_type"
+                }
+              ]
+            }
+          }
+        }
+      }
+    },
+    "list": {
+      "type": "object",
+      "description": "A list of typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "list"
+        },
+        "items": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        }
+      }
+    },
+    "table": {
+      "type": "object",
+      "description": "A table of typed fields",
+      "required": [
+        "type",
+        "rows"
+      ],
+      "properties": {
+        "type": {
+          "const": "table"
+        },
+        "header": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        },
+        "rows": {
+          "type": "array",
+          "items": {
+            "type": "array",
+            "items": {
+              "$ref": "#/definitions/detail_type"
+            }
+          }
+        }
+      }
+    },
+    "text": {
+      "type": "object",
+      "description": "Raw text",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "text"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "url": {
+      "type": "object",
+      "description": "A single URL",
+      "required": [
+        "type",
+        "href"
+      ],
+      "properties": {
+        "type": {
+          "const": "url"
+        },
+        "text": {
+          "$ref": "#/definitions/text_value"
+        },
+        "href": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "http://mysite.com"
+          ]
+        }
+      }
+    },
+    "code": {
+      "type": "object",
+      "description": "A codeblock",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "code"
+        },
+        "value": {
+          "type": "string"
+        },
+        "lang": {
+          "type": "string",
+          "description": "A programming language"
+        }
+      }
+    },
+    "value": {
+      "type": "object",
+      "description": "A field that can store a range of types of value",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "value"
+        },
+        "value": {
+          "type": [
+            "number",
+            "string",
+            "boolean"
+          ]
+        }
+      }
+    },
+    "diff": {
+      "type": "object",
+      "description": "A diff",
+      "required": [
+        "type",
+        "before",
+        "after"
+      ],
+      "properties": {
+        "type": {
+          "const": "diff"
+        },
+        "before": {
+          "type": "string"
+        },
+        "after": {
+          "type": "string"
+        }
+      }
+    },
+    "markdown": {
+      "type": "object",
+      "description": "GitLab flavoured markdown, see https://docs.gitlab.com/ee/user/markdown.html",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "markdown"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value",
+          "examples": [
+            "Here is markdown `inline code` #1 [test](gitlab.com)\n\n![GitLab Logo](https://about.gitlab.com/images/press/logo/preview/gitlab-logo-white-preview.png)"
+          ]
+        }
+      }
+    },
+    "commit": {
+      "type": "object",
+      "description": "A commit/tag/branch within the GitLab project",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "commit"
+        },
+        "value": {
+          "type": "string",
+          "description": "The commit SHA",
+          "minLength": 1
+        }
+      }
+    },
+    "file_location": {
+      "type": "object",
+      "description": "A location within a file in the project",
+      "required": [
+        "type",
+        "file_name",
+        "line_start"
+      ],
+      "properties": {
+        "type": {
+          "const": "file-location"
+        },
+        "file_name": {
+          "type": "string",
+          "minLength": 1
+        },
+        "line_start": {
+          "type": "integer"
+        },
+        "line_end": {
+          "type": "integer"
+        }
+      }
+    },
+    "module_location": {
+      "type": "object",
+      "description": "A location within a binary module of the form module+relative_offset",
+      "required": [
+        "type",
+        "module_name",
+        "offset"
+      ],
+      "properties": {
+        "type": {
+          "const": "module-location"
+        },
+        "module_name": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "compiled_binary"
+          ]
+        },
+        "offset": {
+          "type": "integer",
+          "examples": [
+            100
+          ]
+        }
+      }
+    },
+    "code_flow_node": {
+      "type": "object",
+      "description": "A code flow node representing a part of a vulnerability flow from source to sink",
+      "required": [
+        "file_location",
+        "node_type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code-flow-node"
+        },
+        "file_location": {
+          "$ref": "#/definitions/file_location"
+        },
+        "node_type": {
+          "type": "string",
+          "description": "Describes a code flow node type",
+          "enum": [
+            "source",
+            "sink",
+            "propagation"
+          ]
+        }
+      },
+      "examples": [
+        {
+          "type": "code-flow-node",
+          "node_type": "propagation",
+          "file_location": {
+            "type": "file-location",
+            "file_name": "file_name.py",
+            "line_start": 4,
+            "line_end": 6
+          }
+        }
+      ]
+    },
+    "code_flows": {
+      "type": "object",
+      "description": "A code flow representing a vulnerability flow from source to sink",
+      "required": [
+        "items",
+        "type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code-flows"
+        },
+        "items": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 10,
+          "items": {
+            "type": "array",
+            "minItems": 1,
+            "items": {
+              "$ref": "#/definitions/code_flow_node"
+            }
+          }
+        }
+      },
+      "examples": [
+        {
+          "type": "code-flows",
+          "items": [
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 1,
+                  "line_end": 2
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "propagation",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 3
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ],
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "different_flow.py",
+                  "line_start": 100,
+                  "line_end": 102
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ]
+          ]
+        }
+      ]
+    }
+  },
+  "self": {
+    "version": "15.1.4"
+  },
+  "type": "object",
+  "required": [
+    "scan",
+    "version",
+    "vulnerabilities"
+  ],
+  "additionalProperties": true,
+  "properties": {
+    "scan": {
+      "type": "object",
+      "required": [
+        "analyzer",
+        "end_time",
+        "scanner",
+        "start_time",
+        "status",
+        "type"
+      ],
+      "properties": {
+        "end_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan finished.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-01-28T03:26:02"
+          ]
+        },
+        "messages": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "Communication intended for the initiator of a scan.",
+            "required": [
+              "level",
+              "value"
+            ],
+            "properties": {
+              "level": {
+                "type": "string",
+                "description": "Describes the severity of the communication. Use info to communicate normal scan behaviour; warn to communicate a potentially recoverable problem, or a partial error; fatal to communicate an issue that causes the scan to halt.",
+                "enum": [
+                  "info",
+                  "warn",
+                  "fatal"
+                ],
+                "examples": [
+                  "info"
+                ]
+              },
+              "value": {
+                "type": "string",
+                "description": "The message to communicate.",
+                "minLength": 1,
+                "examples": [
+                  "Permission denied, scanning aborted"
+                ]
+              }
+            }
+          }
+        },
+        "options": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "A configuration option used for this scan.",
+            "required": [
+              "name",
+              "value"
+            ],
+            "properties": {
+              "name": {
+                "type": "string",
+                "description": "The configuration option name.",
+                "maxLength": 255,
+                "minLength": 1,
+                "examples": [
+                  "DAST_FF_ENABLE_BAS",
+                  "DOCKER_TLS_CERTDIR",
+                  "DS_MAX_DEPTH",
+                  "SECURE_LOG_LEVEL"
+                ]
+              },
+              "source": {
+                "type": "string",
+                "description": "The source of this option.",
+                "enum": [
+                  "argument",
+                  "file",
+                  "env_variable",
+                  "other"
+                ]
+              },
+              "value": {
+                "type": [
+                  "boolean",
+                  "integer",
+                  "null",
+                  "string"
+                ],
+                "description": "The value used for this scan.",
+                "examples": [
+                  true,
+                  2,
+                  null,
+                  "fatal",
+                  ""
+                ]
+              }
+            }
+          }
+        },
+        "analyzer": {
+          "type": "object",
+          "description": "Object defining the analyzer used to perform the scan. Analyzers typically delegate to an underlying scanner to run the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "gitlab-dast"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the analyzer, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "GitLab DAST"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "pattern": "^https?://.+",
+              "description": "A link to more information about the analyzer.",
+              "examples": [
+                "https://docs.gitlab.com/ee/user/application_security/dast"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the analyzer.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            }
+          }
+        },
+        "scanner": {
+          "type": "object",
+          "description": "Object defining the scanner used to perform the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the scanner.",
+              "minLength": 1,
+              "examples": [
+                "my-sast-scanner"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the scanner, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "My SAST Scanner"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "description": "A link to more information about the scanner.",
+              "examples": [
+                "https://scanner.url"
+              ]
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the scanner.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the scanner.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "start_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan started.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-02-14T16:01:59"
+          ]
+        },
+        "status": {
+          "type": "string",
+          "description": "Result of the scan.",
+          "enum": [
+            "success",
+            "failure"
+          ]
+        },
+        "type": {
+          "type": "string",
+          "description": "Type of the scan.",
+          "enum": [
+            "sast"
+          ]
+        },
+        "primary_identifiers": {
+          "type": "array",
+          "description": "An unordered array containing an exhaustive list of primary identifiers for which the analyzer may return results",
+          "items": {
+            "type": "object",
+            "required": [
+              "type",
+              "name",
+              "value"
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                "minLength": 1
+              },
+              "name": {
+                "type": "string",
+                "description": "Human-readable name of the identifier.",
+                "minLength": 1
+              },
+              "url": {
+                "type": "string",
+                "description": "URL of the identifier's documentation.",
+                "pattern": "^(https?|ftp)://.+"
+              },
+              "value": {
+                "type": "string",
+                "description": "Value of the identifier, for matching purpose.",
+                "minLength": 1
+              }
+            }
+          }
+        }
+      }
+    },
+    "schema": {
+      "type": "string",
+      "description": "URI pointing to the validating security report schema.",
+      "pattern": "^https?://.+"
+    },
+    "version": {
+      "type": "string",
+      "description": "The version of the schema to which the JSON report conforms.",
+      "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"
+    },
+    "vulnerabilities": {
+      "type": "array",
+      "description": "Array of vulnerability objects.",
+      "items": {
+        "type": "object",
+        "description": "Describes the vulnerability using GitLab Flavored Markdown",
+        "required": [
+          "id",
+          "identifiers",
+          "location"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+            "examples": [
+              "642735a5-1425-428d-8d4e-3c854885a3c9"
+            ]
+          },
+          "name": {
+            "type": "string",
+            "maxLength": 255,
+            "description": "The name of the vulnerability. This must not include the finding's specific information."
+          },
+          "description": {
+            "type": "string",
+            "maxLength": 1048576,
+            "description": "A long text section describing the vulnerability more fully."
+          },
+          "severity": {
+            "type": "string",
+            "description": "How much the vulnerability impacts the software. Possible values are Info, Unknown, Low, Medium, High, or Critical. Note that some analyzers may not report all these possible values.",
+            "enum": [
+              "Info",
+              "Unknown",
+              "Low",
+              "Medium",
+              "High",
+              "Critical"
+            ]
+          },
+          "solution": {
+            "type": "string",
+            "maxLength": 7000,
+            "description": "Explanation of how to fix the vulnerability."
+          },
+          "identifiers": {
+            "type": "array",
+            "minItems": 1,
+            "description": "An ordered array of references that identify a vulnerability on internal or external databases. The first identifier is the Primary Identifier, which has special meaning.",
+            "items": {
+              "type": "object",
+              "required": [
+                "type",
+                "name",
+                "value"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                  "minLength": 1
+                },
+                "name": {
+                  "type": "string",
+                  "description": "Human-readable name of the identifier.",
+                  "minLength": 1
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the identifier's documentation.",
+                  "pattern": "^(https?|ftp)://.+"
+                },
+                "value": {
+                  "type": "string",
+                  "description": "Value of the identifier, for matching purpose.",
+                  "minLength": 1
+                }
+              }
+            }
+          },
+          "cvss_vectors": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 10,
+            "description": "An ordered array of CVSS vectors, each issued by a vendor to rate the vulnerability. The first item in the array is used as the primary CVSS vector, and is used to filter and sort the vulnerability.",
+            "items": {
+              "oneOf": [
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 16,
+                      "maxLength": 128,
+                      "pattern": "^((AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))/)*(AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 32,
+                      "maxLength": 128,
+                      "pattern": "^CVSS:3[.][01]/((AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])/)*(AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                }
+              ]
+            }
+          },
+          "links": {
+            "type": "array",
+            "description": "An array of references to external documentation or articles that describe the vulnerability.",
+            "items": {
+              "type": "object",
+              "required": [
+                "url"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "Name of the vulnerability details link."
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the vulnerability details document.",
+                  "pattern": "^(https?|ftp)://.+"
+                }
+              }
+            }
+          },
+          "details": {
+            "$ref": "#/definitions/named_list/properties/items"
+          },
+          "tracking": {
+            "type": "object",
+            "description": "Describes how this vulnerability should be tracked as the project changes.",
+            "oneOf": [
+              {
+                "description": "Declares that a series of items should be tracked using source-specific tracking methods.",
+                "required": [
+                  "items"
+                ],
+                "properties": {
+                  "type": {
+                    "const": "source"
+                  },
+                  "items": {
+                    "type": "array",
+                    "items": {
+                      "description": "An item that should be tracked using source-specific tracking methods.",
+                      "type": "object",
+                      "required": [
+                        "signatures"
+                      ],
+                      "properties": {
+                        "file": {
+                          "type": "string",
+                          "description": "Path to the file where the vulnerability is located."
+                        },
+                        "start_line": {
+                          "type": "number",
+                          "description": "The first line of the file that includes the vulnerability."
+                        },
+                        "end_line": {
+                          "type": "number",
+                          "description": "The last line of the file that includes the vulnerability."
+                        },
+                        "signatures": {
+                          "type": "array",
+                          "description": "An array of calculated tracking signatures for this tracking item.",
+                          "minItems": 1,
+                          "items": {
+                            "description": "A calculated tracking signature value and metadata.",
+                            "type": "object",
+                            "required": [
+                              "algorithm",
+                              "value"
+                            ],
+                            "properties": {
+                              "algorithm": {
+                                "type": "string",
+                                "description": "The algorithm used to generate the signature."
+                              },
+                              "value": {
+                                "type": "string",
+                                "description": "The result of this signature algorithm."
+                              }
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "Each tracking type must declare its own type."
+              }
+            }
+          },
+          "flags": {
+            "description": "Flags that can be attached to vulnerabilities.",
+            "type": "array",
+            "items": {
+              "type": "object",
+              "description": "Informational flags identified and assigned to a vulnerability.",
+              "required": [
+                "type",
+                "origin",
+                "description"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Result of the scan.",
+                  "enum": [
+                    "flagged-as-likely-false-positive"
+                  ]
+                },
+                "origin": {
+                  "minLength": 1,
+                  "description": "Tool that issued the flag.",
+                  "type": "string"
+                },
+                "description": {
+                  "minLength": 1,
+                  "description": "What the flag is about.",
+                  "type": "string"
+                }
+              }
+            }
+          },
+          "location": {
+            "type": "object",
+            "description": "Identifies the vulnerability's location.",
+            "properties": {
+              "file": {
+                "type": "string",
+                "description": "Path to the file where the vulnerability is located."
+              },
+              "start_line": {
+                "type": "number",
+                "description": "The first line of the code affected by the vulnerability."
+              },
+              "end_line": {
+                "type": "number",
+                "description": "The last line of the code affected by the vulnerability."
+              },
+              "class": {
+                "type": "string",
+                "description": "Provides the name of the class where the vulnerability is located."
+              },
+              "method": {
+                "type": "string",
+                "description": "Provides the name of the method where the vulnerability is located."
+              }
+            }
+          },
+          "raw_source_code_extract": {
+            "type": "string",
+            "description": "Provides an unsanitized excerpt of the affected source code."
+          }
+        }
+      }
+    },
+    "remediations": {
+      "type": "array",
+      "description": "An array of objects containing information on available remediations, along with patch diffs to apply.",
+      "items": {
+        "type": "object",
+        "required": [
+          "fixes",
+          "summary",
+          "diff"
+        ],
+        "properties": {
+          "fixes": {
+            "type": "array",
+            "description": "An array of strings that represent references to vulnerabilities fixed by this remediation.",
+            "items": {
+              "type": "object",
+              "required": [
+                "id"
+              ],
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+                  "examples": [
+                    "642735a5-1425-428d-8d4e-3c854885a3c9"
+                  ]
+                }
+              }
+            }
+          },
+          "summary": {
+            "type": "string",
+            "minLength": 1,
+            "description": "An overview of how the vulnerabilities were fixed."
+          },
+          "diff": {
+            "type": "string",
+            "minLength": 1,
+            "description": "A base64-encoded remediation code diff, compatible with git apply."
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/secret-detection-report-format.json b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/secret-detection-report-format.json
new file mode 100644
index 00000000000..4af210662fb
--- /dev/null
+++ b/lib/gitlab/ci/parsers/security/validators/schemas/15.1.4/secret-detection-report-format.json
@@ -0,0 +1,1119 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://gitlab.com/gitlab-org/security-products/security-report-schemas/-/raw/master/dist/secret-detection-report-format.json",
+  "title": "Report format for GitLab Secret Detection",
+  "description": "This schema provides the the report format for the Secret Detection analyzer (https://docs.gitlab.com/ee/user/application_security/secret_detection)",
+  "definitions": {
+    "detail_type": {
+      "oneOf": [
+        {
+          "$ref": "#/definitions/named_list"
+        },
+        {
+          "$ref": "#/definitions/list"
+        },
+        {
+          "$ref": "#/definitions/table"
+        },
+        {
+          "$ref": "#/definitions/text"
+        },
+        {
+          "$ref": "#/definitions/url"
+        },
+        {
+          "$ref": "#/definitions/code"
+        },
+        {
+          "$ref": "#/definitions/value"
+        },
+        {
+          "$ref": "#/definitions/diff"
+        },
+        {
+          "$ref": "#/definitions/markdown"
+        },
+        {
+          "$ref": "#/definitions/commit"
+        },
+        {
+          "$ref": "#/definitions/file_location"
+        },
+        {
+          "$ref": "#/definitions/module_location"
+        },
+        {
+          "$ref": "#/definitions/code_flows"
+        }
+      ]
+    },
+    "text_value": {
+      "type": "string"
+    },
+    "named_field": {
+      "type": "object",
+      "required": [
+        "name"
+      ],
+      "properties": {
+        "name": {
+          "$ref": "#/definitions/text_value",
+          "type": "string",
+          "minLength": 1
+        },
+        "description": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "named_list": {
+      "type": "object",
+      "description": "An object with named and typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "named-list"
+        },
+        "items": {
+          "type": "object",
+          "patternProperties": {
+            "^.*$": {
+              "allOf": [
+                {
+                  "$ref": "#/definitions/named_field"
+                },
+                {
+                  "$ref": "#/definitions/detail_type"
+                }
+              ]
+            }
+          }
+        }
+      }
+    },
+    "list": {
+      "type": "object",
+      "description": "A list of typed fields",
+      "required": [
+        "type",
+        "items"
+      ],
+      "properties": {
+        "type": {
+          "const": "list"
+        },
+        "items": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        }
+      }
+    },
+    "table": {
+      "type": "object",
+      "description": "A table of typed fields",
+      "required": [
+        "type",
+        "rows"
+      ],
+      "properties": {
+        "type": {
+          "const": "table"
+        },
+        "header": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/detail_type"
+          }
+        },
+        "rows": {
+          "type": "array",
+          "items": {
+            "type": "array",
+            "items": {
+              "$ref": "#/definitions/detail_type"
+            }
+          }
+        }
+      }
+    },
+    "text": {
+      "type": "object",
+      "description": "Raw text",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "text"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value"
+        }
+      }
+    },
+    "url": {
+      "type": "object",
+      "description": "A single URL",
+      "required": [
+        "type",
+        "href"
+      ],
+      "properties": {
+        "type": {
+          "const": "url"
+        },
+        "text": {
+          "$ref": "#/definitions/text_value"
+        },
+        "href": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "http://mysite.com"
+          ]
+        }
+      }
+    },
+    "code": {
+      "type": "object",
+      "description": "A codeblock",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "code"
+        },
+        "value": {
+          "type": "string"
+        },
+        "lang": {
+          "type": "string",
+          "description": "A programming language"
+        }
+      }
+    },
+    "value": {
+      "type": "object",
+      "description": "A field that can store a range of types of value",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "value"
+        },
+        "value": {
+          "type": [
+            "number",
+            "string",
+            "boolean"
+          ]
+        }
+      }
+    },
+    "diff": {
+      "type": "object",
+      "description": "A diff",
+      "required": [
+        "type",
+        "before",
+        "after"
+      ],
+      "properties": {
+        "type": {
+          "const": "diff"
+        },
+        "before": {
+          "type": "string"
+        },
+        "after": {
+          "type": "string"
+        }
+      }
+    },
+    "markdown": {
+      "type": "object",
+      "description": "GitLab flavoured markdown, see https://docs.gitlab.com/ee/user/markdown.html",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "markdown"
+        },
+        "value": {
+          "$ref": "#/definitions/text_value",
+          "examples": [
+            "Here is markdown `inline code` #1 [test](gitlab.com)\n\n![GitLab Logo](https://about.gitlab.com/images/press/logo/preview/gitlab-logo-white-preview.png)"
+          ]
+        }
+      }
+    },
+    "commit": {
+      "type": "object",
+      "description": "A commit/tag/branch within the GitLab project",
+      "required": [
+        "type",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "const": "commit"
+        },
+        "value": {
+          "type": "string",
+          "description": "The commit SHA",
+          "minLength": 1
+        }
+      }
+    },
+    "file_location": {
+      "type": "object",
+      "description": "A location within a file in the project",
+      "required": [
+        "type",
+        "file_name",
+        "line_start"
+      ],
+      "properties": {
+        "type": {
+          "const": "file-location"
+        },
+        "file_name": {
+          "type": "string",
+          "minLength": 1
+        },
+        "line_start": {
+          "type": "integer"
+        },
+        "line_end": {
+          "type": "integer"
+        }
+      }
+    },
+    "module_location": {
+      "type": "object",
+      "description": "A location within a binary module of the form module+relative_offset",
+      "required": [
+        "type",
+        "module_name",
+        "offset"
+      ],
+      "properties": {
+        "type": {
+          "const": "module-location"
+        },
+        "module_name": {
+          "type": "string",
+          "minLength": 1,
+          "examples": [
+            "compiled_binary"
+          ]
+        },
+        "offset": {
+          "type": "integer",
+          "examples": [
+            100
+          ]
+        }
+      }
+    },
+    "code_flow_node": {
+      "type": "object",
+      "description": "A code flow node representing a part of a vulnerability flow from source to sink",
+      "required": [
+        "file_location",
+        "node_type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code-flow-node"
+        },
+        "file_location": {
+          "$ref": "#/definitions/file_location"
+        },
+        "node_type": {
+          "type": "string",
+          "description": "Describes a code flow node type",
+          "enum": [
+            "source",
+            "sink",
+            "propagation"
+          ]
+        }
+      },
+      "examples": [
+        {
+          "type": "code-flow-node",
+          "node_type": "propagation",
+          "file_location": {
+            "type": "file-location",
+            "file_name": "file_name.py",
+            "line_start": 4,
+            "line_end": 6
+          }
+        }
+      ]
+    },
+    "code_flows": {
+      "type": "object",
+      "description": "A code flow representing a vulnerability flow from source to sink",
+      "required": [
+        "items",
+        "type"
+      ],
+      "properties": {
+        "type": {
+          "const": "code-flows"
+        },
+        "items": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 10,
+          "items": {
+            "type": "array",
+            "minItems": 1,
+            "items": {
+              "$ref": "#/definitions/code_flow_node"
+            }
+          }
+        }
+      },
+      "examples": [
+        {
+          "type": "code-flows",
+          "items": [
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 1,
+                  "line_end": 2
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "propagation",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 3
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ],
+            [
+              {
+                "type": "code-flow-node",
+                "node_type": "source",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "different_flow.py",
+                  "line_start": 100,
+                  "line_end": 102
+                }
+              },
+              {
+                "type": "code-flow-node",
+                "node_type": "sink",
+                "file_location": {
+                  "type": "file-location",
+                  "file_name": "file_name.py",
+                  "line_start": 4,
+                  "line_end": 6
+                }
+              }
+            ]
+          ]
+        }
+      ]
+    }
+  },
+  "self": {
+    "version": "15.1.4"
+  },
+  "type": "object",
+  "required": [
+    "scan",
+    "version",
+    "vulnerabilities"
+  ],
+  "additionalProperties": true,
+  "properties": {
+    "scan": {
+      "type": "object",
+      "required": [
+        "analyzer",
+        "end_time",
+        "scanner",
+        "start_time",
+        "status",
+        "type"
+      ],
+      "properties": {
+        "end_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan finished.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-01-28T03:26:02"
+          ]
+        },
+        "messages": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "Communication intended for the initiator of a scan.",
+            "required": [
+              "level",
+              "value"
+            ],
+            "properties": {
+              "level": {
+                "type": "string",
+                "description": "Describes the severity of the communication. Use info to communicate normal scan behaviour; warn to communicate a potentially recoverable problem, or a partial error; fatal to communicate an issue that causes the scan to halt.",
+                "enum": [
+                  "info",
+                  "warn",
+                  "fatal"
+                ],
+                "examples": [
+                  "info"
+                ]
+              },
+              "value": {
+                "type": "string",
+                "description": "The message to communicate.",
+                "minLength": 1,
+                "examples": [
+                  "Permission denied, scanning aborted"
+                ]
+              }
+            }
+          }
+        },
+        "options": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "description": "A configuration option used for this scan.",
+            "required": [
+              "name",
+              "value"
+            ],
+            "properties": {
+              "name": {
+                "type": "string",
+                "description": "The configuration option name.",
+                "maxLength": 255,
+                "minLength": 1,
+                "examples": [
+                  "DAST_FF_ENABLE_BAS",
+                  "DOCKER_TLS_CERTDIR",
+                  "DS_MAX_DEPTH",
+                  "SECURE_LOG_LEVEL"
+                ]
+              },
+              "source": {
+                "type": "string",
+                "description": "The source of this option.",
+                "enum": [
+                  "argument",
+                  "file",
+                  "env_variable",
+                  "other"
+                ]
+              },
+              "value": {
+                "type": [
+                  "boolean",
+                  "integer",
+                  "null",
+                  "string"
+                ],
+                "description": "The value used for this scan.",
+                "examples": [
+                  true,
+                  2,
+                  null,
+                  "fatal",
+                  ""
+                ]
+              }
+            }
+          }
+        },
+        "analyzer": {
+          "type": "object",
+          "description": "Object defining the analyzer used to perform the scan. Analyzers typically delegate to an underlying scanner to run the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "gitlab-dast"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the analyzer, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "GitLab DAST"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "pattern": "^https?://.+",
+              "description": "A link to more information about the analyzer.",
+              "examples": [
+                "https://docs.gitlab.com/ee/user/application_security/dast"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the analyzer.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the analyzer.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            }
+          }
+        },
+        "scanner": {
+          "type": "object",
+          "description": "Object defining the scanner used to perform the scan.",
+          "required": [
+            "id",
+            "name",
+            "version",
+            "vendor"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Unique id that identifies the scanner.",
+              "minLength": 1,
+              "examples": [
+                "my-sast-scanner"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "description": "A human readable value that identifies the scanner, not required to be unique.",
+              "minLength": 1,
+              "examples": [
+                "My SAST Scanner"
+              ]
+            },
+            "url": {
+              "type": "string",
+              "description": "A link to more information about the scanner.",
+              "examples": [
+                "https://scanner.url"
+              ]
+            },
+            "version": {
+              "type": "string",
+              "description": "The version of the scanner.",
+              "minLength": 1,
+              "examples": [
+                "1.0.2"
+              ]
+            },
+            "vendor": {
+              "description": "The vendor/maintainer of the scanner.",
+              "type": "object",
+              "required": [
+                "name"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "The name of the vendor.",
+                  "minLength": 1,
+                  "examples": [
+                    "GitLab"
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "start_time": {
+          "type": "string",
+          "description": "ISO8601 UTC value with format yyyy-mm-ddThh:mm:ss, representing when the scan started.",
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}$",
+          "examples": [
+            "2020-02-14T16:01:59"
+          ]
+        },
+        "status": {
+          "type": "string",
+          "description": "Result of the scan.",
+          "enum": [
+            "success",
+            "failure"
+          ]
+        },
+        "type": {
+          "type": "string",
+          "description": "Type of the scan.",
+          "enum": [
+            "secret_detection"
+          ]
+        },
+        "primary_identifiers": {
+          "type": "array",
+          "description": "An unordered array containing an exhaustive list of primary identifiers for which the analyzer may return results",
+          "items": {
+            "type": "object",
+            "required": [
+              "type",
+              "name",
+              "value"
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                "minLength": 1
+              },
+              "name": {
+                "type": "string",
+                "description": "Human-readable name of the identifier.",
+                "minLength": 1
+              },
+              "url": {
+                "type": "string",
+                "description": "URL of the identifier's documentation.",
+                "pattern": "^(https?|ftp)://.+"
+              },
+              "value": {
+                "type": "string",
+                "description": "Value of the identifier, for matching purpose.",
+                "minLength": 1
+              }
+            }
+          }
+        }
+      }
+    },
+    "schema": {
+      "type": "string",
+      "description": "URI pointing to the validating security report schema.",
+      "pattern": "^https?://.+"
+    },
+    "version": {
+      "type": "string",
+      "description": "The version of the schema to which the JSON report conforms.",
+      "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"
+    },
+    "vulnerabilities": {
+      "type": "array",
+      "description": "Array of vulnerability objects.",
+      "items": {
+        "type": "object",
+        "description": "Describes the vulnerability using GitLab Flavored Markdown",
+        "required": [
+          "id",
+          "identifiers",
+          "location"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+            "examples": [
+              "642735a5-1425-428d-8d4e-3c854885a3c9"
+            ]
+          },
+          "name": {
+            "type": "string",
+            "maxLength": 255,
+            "description": "The name of the vulnerability. This must not include the finding's specific information."
+          },
+          "description": {
+            "type": "string",
+            "maxLength": 1048576,
+            "description": "A long text section describing the vulnerability more fully."
+          },
+          "severity": {
+            "type": "string",
+            "description": "How much the vulnerability impacts the software. Possible values are Info, Unknown, Low, Medium, High, or Critical. Note that some analyzers may not report all these possible values.",
+            "enum": [
+              "Info",
+              "Unknown",
+              "Low",
+              "Medium",
+              "High",
+              "Critical"
+            ]
+          },
+          "solution": {
+            "type": "string",
+            "maxLength": 7000,
+            "description": "Explanation of how to fix the vulnerability."
+          },
+          "identifiers": {
+            "type": "array",
+            "minItems": 1,
+            "description": "An ordered array of references that identify a vulnerability on internal or external databases. The first identifier is the Primary Identifier, which has special meaning.",
+            "items": {
+              "type": "object",
+              "required": [
+                "type",
+                "name",
+                "value"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "description": "for example, cve, cwe, osvdb, usn, or an analyzer-dependent type such as gemnasium).",
+                  "minLength": 1
+                },
+                "name": {
+                  "type": "string",
+                  "description": "Human-readable name of the identifier.",
+                  "minLength": 1
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the identifier's documentation.",
+                  "pattern": "^(https?|ftp)://.+"
+                },
+                "value": {
+                  "type": "string",
+                  "description": "Value of the identifier, for matching purpose.",
+                  "minLength": 1
+                }
+              }
+            }
+          },
+          "cvss_vectors": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 10,
+            "description": "An ordered array of CVSS vectors, each issued by a vendor to rate the vulnerability. The first item in the array is used as the primary CVSS vector, and is used to filter and sort the vulnerability.",
+            "items": {
+              "oneOf": [
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 16,
+                      "maxLength": 128,
+                      "pattern": "^((AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))/)*(AV:[NAL]|AC:[LMH]|Au:[MSN]|[CIA]:[NPC]|E:(U|POC|F|H|ND)|RL:(OF|TF|W|U|ND)|RC:(UC|UR|C|ND)|CDP:(N|L|LM|MH|H|ND)|TD:(N|L|M|H|ND)|[CIA]R:(L|M|H|ND))$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "vendor": {
+                      "type": "string",
+                      "minLength": 1,
+                      "default": "unknown"
+                    },
+                    "vector": {
+                      "type": "string",
+                      "minLength": 32,
+                      "maxLength": 128,
+                      "pattern": "^CVSS:3[.][01]/((AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])/)*(AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])$"
+                    }
+                  },
+                  "required": [
+                    "vendor",
+                    "vector"
+                  ]
+                }
+              ]
+            }
+          },
+          "links": {
+            "type": "array",
+            "description": "An array of references to external documentation or articles that describe the vulnerability.",
+            "items": {
+              "type": "object",
+              "required": [
+                "url"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "Name of the vulnerability details link."
+                },
+                "url": {
+                  "type": "string",
+                  "description": "URL of the vulnerability details document.",
+                  "pattern": "^(https?|ftp)://.+"
+                }
+              }
+            }
+          },
+          "details": {
+            "$ref": "#/definitions/named_list/properties/items"
+          },
+          "tracking": {
+            "type": "object",
+            "description": "Describes how this vulnerability should be tracked as the project changes.",
+            "oneOf": [
+              {
+                "description": "Declares that a series of items should be tracked using source-specific tracking methods.",
+                "required": [
+                  "items"
+                ],
+                "properties": {
+                  "type": {
+                    "const": "source"
+                  },
+                  "items": {
+                    "type": "array",
+                    "items": {
+                      "description": "An item that should be tracked using source-specific tracking methods.",
+                      "type": "object",
+                      "required": [
+                        "signatures"
+                      ],
+                      "properties": {
+                        "file": {
+                          "type": "string",
+                          "description": "Path to the file where the vulnerability is located."
+                        },
+                        "start_line": {
+                          "type": "number",
+                          "description": "The first line of the file that includes the vulnerability."
+                        },
+                        "end_line": {
+                          "type": "number",
+                          "description": "The last line of the file that includes the vulnerability."
+                        },
+                        "signatures": {
+                          "type": "array",
+                          "description": "An array of calculated tracking signatures for this tracking item.",
+                          "minItems": 1,
+                          "items": {
+                            "description": "A calculated tracking signature value and metadata.",
+                            "type": "object",
+                            "required": [
+                              "algorithm",
+                              "value"
+                            ],
+                            "properties": {
+                              "algorithm": {
+                                "type": "string",
+                                "description": "The algorithm used to generate the signature."
+                              },
+                              "value": {
+                                "type": "string",
+                                "description": "The result of this signature algorithm."
+                              }
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "description": "Each tracking type must declare its own type."
+              }
+            }
+          },
+          "flags": {
+            "description": "Flags that can be attached to vulnerabilities.",
+            "type": "array",
+            "items": {
+              "type": "object",
+              "description": "Informational flags identified and assigned to a vulnerability.",
+              "required": [
+                "type",
+                "origin",
+                "description"
+              ],
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Result of the scan.",
+                  "enum": [
+                    "flagged-as-likely-false-positive"
+                  ]
+                },
+                "origin": {
+                  "minLength": 1,
+                  "description": "Tool that issued the flag.",
+                  "type": "string"
+                },
+                "description": {
+                  "minLength": 1,
+                  "description": "What the flag is about.",
+                  "type": "string"
+                }
+              }
+            }
+          },
+          "location": {
+            "required": [
+              "commit"
+            ],
+            "type": "object",
+            "properties": {
+              "file": {
+                "type": "string",
+                "description": "Path to the file where the vulnerability is located"
+              },
+              "commit": {
+                "type": "object",
+                "description": "Represents the commit in which the vulnerability was detected",
+                "required": [
+                  "sha"
+                ],
+                "properties": {
+                  "author": {
+                    "type": "string"
+                  },
+                  "date": {
+                    "type": "string"
+                  },
+                  "message": {
+                    "type": "string"
+                  },
+                  "sha": {
+                    "type": "string",
+                    "minLength": 1
+                  }
+                }
+              },
+              "start_line": {
+                "type": "number",
+                "description": "The first line of the code affected by the vulnerability"
+              },
+              "end_line": {
+                "type": "number",
+                "description": "The last line of the code affected by the vulnerability"
+              },
+              "class": {
+                "type": "string",
+                "description": "Provides the name of the class where the vulnerability is located"
+              },
+              "method": {
+                "type": "string",
+                "description": "Provides the name of the method where the vulnerability is located"
+              }
+            }
+          },
+          "raw_source_code_extract": {
+            "type": "string",
+            "description": "Provides an unsanitized excerpt of the affected source code."
+          }
+        }
+      }
+    },
+    "remediations": {
+      "type": "array",
+      "description": "An array of objects containing information on available remediations, along with patch diffs to apply.",
+      "items": {
+        "type": "object",
+        "required": [
+          "fixes",
+          "summary",
+          "diff"
+        ],
+        "properties": {
+          "fixes": {
+            "type": "array",
+            "description": "An array of strings that represent references to vulnerabilities fixed by this remediation.",
+            "items": {
+              "type": "object",
+              "required": [
+                "id"
+              ],
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Unique identifier of the vulnerability. This is recommended to be a UUID.",
+                  "examples": [
+                    "642735a5-1425-428d-8d4e-3c854885a3c9"
+                  ]
+                }
+              }
+            }
+          },
+          "summary": {
+            "type": "string",
+            "minLength": 1,
+            "description": "An overview of how the vulnerabilities were fixed."
+          },
+          "diff": {
+            "type": "string",
+            "minLength": 1,
+            "description": "A base64-encoded remediation code diff, compatible with git apply."
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/lib/gitlab/ci/pipeline/chain/command.rb b/lib/gitlab/ci/pipeline/chain/command.rb
index 18459fdce63..aa3c0f7ecc8 100644
--- a/lib/gitlab/ci/pipeline/chain/command.rb
+++ b/lib/gitlab/ci/pipeline/chain/command.rb
@@ -33,6 +33,10 @@ module Gitlab
           def execution_policy_mode?
             false # to be overridden in EE
           end
+
+          def pipeline_policy_context
+            # to be overridden in EE
+          end
           # :nocov:
           # rubocop:enable Gitlab/NoCodeCoverageComment
 
diff --git a/lib/gitlab/ci/pipeline/chain/config/process.rb b/lib/gitlab/ci/pipeline/chain/config/process.rb
index a3d0d2bffc7..130940298a4 100644
--- a/lib/gitlab/ci/pipeline/chain/config/process.rb
+++ b/lib/gitlab/ci/pipeline/chain/config/process.rb
@@ -12,19 +12,7 @@ module Gitlab
               raise ArgumentError, 'missing config content' unless @command.config_content
 
               result = logger.instrument(:pipeline_config_process, once: true) do
-                processor = ::Gitlab::Ci::YamlProcessor.new(
-                  @command.config_content, {
-                    project: project,
-                    pipeline: @pipeline,
-                    sha: @pipeline.sha,
-                    source: @pipeline.source,
-                    user: current_user,
-                    parent_pipeline: parent_pipeline,
-                    pipeline_config: @command.pipeline_config,
-                    logger: logger
-                  }
-                )
-
+                processor = ::Gitlab::Ci::YamlProcessor.new(@command.config_content, yaml_processor_opts)
                 processor.execute
               end
 
@@ -54,6 +42,19 @@ module Gitlab
 
             private
 
+            def yaml_processor_opts
+              {
+                project: project,
+                pipeline: @pipeline,
+                sha: @pipeline.sha,
+                source: @pipeline.source,
+                user: current_user,
+                parent_pipeline: parent_pipeline,
+                pipeline_config: @command.pipeline_config,
+                logger: logger
+              }
+            end
+
             def add_warnings_to_pipeline(warnings)
               return unless warnings.present?
 
@@ -65,3 +66,5 @@ module Gitlab
     end
   end
 end
+
+Gitlab::Ci::Pipeline::Chain::Config::Process.prepend_mod
diff --git a/lib/gitlab/ci/pipeline/seed/build.rb b/lib/gitlab/ci/pipeline/seed/build.rb
index 98f488d0f38..80312296909 100644
--- a/lib/gitlab/ci/pipeline/seed/build.rb
+++ b/lib/gitlab/ci/pipeline/seed/build.rb
@@ -94,16 +94,6 @@ module Gitlab
 
           delegate :logger, to: :@context
 
-          def initialize_processable
-            return unless reuse_build_in_seed_context?
-
-            if bridge?
-              ::Ci::Bridge.new(initial_attributes)
-            else
-              ::Ci::Build.new(initial_attributes)
-            end
-          end
-
           def all_of_only?
             @only.all? { |spec| spec.satisfied_by?(@pipeline, evaluate_context) }
           end
diff --git a/lib/gitlab/ci/yaml_processor.rb b/lib/gitlab/ci/yaml_processor.rb
index 0aec000e1a7..b6f8bf20e19 100644
--- a/lib/gitlab/ci/yaml_processor.rb
+++ b/lib/gitlab/ci/yaml_processor.rb
@@ -24,7 +24,7 @@ module Gitlab
 
         verify_project_sha! if verify_project_sha?
 
-        @ci_config = Gitlab::Ci::Config.new(@config_content, **@opts)
+        @ci_config = Gitlab::Ci::Config.new(@config_content, **ci_config_opts)
 
         unless @ci_config.valid?
           return Result.new(ci_config: @ci_config, errors: @ci_config.errors, warnings: @ci_config.warnings)
@@ -41,6 +41,12 @@ module Gitlab
 
       private
 
+      attr_reader :opts
+
+      def ci_config_opts
+        @opts
+      end
+
       def project
         @opts[:project]
       end
diff --git a/lib/gitlab/data_builder/issuable.rb b/lib/gitlab/data_builder/issuable.rb
index 57a69c7c0c1..c50a072ed8e 100644
--- a/lib/gitlab/data_builder/issuable.rb
+++ b/lib/gitlab/data_builder/issuable.rb
@@ -11,7 +11,7 @@ module Gitlab
         @issuable = issuable
       end
 
-      def build(user: nil, changes: {})
+      def build(user: nil, changes: {}, action: nil)
         hook_data = {
           object_kind: object_kind,
           event_type: event_type,
@@ -24,6 +24,7 @@ module Gitlab
           repository: issuable.project&.hook_attrs&.slice(:name, :url, :description, :homepage)
         }
 
+        hook_data[:object_attributes][:action] = action if action
         hook_data[:assignees] = issuable.assignees.map(&:hook_attrs) if issuable.assignees.any?
 
         if issuable.allows_reviewers? && issuable.reviewers.any?
diff --git a/locale/gitlab.pot b/locale/gitlab.pot
index 7805583d939..f6bc7b2e729 100644
--- a/locale/gitlab.pot
+++ b/locale/gitlab.pot
@@ -987,9 +987,6 @@ msgstr ""
 msgid "%{linkStart} Learn more%{linkEnd}."
 msgstr ""
 
-msgid "%{linkStart}%{linkEnd} review summary"
-msgstr ""
-
 msgid "%{linkStart}Advanced search%{linkEnd} is disabled since %{ref_elem} is not the default branch. %{docs_link}"
 msgstr ""
 
@@ -3717,18 +3714,45 @@ msgstr ""
 msgid "AdminProjects|Delete Project %{projectName}?"
 msgstr ""
 
+msgid "AdminSelfHostedModels|An error occurred while loading self-hosted models. Please try again."
+msgstr ""
+
 msgid "AdminSelfHostedModels|By enabling Self-Hosted Models, you accept the %{link_start}GitLab Testing Agreement%{link_end}."
 msgstr ""
 
 msgid "AdminSelfHostedModels|Define your set of self-hosted models"
 msgstr ""
 
+msgid "AdminSelfHostedModels|Delete model"
+msgstr ""
+
 msgid "AdminSelfHostedModels|Enable Self-hosted models"
 msgstr ""
 
+msgid "AdminSelfHostedModels|Endpoint"
+msgstr ""
+
+msgid "AdminSelfHostedModels|Model does not have API key"
+msgstr ""
+
+msgid "AdminSelfHostedModels|Model has API key"
+msgstr ""
+
+msgid "AdminSelfHostedModels|New model"
+msgstr ""
+
+msgid "AdminSelfHostedModels|New self-hosted model"
+msgstr ""
+
 msgid "AdminSelfHostedModels|Self-Hosted models"
 msgstr ""
 
+msgid "AdminSelfHostedModels|Self-hosted AI models can be used to power GitLab AI features."
+msgstr ""
+
+msgid "AdminSelfHostedModels|Self-hosted models"
+msgstr ""
+
 msgid "AdminSelfHostedModels|Self-hosted models are an experimental feature."
 msgstr ""
 
@@ -32564,9 +32588,6 @@ msgstr ""
 msgid "Merge request branch workflow"
 msgstr ""
 
-msgid "Merge request change summary"
-msgstr ""
-
 msgid "Merge request commits"
 msgstr ""
 
@@ -33748,6 +33769,9 @@ msgstr ""
 msgid "Modal|Close"
 msgstr ""
 
+msgid "Model"
+msgstr ""
+
 msgid "Model experiments"
 msgstr ""
 
@@ -37760,21 +37784,66 @@ msgstr ""
 msgid "PagesDomain|Certificate Key is too long. (Max %d bytes)"
 msgstr ""
 
+msgid "Pages|Active"
+msgstr ""
+
+msgid "Pages|An error occurred while deleting the deployment. Check your connection and try again."
+msgstr ""
+
+msgid "Pages|Created"
+msgstr ""
+
+msgid "Pages|Delete"
+msgstr ""
+
+msgid "Pages|Deploy job"
+msgstr ""
+
 msgid "Pages|Deployments"
 msgstr ""
 
 msgid "Pages|Environment deployments"
 msgstr ""
 
+msgid "Pages|Files"
+msgstr ""
+
 msgid "Pages|Include stopped deployments"
 msgstr ""
 
+msgid "Pages|Last updated"
+msgstr ""
+
 msgid "Pages|No deployments yet"
 msgstr ""
 
+msgid "Pages|Path prefix"
+msgstr ""
+
+msgid "Pages|Primary deployment"
+msgstr ""
+
+msgid "Pages|Restore"
+msgstr ""
+
+msgid "Pages|Restoring the deployment failed. The deployment might be permanently deleted."
+msgstr ""
+
+msgid "Pages|Root directory"
+msgstr ""
+
+msgid "Pages|Scheduled for deletion at"
+msgstr ""
+
+msgid "Pages|Size"
+msgstr ""
+
 msgid "Pages|Some Pages deployments could not be loaded. Try reloading the page."
 msgstr ""
 
+msgid "Pages|Stopped"
+msgstr ""
+
 msgid "Pagination|First"
 msgstr ""
 
@@ -51878,9 +51947,6 @@ msgstr ""
 msgid "Summary generated by AI"
 msgstr ""
 
-msgid "Summary generated by AI (Experiment)"
-msgstr ""
-
 msgid "Sun"
 msgstr ""
 
diff --git a/qa/qa/support/formatters/test_metrics_formatter.rb b/qa/qa/support/formatters/test_metrics_formatter.rb
index 5ce8610a736..1e7d4f10f0d 100644
--- a/qa/qa/support/formatters/test_metrics_formatter.rb
+++ b/qa/qa/support/formatters/test_metrics_formatter.rb
@@ -75,7 +75,8 @@ module QA
         # @return [void]
         def push_test_metrics_to_gcs
           retry_on_exception(sleep_interval: 30, message: 'Failed to push test metrics to GCS') do
-            gcs_client.put_object(gcs_bucket, metrics_file_name(prefix: 'test'), execution_data.to_json,
+            gcs_client.put_object(gcs_bucket, metrics_file_name(prefix: 'test',
+              postfix: "-#{env('CI_PIPELINE_ID') || 'local'}"), execution_data.to_json,
               force: true, content_type: 'application/json')
 
             log(:info, "Pushed #{execution_data.length} test execution entries to GCS")
@@ -105,7 +106,9 @@ module QA
         def push_fabrication_metrics_gcs(data)
           retry_on_exception(sleep_interval: 30, message: 'Failed to push resource fabrication metrics to GCS') do
             gcs_client.put_object(gcs_bucket,
-              metrics_file_name(prefix: 'fabrication'), data.to_json, force: true, content_type: 'application/json')
+              metrics_file_name(prefix: 'fabrication',
+                postfix: "-#{env('CI_PIPELINE_ID') || 'local'}"),
+              data.to_json, force: true, content_type: 'application/json')
 
             log(:info, "Pushed #{data.length} resource fabrication entries to GCS")
           end
@@ -147,9 +150,9 @@ module QA
         #
         # @param [Hash] prefix of filename
         # @return [void]
-        def metrics_file_name(prefix:)
+        def metrics_file_name(prefix:, postfix: '')
           "#{prefix}-metrics-#{env('CI_JOB_NAME_SLUG') || 'local'}" \
-            "#{retry_failed_specs? ? "-retry-#{rspec_retried?}" : ''}.json"
+            "#{retry_failed_specs? ? "-retry-#{rspec_retried?}" : ''}#{postfix}.json"
         end
 
         # Transform example to influxdb compatible metrics data
diff --git a/spec/controllers/concerns/issuable_collections_spec.rb b/spec/controllers/concerns/issuable_collections_spec.rb
index 051172ea6da..c3b8bc0b41b 100644
--- a/spec/controllers/concerns/issuable_collections_spec.rb
+++ b/spec/controllers/concerns/issuable_collections_spec.rb
@@ -8,7 +8,7 @@ RSpec.describe IssuableCollections do
   let(:user) { create(:user) }
 
   let(:controller) do
-    klass = Class.new do
+    klass = Class.new(ApplicationController) do
       def self.helper_method(name); end
 
       include IssuableCollections
diff --git a/spec/controllers/concerns/sorting_preference_spec.rb b/spec/controllers/concerns/sorting_preference_spec.rb
index 6880d83142d..8c78b59aa86 100644
--- a/spec/controllers/concerns/sorting_preference_spec.rb
+++ b/spec/controllers/concerns/sorting_preference_spec.rb
@@ -7,7 +7,7 @@ RSpec.describe SortingPreference do
   let(:params) { {} }
 
   let(:controller_class) do
-    Class.new do
+    Class.new(ApplicationController) do
       def self.helper_method(name); end
 
       include SortingPreference
diff --git a/spec/features/dashboard/issues_spec.rb b/spec/features/dashboard/issues_spec.rb
index 7008f702622..e07d3a8d5ba 100644
--- a/spec/features/dashboard/issues_spec.rb
+++ b/spec/features/dashboard/issues_spec.rb
@@ -23,6 +23,20 @@ RSpec.describe 'Dashboard Issues', :js, feature_category: :team_planning do
 
   it_behaves_like 'a "Your work" page with sidebar and breadcrumbs', :issues_dashboard_path, :issues
 
+  context 'for accessibility testing' do
+    let_it_be(:detailed_assigned_issue) do
+      create :issue,
+        :closed,
+        :locked,
+        assignees: [current_user],
+        project: project
+    end
+
+    it 'passes axe automated accessibility testing' do
+      expect(page).to be_axe_clean.within('#content-body')
+    end
+  end
+
   describe 'issues' do
     it 'shows issues assigned to current user' do
       expect(page).to have_content(assigned_issue.title)
diff --git a/spec/frontend/gitlab_pages/components/deployment_spec.js b/spec/frontend/gitlab_pages/components/deployment_spec.js
new file mode 100644
index 00000000000..86c37891b8a
--- /dev/null
+++ b/spec/frontend/gitlab_pages/components/deployment_spec.js
@@ -0,0 +1,202 @@
+import VueApollo from 'vue-apollo';
+import Vue from 'vue';
+import { GlIcon } from '@gitlab/ui';
+import { mountExtended } from 'helpers/vue_test_utils_helper';
+import PagesDeployment from '~/gitlab_pages/components/deployment.vue';
+import deletePagesDeploymentMutation from '~/gitlab_pages/queries/delete_pages_deployment.mutation.graphql';
+import restorePagesDeploymentMutation from '~/gitlab_pages/queries/restore_pages_deployment.mutation.graphql';
+import createMockApollo from 'helpers/mock_apollo_helper';
+import waitForPromises from 'helpers/wait_for_promises';
+import UserDate from '~/vue_shared/components/user_date.vue';
+import {
+  primaryDeployment,
+  environmentDeployment,
+  deleteDeploymentResult,
+  restoreDeploymentResult,
+} from '../mock_data';
+
+Vue.use(VueApollo);
+
+describe('PagesDeployment', () => {
+  let wrapper;
+
+  const deletePagesDeploymentMutationHandler = jest.fn().mockResolvedValue(deleteDeploymentResult);
+  const restorePagesDeploymentMutationHandler = jest
+    .fn()
+    .mockResolvedValue(restoreDeploymentResult);
+
+  const createComponent = (props = {}) => {
+    wrapper = mountExtended(PagesDeployment, {
+      apolloProvider: createMockApollo([
+        [deletePagesDeploymentMutation, deletePagesDeploymentMutationHandler],
+        [restorePagesDeploymentMutation, restorePagesDeploymentMutationHandler],
+      ]),
+      propsData: {
+        deployment: primaryDeployment,
+        ...props,
+      },
+      provide: {
+        projectFullPath: 'my-group/my-project',
+      },
+    });
+  };
+
+  const deleteDeployment = () => {
+    wrapper.findByTestId('deployment-delete').trigger('click');
+  };
+  const restoreDeployment = () => {
+    wrapper.findByTestId('deployment-restore').trigger('click');
+  };
+
+  describe.each`
+    description                 | deployment               | isPrimary
+    ${'Primary deployment'}     | ${primaryDeployment}     | ${true}
+    ${'Environment deployment'} | ${environmentDeployment} | ${false}
+  `('$description', ({ deployment, isPrimary }) => {
+    beforeEach(() => {
+      createComponent({ deployment });
+    });
+
+    describe('display expected data', () => {
+      it('renders deployment details', () => {
+        expect(wrapper.findByTestId('deployment-url').text()).toBe(deployment.url);
+        expect(
+          wrapper.findByTestId('deployment-created-at').findComponent(UserDate).props('date'),
+        ).toBe(deployment.createdAt);
+        expect(wrapper.findByTestId('deployment-ci-build-id').text()).toContain(
+          deployment.ciBuildId.toString(),
+        );
+        expect(wrapper.findByTestId('deployment-root-directory').text()).toContain(
+          `/${deployment.rootDirectory}`,
+        );
+        expect(wrapper.findByTestId('deployment-file-count').text()).toContain(
+          deployment.fileCount.toString(),
+        );
+        expect(wrapper.findByTestId('deployment-size').text()).toContain('1.0 KiB');
+        expect(
+          wrapper.findByTestId('deployment-updated-at').findComponent(UserDate).props('date'),
+        ).toBe(deployment.updatedAt);
+      });
+
+      it('toggles deployment details on click', async () => {
+        expect(wrapper.findByTestId('deployment-details').isVisible()).toBe(false);
+
+        await wrapper.trigger('click');
+
+        expect(wrapper.findByTestId('deployment-details').isVisible()).toBe(true);
+      });
+
+      if (isPrimary) {
+        it('highlights the deployment', () => {
+          expect(wrapper.classes()).toContain('gl-bg-blue-50');
+        });
+
+        it('shows "Primary deployment" as deployment type label for screen readers', () => {
+          expect(wrapper.findByTestId('deployment-type').text()).toContain('Primary deployment');
+        });
+
+        it('shows the "home" icon', () => {
+          expect(wrapper.findByTestId('deployment-type').findComponent(GlIcon).props('name')).toBe(
+            'home',
+          );
+        });
+      } else {
+        it('shows the pathPrefix', () => {
+          expect(wrapper.findByTestId('deployment-type').text()).toContain(
+            environmentDeployment.pathPrefix,
+          );
+        });
+      }
+    });
+
+    describe('deployment is active', () => {
+      it('shows the deployment as active', () => {
+        expect(wrapper.findByTestId('deployment-state').text()).toBe('Active');
+      });
+
+      it('renders the deployment URL as a hyperlink', () => {
+        expect(wrapper.findByTestId('deployment-url').find('a').attributes('href')).toBe(
+          deployment.url,
+        );
+      });
+
+      it('deletes deployment when delete button is clicked', async () => {
+        await deleteDeployment();
+
+        expect(deletePagesDeploymentMutationHandler).toHaveBeenCalledWith({
+          deploymentId: deployment.id,
+        });
+      });
+    });
+
+    describe('deployment is inactive', () => {
+      beforeEach(() => {
+        createComponent({ deployment: { ...deployment, active: false } });
+      });
+
+      it('shows the deployment as stopped', () => {
+        expect(wrapper.findByTestId('deployment-state').text()).toBe('Stopped');
+      });
+
+      it('does not render the deployment URL as a hyperlink', () => {
+        expect(wrapper.findByTestId('deployment-url').find('a').exists()).toBe(false);
+      });
+
+      it('renders restore button', () => {
+        expect(wrapper.findByTestId('deployment-restore').exists()).toBe(true);
+      });
+
+      it('does not render delete button', () => {
+        expect(wrapper.findByTestId('deployment-delete').exists()).toBe(false);
+      });
+
+      it('restores deployment when delete button is clicked', async () => {
+        await restoreDeployment();
+
+        expect(restorePagesDeploymentMutationHandler).toHaveBeenCalledWith({
+          deploymentId: deployment.id,
+        });
+      });
+    });
+  });
+
+  describe.each`
+    method         | deploymentActiveState | mutationHandler                          | action               | expectedErrorMessage
+    ${'deleting'}  | ${true}               | ${deletePagesDeploymentMutationHandler}  | ${deleteDeployment}  | ${'An error occurred while deleting the deployment. Check your connection and try again.'}
+    ${'restoring'} | ${false}              | ${restorePagesDeploymentMutationHandler} | ${restoreDeployment} | ${'Restoring the deployment failed. The deployment might be permanently deleted.'}
+  `(
+    '$method produces an error',
+    ({ deploymentActiveState, mutationHandler, action, expectedErrorMessage }) => {
+      beforeEach(async () => {
+        mutationHandler.mockResolvedValue({
+          deletePagesDeployment: {
+            errors: ['Something went wrong'],
+            pagesDeployment: null,
+          },
+        });
+        createComponent({
+          deployment: { ...primaryDeployment, active: deploymentActiveState },
+        });
+
+        await action();
+
+        await waitForPromises();
+      });
+
+      it('emits an error', () => {
+        expect(wrapper.emitted('error')).toEqual([
+          [
+            {
+              id: primaryDeployment.id,
+              message: expectedErrorMessage,
+            },
+          ],
+        ]);
+      });
+
+      it('changes its appearance to include a red border', () => {
+        expect(wrapper.classes()).toContain('gl-border-red-500');
+      });
+    },
+  );
+});
diff --git a/spec/frontend/gitlab_pages/mock_data.js b/spec/frontend/gitlab_pages/mock_data.js
index adbac206f8f..3f8d3b91963 100644
--- a/spec/frontend/gitlab_pages/mock_data.js
+++ b/spec/frontend/gitlab_pages/mock_data.js
@@ -5,7 +5,7 @@ export const primaryDeployment = {
   url: 'https://example.com',
   createdAt: '2023-04-01T12:00:00Z',
   ciBuildId: 123,
-  rootDirectory: 'public',
+  rootDirectory: 'foo/bar',
   fileCount: 100,
   size: 1024,
   updatedAt: '2023-04-02T12:05:00Z',
diff --git a/spec/frontend/ml/model_registry/components/model_create_spec.js b/spec/frontend/ml/model_registry/components/model_create_spec.js
index 7c229042a39..7893b081921 100644
--- a/spec/frontend/ml/model_registry/components/model_create_spec.js
+++ b/spec/frontend/ml/model_registry/components/model_create_spec.js
@@ -174,6 +174,7 @@ describe('ModelCreate', () => {
       it('renders the cancel button in the modal', () => {
         expect(findGlModal().props('actionSecondary')).toEqual({
           text: 'Cancel',
+          attributes: { variant: 'default' },
         });
       });
 
diff --git a/spec/frontend/ml/model_registry/components/model_version_create_spec.js b/spec/frontend/ml/model_registry/components/model_version_create_spec.js
index b4be74e8d32..375ba1a34b5 100644
--- a/spec/frontend/ml/model_registry/components/model_version_create_spec.js
+++ b/spec/frontend/ml/model_registry/components/model_version_create_spec.js
@@ -138,6 +138,7 @@ describe('ModelVersionCreate', () => {
       it('renders the cancel button in the modal', () => {
         expect(findGlModal().props('actionSecondary')).toEqual({
           text: 'Cancel',
+          attributes: { variant: 'default' },
         });
       });
 
diff --git a/spec/graphql/types/container_repository_tag_type_spec.rb b/spec/graphql/types/container_repository_tag_type_spec.rb
index df623af6e51..e53f990dfef 100644
--- a/spec/graphql/types/container_repository_tag_type_spec.rb
+++ b/spec/graphql/types/container_repository_tag_type_spec.rb
@@ -4,7 +4,7 @@ require 'spec_helper'
 
 RSpec.describe GitlabSchema.types['ContainerRepositoryTag'], feature_category: :container_registry do
   fields = %i[name path location digest revision short_revision
-    total_size created_at user_permissions referrers published_at]
+    total_size created_at user_permissions referrers published_at media_type]
 
   it { expect(described_class.graphql_name).to eq('ContainerRepositoryTag') }
 
diff --git a/spec/helpers/projects/ml/model_registry_helper_spec.rb b/spec/helpers/projects/ml/model_registry_helper_spec.rb
index dbb0490e667..6a39ad6ed13 100644
--- a/spec/helpers/projects/ml/model_registry_helper_spec.rb
+++ b/spec/helpers/projects/ml/model_registry_helper_spec.rb
@@ -43,7 +43,7 @@ RSpec.describe Projects::Ml::ModelRegistryHelper, feature_category: :mlops do
 
     subject(:parsed) { Gitlab::Json.parse(helper.show_ml_model_data(model, user)) }
 
-    it 'generates the correct data' do
+    it 'generates the correct data', quarantine: 'https://gitlab.com/gitlab-org/gitlab/-/issues/468667' do
       is_expected.to eq({
         'projectPath' => project.full_path,
         'indexModelsPath' => "/#{project.full_path}/-/ml/models",
diff --git a/spec/helpers/visibility_level_helper_spec.rb b/spec/helpers/visibility_level_helper_spec.rb
index 9ee4b7cddee..2b96904e374 100644
--- a/spec/helpers/visibility_level_helper_spec.rb
+++ b/spec/helpers/visibility_level_helper_spec.rb
@@ -17,19 +17,19 @@ RSpec.describe VisibilityLevelHelper, feature_category: :system_access do
   let(:project_snippet)  { build(:project_snippet) }
 
   describe '#visibility_icon_description' do
-    context 'used with a Project' do
+    context 'with Project' do
       it 'delegates projects to #project_visibility_icon_description' do
         expect(visibility_icon_description(project)).to match(/project/i)
       end
     end
 
-    context 'used with a ProjectPresenter' do
+    context 'with ProjectPresenter' do
       it 'delegates projects to #project_visibility_icon_description' do
         expect(visibility_icon_description(project.present)).to match(/project/i)
       end
     end
 
-    context 'used with a Group' do
+    context 'with Group' do
       it 'delegates groups to #group_visibility_icon_description' do
         expect(visibility_icon_description(group)).to match(/group/i)
       end
@@ -51,7 +51,7 @@ RSpec.describe VisibilityLevelHelper, feature_category: :system_access do
   end
 
   describe '#visibility_level_description' do
-    context 'used with a Project' do
+    context 'with Project' do
       let(:descriptions) do
         [
           visibility_level_description(private_vis, project),
@@ -66,7 +66,7 @@ RSpec.describe VisibilityLevelHelper, feature_category: :system_access do
       end
     end
 
-    context 'used with a Group' do
+    context 'with Group' do
       let(:descriptions) do
         [
           visibility_level_description(private_vis, group),
@@ -85,15 +85,19 @@ RSpec.describe VisibilityLevelHelper, feature_category: :system_access do
       end
 
       context 'when application setting `should_check_namespace_plan` is true', if: Gitlab.ee? do
-        let(:group) { create(:group) }
+        let(:group) { build_stubbed(:group) }
         let(:public_option_description) { visibility_level_description(public_vis, group) }
 
         before do
-          allow(Gitlab::CurrentSettings.current_application_settings).to receive(:should_check_namespace_plan?) { true }
+          allow(Gitlab::CurrentSettings.current_application_settings).to receive(:should_check_namespace_plan?)
+                                                                     .and_return(true)
         end
 
         it 'returns updated description for public visibility option in group general settings' do
-          expect(public_option_description).to match(/^The group, any public projects, and any of their members, issues, and merge requests can be viewed without authentication./)
+          expect(public_option_description).to match(
+            'The group, any public projects, and any of their members, issues, and merge requests can be viewed ' \
+              'without authentication.'
+          )
         end
       end
     end
@@ -101,7 +105,7 @@ RSpec.describe VisibilityLevelHelper, feature_category: :system_access do
 
   describe '#disallowed_visibility_level?' do
     describe "forks" do
-      let(:project) { create(:project, :internal) }
+      let(:project) { create(:project, :internal) } # rubocop:disable RSpec/FactoryBot/AvoidCreate -- create is required for fork_project
       let(:forked_project) { fork_project(project) }
 
       it "disallows levels" do
@@ -112,7 +116,7 @@ RSpec.describe VisibilityLevelHelper, feature_category: :system_access do
     end
 
     describe "non-forked project" do
-      let(:project) { create(:project, :internal) }
+      let(:project) { build_stubbed(:project, :internal) }
 
       it "disallows levels" do
         expect(disallowed_visibility_level?(project, public_vis)).to be_falsey
@@ -122,7 +126,7 @@ RSpec.describe VisibilityLevelHelper, feature_category: :system_access do
     end
 
     describe "group" do
-      let(:group) { create(:group, :internal) }
+      let(:group) { build_stubbed(:group, :internal) }
 
       it "disallows levels" do
         expect(disallowed_visibility_level?(group, public_vis)).to be_falsey
@@ -132,8 +136,8 @@ RSpec.describe VisibilityLevelHelper, feature_category: :system_access do
     end
 
     describe "sub-group" do
-      let(:group) { create(:group, :private) }
-      let(:subgroup) { create(:group, :private, parent: group) }
+      let(:group) { build_stubbed(:group, :private) }
+      let(:subgroup) { build_stubbed(:group, :private, parent: group) }
 
       it "disallows levels" do
         expect(disallowed_visibility_level?(subgroup, public_vis)).to be_truthy
@@ -143,7 +147,7 @@ RSpec.describe VisibilityLevelHelper, feature_category: :system_access do
     end
 
     describe "snippet" do
-      let(:snippet) { create(:snippet, :internal) }
+      let(:snippet) { build_stubbed(:snippet, :internal) }
 
       it "disallows levels" do
         expect(disallowed_visibility_level?(snippet, public_vis)).to be_falsey
@@ -154,7 +158,7 @@ RSpec.describe VisibilityLevelHelper, feature_category: :system_access do
   end
 
   describe '#disallowed_visibility_level_by_parent?' do
-    let(:parent_group) { create(:group, parent_group_visibility_level) }
+    let(:parent_group) { build_stubbed(:group, parent_group_visibility_level) }
     let(:group) { build(:group, :private, parent: parent_group) }
 
     subject { helper.disallowed_visibility_level_by_parent?(group, visibility_level) }
@@ -199,8 +203,8 @@ RSpec.describe VisibilityLevelHelper, feature_category: :system_access do
   end
 
   describe '#disallowed_visibility_level_by_projects?' do
-    let_it_be(:group) { create(:group, :public) }
-    let_it_be_with_reload(:child) { create(:project, group: group) }
+    let_it_be(:group) { create(:group, :public) } # rubocop:disable RSpec/FactoryBot/AvoidCreate -- create is required because child is updated in before hook
+    let_it_be_with_reload(:child) { create(:project, group: group) } # rubocop:disable RSpec/FactoryBot/AvoidCreate -- create is required because child is updated in before hook
 
     subject { helper.disallowed_visibility_level_by_projects?(group, visibility_level) }
 
@@ -208,8 +212,8 @@ RSpec.describe VisibilityLevelHelper, feature_category: :system_access do
   end
 
   describe '#disallowed_visibility_level_by_sub_groups?' do
-    let_it_be(:group) { create(:group, :public) }
-    let_it_be_with_reload(:child) { create(:group, parent: group) }
+    let_it_be(:group) { create(:group, :public) } # rubocop:disable RSpec/FactoryBot/AvoidCreate -- create is required because child is updated in before hook
+    let_it_be_with_reload(:child) { create(:group, parent: group) } # rubocop:disable RSpec/FactoryBot/AvoidCreate -- create is required because child is updated in before hook
 
     subject { helper.disallowed_visibility_level_by_sub_groups?(group, visibility_level) }
 
@@ -217,8 +221,8 @@ RSpec.describe VisibilityLevelHelper, feature_category: :system_access do
   end
 
   describe '#selected_visibility_level' do
-    let_it_be(:group) { create(:group, :public) }
-    let_it_be_with_reload(:project) { create(:project, :internal, group: group) }
+    let_it_be(:group) { create(:group, :public) } # rubocop:disable RSpec/FactoryBot/AvoidCreate -- create is required because child is updated in before hook
+    let_it_be_with_reload(:project) { create(:project, :internal, group: group) } # rubocop:disable RSpec/FactoryBot/AvoidCreate -- create is required for fork_project
 
     let!(:forked_project) { fork_project(project) }
 
@@ -291,9 +295,9 @@ RSpec.describe VisibilityLevelHelper, feature_category: :system_access do
 
     it 'excludes disallowed visibility levels' do
       stub_application_setting(restricted_visibility_levels: [])
-      allow(helper).to receive(:disallowed_visibility_level?).with(form_model, private_vis) { true }
-      allow(helper).to receive(:disallowed_visibility_level?).with(form_model, internal_vis) { false }
-      allow(helper).to receive(:disallowed_visibility_level?).with(form_model, public_vis) { false }
+      allow(helper).to receive(:disallowed_visibility_level?).with(form_model, private_vis).and_return(true)
+      allow(helper).to receive(:disallowed_visibility_level?).with(form_model, internal_vis).and_return(false)
+      allow(helper).to receive(:disallowed_visibility_level?).with(form_model, public_vis).and_return(false)
 
       expect(subject).to eq([internal_vis, public_vis])
     end
@@ -380,8 +384,8 @@ RSpec.describe VisibilityLevelHelper, feature_category: :system_access do
   end
 
   describe '#disabled_visibility_level?' do
-    let_it_be(:group) { create(:group, :public) }
-    let_it_be_with_reload(:child) { create(:project, group: group) }
+    let_it_be(:group) { create(:group, :public) } # rubocop:disable RSpec/FactoryBot/AvoidCreate -- create is required because child is updated in before hook
+    let_it_be_with_reload(:child) { create(:project, group: group) } # rubocop:disable RSpec/FactoryBot/AvoidCreate -- create is required because child is updated in before hook
 
     let(:user) { build(:user) }
 
diff --git a/spec/lib/container_registry/tag_spec.rb b/spec/lib/container_registry/tag_spec.rb
index 3c20fe70fb7..869ed71e529 100644
--- a/spec/lib/container_registry/tag_spec.rb
+++ b/spec/lib/container_registry/tag_spec.rb
@@ -23,6 +23,7 @@ RSpec.describe ContainerRegistry::Tag, feature_category: :container_registry do
   end
 
   it { expect(tag).to respond_to(:repository) }
+  it { expect(tag).to respond_to(:media_type) }
   it { expect(tag).to delegate_method(:registry).to(:repository) }
   it { expect(tag).to delegate_method(:client).to(:repository) }
 
diff --git a/spec/lib/gitlab/background_migration/backfill_merge_requests_closing_issues_project_id_spec.rb b/spec/lib/gitlab/background_migration/backfill_merge_requests_closing_issues_project_id_spec.rb
new file mode 100644
index 00000000000..1837d47eebc
--- /dev/null
+++ b/spec/lib/gitlab/background_migration/backfill_merge_requests_closing_issues_project_id_spec.rb
@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe Gitlab::BackgroundMigration::BackfillMergeRequestsClosingIssuesProjectId,
+  feature_category: :code_review_workflow,
+  schema: 20240624142010 do
+  include_examples 'desired sharding key backfill job' do
+    let(:batch_table) { :merge_requests_closing_issues }
+    let(:backfill_column) { :project_id }
+    let(:backfill_via_table) { :merge_requests }
+    let(:backfill_via_column) { :target_project_id }
+    let(:backfill_via_foreign_key) { :merge_request_id }
+  end
+end
diff --git a/spec/lib/gitlab/background_migration/backfill_ml_model_metadata_project_id_spec.rb b/spec/lib/gitlab/background_migration/backfill_ml_model_metadata_project_id_spec.rb
new file mode 100644
index 00000000000..bc3c2e5c3f2
--- /dev/null
+++ b/spec/lib/gitlab/background_migration/backfill_ml_model_metadata_project_id_spec.rb
@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe Gitlab::BackgroundMigration::BackfillMlModelMetadataProjectId,
+  feature_category: :mlops,
+  schema: 20240624142357 do
+  include_examples 'desired sharding key backfill job' do
+    let(:batch_table) { :ml_model_metadata }
+    let(:backfill_column) { :project_id }
+    let(:backfill_via_table) { :ml_models }
+    let(:backfill_via_column) { :project_id }
+    let(:backfill_via_foreign_key) { :model_id }
+  end
+end
diff --git a/spec/lib/gitlab/background_migration/backfill_vulnerability_external_issue_links_project_id_spec.rb b/spec/lib/gitlab/background_migration/backfill_vulnerability_external_issue_links_project_id_spec.rb
new file mode 100644
index 00000000000..dcc30811c10
--- /dev/null
+++ b/spec/lib/gitlab/background_migration/backfill_vulnerability_external_issue_links_project_id_spec.rb
@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe Gitlab::BackgroundMigration::BackfillVulnerabilityExternalIssueLinksProjectId,
+  feature_category: :vulnerability_management,
+  schema: 20240624135059 do
+  include_examples 'desired sharding key backfill job' do
+    let(:batch_table) { :vulnerability_external_issue_links }
+    let(:backfill_column) { :project_id }
+    let(:backfill_via_table) { :vulnerabilities }
+    let(:backfill_via_column) { :project_id }
+    let(:backfill_via_foreign_key) { :vulnerability_id }
+  end
+end
diff --git a/spec/lib/gitlab/ci/charts_spec.rb b/spec/lib/gitlab/ci/charts_spec.rb
index 3a82d058819..9e869fe1850 100644
--- a/spec/lib/gitlab/ci/charts_spec.rb
+++ b/spec/lib/gitlab/ci/charts_spec.rb
@@ -2,19 +2,18 @@
 
 require 'spec_helper'
 
-RSpec.describe Gitlab::Ci::Charts do
+RSpec.describe Gitlab::Ci::Charts, feature_category: :fleet_visibility do
+  let_it_be(:project) { create(:project) }
+
   context 'yearchart' do
-    let(:project) { create(:project) }
     let(:chart) { Gitlab::Ci::Charts::YearChart.new(project) }
 
-    subject { chart.to }
-
-    before do
+    before_all do
       create(:ci_empty_pipeline, project: project, duration: 120)
     end
 
     it 'goes until the end of the current month (including the whole last day of the month)' do
-      is_expected.to eq(Date.today.end_of_month.end_of_day)
+      expect(chart.to).to eq(Date.today.end_of_month.end_of_day)
     end
 
     it 'starts at the beginning of the current year' do
@@ -31,17 +30,14 @@ RSpec.describe Gitlab::Ci::Charts do
   end
 
   context 'monthchart' do
-    let(:project) { create(:project) }
     let(:chart) { Gitlab::Ci::Charts::MonthChart.new(project) }
 
-    subject { chart.to }
-
-    before do
+    before_all do
       create(:ci_empty_pipeline, project: project, duration: 120)
     end
 
     it 'includes the whole current day' do
-      is_expected.to eq(Date.today.end_of_day)
+      expect(chart.to).to eq(Date.today.end_of_day)
     end
 
     it 'starts one month ago' do
@@ -58,17 +54,14 @@ RSpec.describe Gitlab::Ci::Charts do
   end
 
   context 'weekchart' do
-    let(:project) { create(:project) }
     let(:chart) { Gitlab::Ci::Charts::WeekChart.new(project) }
 
-    subject { chart.to }
-
-    before do
+    before_all do
       create(:ci_empty_pipeline, project: project, duration: 120)
     end
 
     it 'includes the whole current day' do
-      is_expected.to eq(Date.today.end_of_day)
+      expect(chart.to).to eq(Date.today.end_of_day)
     end
 
     it 'starts one week ago' do
@@ -85,25 +78,25 @@ RSpec.describe Gitlab::Ci::Charts do
   end
 
   context 'weekchart_utc' do
-    today = Date.today
-    end_of_today = Time.use_zone(Time.find_zone('UTC')) { today.end_of_day }
-
-    let(:project) { create(:project) }
-    let(:chart) do
-      allow(Date).to receive(:today).and_return(today)
-      allow(today).to receive(:end_of_day).and_return(end_of_today)
-      Gitlab::Ci::Charts::WeekChart.new(project)
+    let_it_be(:today) { Date.today }
+    let_it_be(:end_of_today) do
+      Time.use_zone(Time.find_zone('UTC')) { today.end_of_day }
     end
 
-    subject { chart.total }
+    let(:chart) { Gitlab::Ci::Charts::WeekChart.new(project) }
 
-    before do
+    before_all do
       # The created_at time used by the following execution
       # can end up being after the creation of the 'today' time
       # objects created above, and cause the queried counts to
       # go to zero when the test executes close to midnight on the
       # CI system, so we explicitly set it to a day earlier
-      create(:ci_empty_pipeline, project: project, duration: 120, created_at: today - 1.day)
+      create(:ci_empty_pipeline, project: project, duration: 120, created_at: 1.day.before(today))
+    end
+
+    before do
+      allow(Date).to receive(:today).and_return(today)
+      allow(today).to receive(:end_of_day).and_return(end_of_today)
     end
 
     it 'uses a utc time zone for range times' do
@@ -117,24 +110,26 @@ RSpec.describe Gitlab::Ci::Charts do
   end
 
   context 'weekchart_non_utc' do
-    today = Date.today
-    end_of_today = Time.use_zone(Time.find_zone('Asia/Dubai')) { today.end_of_day }
-
-    let(:project) { create(:project) }
-    let(:chart) do
-      allow(Date).to receive(:today).and_return(today)
-      allow(today).to receive(:end_of_day).and_return(end_of_today)
-      Gitlab::Ci::Charts::WeekChart.new(project)
+    let_it_be(:today) { Date.today }
+    let_it_be(:end_of_today) do
+      Time.use_zone(Time.find_zone('Asia/Dubai')) { today.end_of_day }
     end
 
+    let(:chart) { Gitlab::Ci::Charts::WeekChart.new(project) }
+
     subject { chart.total }
 
-    before do
+    before_all do
       # The DB uses UTC always, so our use of a Time Zone in the application
       # can cause the creation date of the pipeline to go unmatched depending
       # on the offset. We can work around this by requesting the pipeline be
       # created a with the `created_at` field set to a day ago in the same week.
-      create(:ci_empty_pipeline, project: project, duration: 120, created_at: today - 1.day)
+      create(:ci_empty_pipeline, project: project, duration: 120, created_at: 1.day.before(today))
+    end
+
+    before do
+      allow(Date).to receive(:today).and_return(today)
+      allow(today).to receive(:end_of_day).and_return(end_of_today)
     end
 
     it 'uses a non-utc time zone for range times' do
@@ -148,12 +143,11 @@ RSpec.describe Gitlab::Ci::Charts do
   end
 
   context 'pipeline_times' do
-    let(:project) { create(:project) }
     let(:chart) { Gitlab::Ci::Charts::PipelineTime.new(project) }
 
     subject { chart.pipeline_times }
 
-    before do
+    before_all do
       create(:ci_empty_pipeline, project: project, duration: 120)
     end
 
@@ -161,10 +155,14 @@ RSpec.describe Gitlab::Ci::Charts do
       is_expected.to contain_exactly(2)
     end
 
-    it 'handles nil pipeline times' do
-      create(:ci_empty_pipeline, project: project, duration: nil)
+    context 'when a pipeline has nil duration' do
+      before_all do
+        create(:ci_empty_pipeline, project: project, duration: nil)
+      end
 
-      is_expected.to contain_exactly(2, 0)
+      it 'handles nil pipeline times' do
+        is_expected.to contain_exactly(2, 0)
+      end
     end
   end
 end
diff --git a/spec/lib/gitlab/data_builder/issuable_spec.rb b/spec/lib/gitlab/data_builder/issuable_spec.rb
index 4389bba2efc..6fc0c102ac7 100644
--- a/spec/lib/gitlab/data_builder/issuable_spec.rb
+++ b/spec/lib/gitlab/data_builder/issuable_spec.rb
@@ -9,7 +9,7 @@ RSpec.describe Gitlab::DataBuilder::Issuable do
 
   # This shared example requires a `builder` and `user` variable
   shared_examples 'issuable hook data' do |kind, hook_data_issuable_builder_class|
-    let(:data) { builder.build(user: user) }
+    let(:data) { builder.build(user: user, action: 'updated') }
 
     include_examples 'project hook data' do
       let(:project) { builder.issuable.project }
@@ -19,10 +19,12 @@ RSpec.describe Gitlab::DataBuilder::Issuable do
 
     context "with a #{kind}" do
       it 'contains issuable data' do
+        expected_object_attributes = hook_data_issuable_builder_class.new(issuable).build.merge(action: 'updated')
+
         expect(data[:object_kind]).to eq(kind)
         expect(data[:user]).to eq(user.hook_attrs)
         expect(data[:project]).to eq(builder.issuable.project.hook_attrs)
-        expect(data[:object_attributes]).to eq(hook_data_issuable_builder_class.new(issuable).build)
+        expect(data[:object_attributes]).to eq(expected_object_attributes)
         expect(data[:changes]).to eq({})
         expect(data[:repository]).to eq(builder.issuable.project.hook_attrs.slice(:name, :url, :description, :homepage))
       end
@@ -32,6 +34,12 @@ RSpec.describe Gitlab::DataBuilder::Issuable do
         expect(data).not_to have_key(:assignee)
       end
 
+      it 'does not include action attribute when action is not given' do
+        data = described_class.new(issuable).build(user: user)
+
+        expect(data[:object_attributes]).not_to have_key(:action)
+      end
+
       describe 'changes are given' do
         let(:changes) do
           {
@@ -59,7 +67,7 @@ RSpec.describe Gitlab::DataBuilder::Issuable do
           }
         end
 
-        let(:data) { builder.build(user: user, changes: changes) }
+        let(:data) { builder.build(user: user, changes: changes, action: 'updated') }
 
         it 'populates the :changes hash' do
           expect(data[:changes]).to match(hash_including({
@@ -109,7 +117,7 @@ RSpec.describe Gitlab::DataBuilder::Issuable do
 
     context 'issue is assigned' do
       let(:issue) { create(:issue, assignees: [user], project: reusable_project) }
-      let(:data) { described_class.new(issue).build(user: user) }
+      let(:data) { described_class.new(issue).build(user: user, action: 'updated') }
 
       it 'returns correct hook data' do
         expect(data[:object_attributes]['assignee_id']).to eq(user.id)
@@ -123,7 +131,7 @@ RSpec.describe Gitlab::DataBuilder::Issuable do
       let(:work_item) { create(:work_item, namespace: group, description: 'work item description') }
 
       it 'returns correct hook data', :aggregate_failures do
-        data = described_class.new(work_item).build(user: user)
+        data = described_class.new(work_item).build(user: user, action: 'updated')
 
         expect(data[:object_kind]).to eq('work_item')
         expect(data[:event_type]).to eq('work_item')
@@ -135,7 +143,7 @@ RSpec.describe Gitlab::DataBuilder::Issuable do
 
     context 'merge_request is assigned' do
       let(:merge_request) { create(:merge_request, assignees: [user], source_project: reusable_project) }
-      let(:data) { described_class.new(merge_request).build(user: user) }
+      let(:data) { described_class.new(merge_request).build(user: user, action: 'updated') }
 
       it 'returns correct hook data' do
         expect(data[:object_attributes]['assignee_id']).to eq(user.id)
@@ -146,7 +154,7 @@ RSpec.describe Gitlab::DataBuilder::Issuable do
 
     context 'merge_request is assigned reviewers' do
       let(:merge_request) { create(:merge_request, reviewers: [user], source_project: reusable_project) }
-      let(:data) { described_class.new(merge_request).build(user: user) }
+      let(:data) { described_class.new(merge_request).build(user: user, action: 'updated') }
 
       it 'returns correct hook data' do
         expect(data[:object_attributes]['reviewer_ids']).to match_array([user.id])
@@ -156,7 +164,7 @@ RSpec.describe Gitlab::DataBuilder::Issuable do
 
     context 'when merge_request does not have reviewers and assignees' do
       let(:merge_request) { create(:merge_request, source_project: reusable_project) }
-      let(:data) { described_class.new(merge_request).build(user: user) }
+      let(:data) { described_class.new(merge_request).build(user: user, action: 'updated') }
 
       it 'returns correct hook data' do
         expect(data).not_to have_key(:assignees)
diff --git a/spec/lib/gitlab/suggestions/commit_message_spec.rb b/spec/lib/gitlab/suggestions/commit_message_spec.rb
index 58ec0f64265..05982000a63 100644
--- a/spec/lib/gitlab/suggestions/commit_message_spec.rb
+++ b/spec/lib/gitlab/suggestions/commit_message_spec.rb
@@ -8,21 +8,21 @@ RSpec.describe Gitlab::Suggestions::CommitMessage, feature_category: :code_revie
 
   def create_suggestion(merge_request, file_path, new_line, to_content, author)
     position = Gitlab::Diff::Position.new(old_path: file_path,
-                                          new_path: file_path,
-                                          old_line: nil,
-                                          new_line: new_line,
-                                          diff_refs: merge_request.diff_refs)
+      new_path: file_path,
+      old_line: nil,
+      new_line: new_line,
+      diff_refs: merge_request.diff_refs)
 
     diff_note = create(:diff_note_on_merge_request,
-                       noteable: merge_request,
-                       author: author,
-                       position: position,
-                       project: project)
+      noteable: merge_request,
+      author: author,
+      position: position,
+      project: project)
 
     create(:suggestion,
-           :content_from_repo,
-           note: diff_note,
-           to_content: to_content)
+      :content_from_repo,
+      note: diff_note,
+      to_content: to_content)
   end
 
   let_it_be(:user) do
diff --git a/spec/lib/gitlab/suggestions/file_suggestion_spec.rb b/spec/lib/gitlab/suggestions/file_suggestion_spec.rb
index 5971f4ebbce..d3dbbe760a6 100644
--- a/spec/lib/gitlab/suggestions/file_suggestion_spec.rb
+++ b/spec/lib/gitlab/suggestions/file_suggestion_spec.rb
@@ -5,22 +5,22 @@ require 'spec_helper'
 RSpec.describe Gitlab::Suggestions::FileSuggestion do
   def create_suggestion(new_line, to_content, lines_above = 0, lines_below = 0)
     position = Gitlab::Diff::Position.new(old_path: file_path,
-                                          new_path: file_path,
-                                          old_line: nil,
-                                          new_line: new_line,
-                                          diff_refs: merge_request.diff_refs)
+      new_path: file_path,
+      old_line: nil,
+      new_line: new_line,
+      diff_refs: merge_request.diff_refs)
 
     diff_note = create(:diff_note_on_merge_request,
-                       noteable: merge_request,
-                       position: position,
-                       project: project)
+      noteable: merge_request,
+      position: position,
+      project: project)
 
     create(:suggestion,
-           :content_from_repo,
-           note: diff_note,
-           lines_above: lines_above,
-           lines_below: lines_below,
-           to_content: to_content)
+      :content_from_repo,
+      note: diff_note,
+      lines_above: lines_above,
+      lines_below: lines_below,
+      to_content: to_content)
   end
 
   let_it_be(:user) { create(:user) }
@@ -49,8 +49,8 @@ RSpec.describe Gitlab::Suggestions::FileSuggestion do
     def stub_suggestions(line_index_spans)
       fake_suggestions = line_index_spans.map do |span|
         double("Suggestion",
-               from_line_index: span[:from_line_index],
-               to_line_index: span[:to_line_index])
+          from_line_index: span[:from_line_index],
+          to_line_index: span[:to_line_index])
       end
 
       allow(file_suggestion).to(receive(:suggestions).and_return(fake_suggestions))
diff --git a/spec/lib/gitlab/suggestions/suggestion_set_spec.rb b/spec/lib/gitlab/suggestions/suggestion_set_spec.rb
index 298ade2e33f..4b8327ddfab 100644
--- a/spec/lib/gitlab/suggestions/suggestion_set_spec.rb
+++ b/spec/lib/gitlab/suggestions/suggestion_set_spec.rb
@@ -8,20 +8,20 @@ RSpec.describe Gitlab::Suggestions::SuggestionSet do
 
   def create_suggestion(file_path, new_line, to_content)
     position = Gitlab::Diff::Position.new(old_path: file_path,
-                                          new_path: file_path,
-                                          old_line: nil,
-                                          new_line: new_line,
-                                          diff_refs: merge_request.diff_refs)
+      new_path: file_path,
+      old_line: nil,
+      new_line: new_line,
+      diff_refs: merge_request.diff_refs)
 
     diff_note = create(:diff_note_on_merge_request,
-                       noteable: merge_request,
-                       position: position,
-                       project: project)
+      noteable: merge_request,
+      position: position,
+      project: project)
 
     create(:suggestion,
-           :content_from_repo,
-           note: diff_note,
-           to_content: to_content)
+      :content_from_repo,
+      note: diff_note,
+      to_content: to_content)
   end
 
   let_it_be(:user) { create(:user) }
diff --git a/spec/lib/gitlab/tracking/destinations/snowplow_spec.rb b/spec/lib/gitlab/tracking/destinations/snowplow_spec.rb
index e79535358f9..b7b1b4d254c 100644
--- a/spec/lib/gitlab/tracking/destinations/snowplow_spec.rb
+++ b/spec/lib/gitlab/tracking/destinations/snowplow_spec.rb
@@ -6,7 +6,7 @@ RSpec.describe Gitlab::Tracking::Destinations::Snowplow, :do_not_stub_snowplow_b
   let(:emitter) { SnowplowTracker::Emitter.new(endpoint: 'localhost', options: { buffer_size: 1 }) }
   let(:tracker) do
     SnowplowTracker::Tracker.new(emitters: [emitter], subject: SnowplowTracker::Subject.new, namespace: 'namespace',
-                                 app_id: 'app_id')
+      app_id: 'app_id')
   end
 
   before do
@@ -25,17 +25,17 @@ RSpec.describe Gitlab::Tracking::Destinations::Snowplow, :do_not_stub_snowplow_b
       expect(SnowplowTracker::AsyncEmitter)
         .to receive(:new)
         .with(endpoint: 'gitfoo.com',
-              options: { protocol: 'https',
-                         on_success: subject.method(:increment_successful_events_emissions),
-                         on_failure: subject.method(:failure_callback) })
+          options: { protocol: 'https',
+                     on_success: subject.method(:increment_successful_events_emissions),
+                     on_failure: subject.method(:failure_callback) })
         .and_return(emitter)
 
       expect(SnowplowTracker::Tracker)
         .to receive(:new)
               .with(emitters: [emitter],
-                    subject: an_instance_of(SnowplowTracker::Subject),
-                    namespace: described_class::SNOWPLOW_NAMESPACE,
-                    app_id: '_abc123_')
+                subject: an_instance_of(SnowplowTracker::Subject),
+                namespace: described_class::SNOWPLOW_NAMESPACE,
+                app_id: '_abc123_')
               .and_return(tracker)
     end
 
@@ -48,7 +48,7 @@ RSpec.describe Gitlab::Tracking::Destinations::Snowplow, :do_not_stub_snowplow_b
         expect(tracker)
           .to have_received(:track_struct_event)
           .with(category: 'category', action: 'action', label: 'label', property: 'property', value: 1.5, context: nil,
-                tstamp: (Time.now.to_f * 1000).to_i)
+            tstamp: (Time.now.to_f * 1000).to_i)
       end
 
       it 'increase total snowplow events counter' do
@@ -57,7 +57,7 @@ RSpec.describe Gitlab::Tracking::Destinations::Snowplow, :do_not_stub_snowplow_b
         expect(counter).to receive(:increment)
         expect(Gitlab::Metrics).to receive(:counter)
                                      .with(:gitlab_snowplow_events_total,
-                                           'Number of Snowplow events')
+                                       'Number of Snowplow events')
                                      .and_return(counter)
 
         subject.event('category', 'action', label: 'label', property: 'property', value: 1.5)
@@ -83,7 +83,7 @@ RSpec.describe Gitlab::Tracking::Destinations::Snowplow, :do_not_stub_snowplow_b
         expect(counter).to receive(:increment).with({}, 2)
         expect(Gitlab::Metrics).to receive(:counter)
                                      .with(:gitlab_snowplow_successful_events_total,
-                                           'Number of successful Snowplow events emissions')
+                                       'Number of successful Snowplow events emissions')
                                      .and_return(counter)
 
         subject.method(:increment_successful_events_emissions).call(2)
@@ -99,14 +99,14 @@ RSpec.describe Gitlab::Tracking::Destinations::Snowplow, :do_not_stub_snowplow_b
                       "se_ac" => "search_audit_event" }]
         allow(Gitlab::Metrics).to receive(:counter)
                                     .with(:gitlab_snowplow_successful_events_total,
-                                          'Number of successful Snowplow events emissions')
+                                      'Number of successful Snowplow events emissions')
                                     .and_call_original
 
         expect(Gitlab::AppLogger).to receive(:error).with(error_message)
         expect(counter).to receive(:increment).with({}, 1)
         expect(Gitlab::Metrics).to receive(:counter)
                                      .with(:gitlab_snowplow_failed_events_total,
-                                           'Number of failed Snowplow events emissions')
+                                       'Number of failed Snowplow events emissions')
                                      .and_return(counter)
 
         subject.method(:failure_callback).call(2, failures)
diff --git a/spec/lib/gitlab/utils/lazy_attributes_spec.rb b/spec/lib/gitlab/utils/lazy_attributes_spec.rb
index 430b79c3063..52f46a8bac3 100644
--- a/spec/lib/gitlab/utils/lazy_attributes_spec.rb
+++ b/spec/lib/gitlab/utils/lazy_attributes_spec.rb
@@ -31,8 +31,8 @@ RSpec.describe Gitlab::Utils::LazyAttributes do
 
     it do
       is_expected.to respond_to(:number, :reader_1, :reader_2, :incorrect_type,
-                                :incorrect_type=, :accessor_2, :accessor_2=,
-                                :string_attribute, :string_attribute=)
+        :incorrect_type=, :accessor_2, :accessor_2=,
+        :string_attribute, :string_attribute=)
     end
 
     context 'reading attributes' do
diff --git a/spec/lib/gitlab/workhorse_spec.rb b/spec/lib/gitlab/workhorse_spec.rb
index c38bf941774..f51f0888a5f 100644
--- a/spec/lib/gitlab/workhorse_spec.rb
+++ b/spec/lib/gitlab/workhorse_spec.rb
@@ -301,7 +301,7 @@ RSpec.describe Gitlab::Workhorse, feature_category: :shared do
           response = described_class.git_http_ok(repository, Gitlab::GlRepository::PROJECT, user, action)
 
           expect(response.dig(:GitalyServer, :call_metadata)).to include('gitaly-feature-enforce-requests-limits' => 'true',
-                                                                         'gitaly-feature-mep-mep' => 'true')
+            'gitaly-feature-mep-mep' => 'true')
         end
 
         it 'sets the flag to false for other projects' do
@@ -309,7 +309,7 @@ RSpec.describe Gitlab::Workhorse, feature_category: :shared do
           response = described_class.git_http_ok(other_project.repository, Gitlab::GlRepository::PROJECT, user, action)
 
           expect(response.dig(:GitalyServer, :call_metadata)).to include('gitaly-feature-enforce-requests-limits' => 'true',
-                                                                         'gitaly-feature-mep-mep' => 'false')
+            'gitaly-feature-mep-mep' => 'false')
         end
 
         it 'sets the flag to false when there is no project' do
@@ -317,7 +317,7 @@ RSpec.describe Gitlab::Workhorse, feature_category: :shared do
           response = described_class.git_http_ok(snippet.repository, Gitlab::GlRepository::SNIPPET, user, action)
 
           expect(response.dig(:GitalyServer, :call_metadata)).to include('gitaly-feature-enforce-requests-limits' => 'true',
-                                                                         'gitaly-feature-mep-mep' => 'false')
+            'gitaly-feature-mep-mep' => 'false')
         end
       end
     end
diff --git a/spec/lib/google_api/cloud_platform/client_spec.rb b/spec/lib/google_api/cloud_platform/client_spec.rb
index 5dcc1d22bca..fe6cdbb28e3 100644
--- a/spec/lib/google_api/cloud_platform/client_spec.rb
+++ b/spec/lib/google_api/cloud_platform/client_spec.rb
@@ -358,14 +358,14 @@ RSpec.describe GoogleApi::CloudPlatform::Client do
       expect_any_instance_of(Google::Apis::SqladminV1beta4::SQLAdminService)
         .to receive(:insert_instance)
               .with(gcp_project_id,
-                    having_attributes(
-                      class: ::Google::Apis::SqladminV1beta4::DatabaseInstance,
-                      name: instance_name,
-                      root_password: root_password,
-                      database_version: database_version,
-                      region: region,
-                      settings: instance_of(Google::Apis::SqladminV1beta4::Settings)
-                    ))
+                having_attributes(
+                  class: ::Google::Apis::SqladminV1beta4::DatabaseInstance,
+                  name: instance_name,
+                  root_password: root_password,
+                  database_version: database_version,
+                  region: region,
+                  settings: instance_of(Google::Apis::SqladminV1beta4::Settings)
+                ))
               .and_return(operation)
       is_expected.to eq(operation)
     end
diff --git a/spec/lib/peek/views/detailed_view_spec.rb b/spec/lib/peek/views/detailed_view_spec.rb
index 149685b243a..19f300b07ed 100644
--- a/spec/lib/peek/views/detailed_view_spec.rb
+++ b/spec/lib/peek/views/detailed_view_spec.rb
@@ -52,7 +52,7 @@ RSpec.describe Peek::Views::DetailedView, :request_store do
         expect(threshold_view.results)
           .to include(details: a_collection_containing_exactly(
             { duration: 1.0, warnings: [] },
-                       { duration: 6.0, warnings: ['6.0 over 5'] }
+            { duration: 6.0, warnings: ['6.0 over 5'] }
           ))
       end
     end
@@ -74,7 +74,7 @@ RSpec.describe Peek::Views::DetailedView, :request_store do
       expect(no_threshold_view.results)
         .to include(details: a_collection_containing_exactly(
           { duration: 100000, warnings: [] },
-                     { duration: 100000, warnings: [] }
+          { duration: 100000, warnings: [] }
         ))
     end
   end
diff --git a/spec/lib/security/weak_passwords_spec.rb b/spec/lib/security/weak_passwords_spec.rb
index 14bab5ee6ec..6cbdeece2e4 100644
--- a/spec/lib/security/weak_passwords_spec.rb
+++ b/spec/lib/security/weak_passwords_spec.rb
@@ -8,9 +8,9 @@ RSpec.describe Security::WeakPasswords, feature_category: :system_access do
 
     let(:user) do
       build_stubbed(:user, username: "56d4ab689a_win",
-                           name: "Weakést McWeaky-Pass Jr",
-                           email: "predictāble.ZZZ+seventeen@examplecorp.com",
-                           public_email: "fortunate@acme.com"
+        name: "Weakést McWeaky-Pass Jr",
+        email: "predictāble.ZZZ+seventeen@examplecorp.com",
+        public_email: "fortunate@acme.com"
       )
     end
 
diff --git a/spec/lib/sidebars/projects/menus/repository_menu_spec.rb b/spec/lib/sidebars/projects/menus/repository_menu_spec.rb
index b29427d68dd..00f5906d79c 100644
--- a/spec/lib/sidebars/projects/menus/repository_menu_spec.rb
+++ b/spec/lib/sidebars/projects/menus/repository_menu_spec.rb
@@ -9,7 +9,7 @@ RSpec.describe Sidebars::Projects::Menus::RepositoryMenu, feature_category: :sou
   let(:is_super_sidebar) { false }
   let(:context) do
     Sidebars::Projects::Context.new(current_user: user, container: project, current_ref: 'master',
-   is_super_sidebar: is_super_sidebar)
+      is_super_sidebar: is_super_sidebar)
   end
 
   subject { described_class.new(context) }
@@ -48,7 +48,7 @@ RSpec.describe Sidebars::Projects::Menus::RepositoryMenu, feature_category: :sou
 
         let(:context) do
           Sidebars::Projects::Context.new(current_user: user, container: project, current_ref: ref,
-                                          ref_type: ref_type)
+            ref_type: ref_type)
         end
 
         where(:ref_type, :link) do
@@ -100,8 +100,8 @@ RSpec.describe Sidebars::Projects::Menus::RepositoryMenu, feature_category: :sou
         let_it_be(:item_id) { :files }
 
         it_behaves_like 'repository menu item with different super sidebar title',
-                        _('Files'),
-                        _('Repository')
+          _('Files'),
+          _('Repository')
       end
 
       describe 'Commits' do
@@ -144,8 +144,8 @@ RSpec.describe Sidebars::Projects::Menus::RepositoryMenu, feature_category: :sou
         end
 
         it_behaves_like 'repository menu item with different super sidebar title',
-                        _('Graph'),
-                        _('Repository graph')
+          _('Graph'),
+          _('Repository graph')
       end
     end
   end
diff --git a/spec/lib/uploaded_file_spec.rb b/spec/lib/uploaded_file_spec.rb
index 3a77b12be82..918a7030414 100644
--- a/spec/lib/uploaded_file_spec.rb
+++ b/spec/lib/uploaded_file_spec.rb
@@ -91,13 +91,13 @@ RSpec.describe UploadedFile, feature_category: :package_registry do
             end
 
             it_behaves_like 'using the file path',
-                            filename: 'my_file_.txt',
-                            content_type: 'my/type',
-                            sha256: 'sha256',
-                            path_suffix: 'test',
-                            upload_duration: 5.05,
-                            sha1: 'sha1',
-                            md5: 'md5'
+              filename: 'my_file_.txt',
+              content_type: 'my/type',
+              sha256: 'sha256',
+              path_suffix: 'test',
+              upload_duration: 5.05,
+              sha1: 'sha1',
+              md5: 'md5'
           end
 
           context 'with a remote id' do
@@ -116,14 +116,14 @@ RSpec.describe UploadedFile, feature_category: :package_registry do
             end
 
             it_behaves_like 'using the remote id',
-                            filename: 'my_file_.txt',
-                            content_type: 'application/octet-stream',
-                            sha256: 'sha256',
-                            size: 123456,
-                            remote_id: '1234567890',
-                            upload_duration: 5.05,
-                            sha1: 'sha1',
-                            md5: 'md5'
+              filename: 'my_file_.txt',
+              content_type: 'application/octet-stream',
+              sha256: 'sha256',
+              size: 123456,
+              remote_id: '1234567890',
+              upload_duration: 5.05,
+              sha1: 'sha1',
+              md5: 'md5'
           end
 
           context 'with a path and a remote id' do
@@ -143,14 +143,14 @@ RSpec.describe UploadedFile, feature_category: :package_registry do
             end
 
             it_behaves_like 'using the remote id',
-                            filename: 'my_file_.txt',
-                            content_type: 'application/octet-stream',
-                            sha256: 'sha256',
-                            size: 123456,
-                            remote_id: '1234567890',
-                            upload_duration: 5.05,
-                            sha1: 'sha1',
-                            md5: 'md5'
+              filename: 'my_file_.txt',
+              content_type: 'application/octet-stream',
+              sha256: 'sha256',
+              size: 123456,
+              remote_id: '1234567890',
+              upload_duration: 5.05,
+              sha1: 'sha1',
+              md5: 'md5'
           end
         end
       end
diff --git a/spec/migrations/20240624135063_queue_backfill_vulnerability_external_issue_links_project_id_spec.rb b/spec/migrations/20240624135063_queue_backfill_vulnerability_external_issue_links_project_id_spec.rb
new file mode 100644
index 00000000000..6e3a14f215f
--- /dev/null
+++ b/spec/migrations/20240624135063_queue_backfill_vulnerability_external_issue_links_project_id_spec.rb
@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+require_migration!
+
+RSpec.describe QueueBackfillVulnerabilityExternalIssueLinksProjectId, feature_category: :vulnerability_management do
+  let!(:batched_migration) { described_class::MIGRATION }
+
+  it 'schedules a new batched migration' do
+    reversible_migration do |migration|
+      migration.before -> {
+        expect(batched_migration).not_to have_scheduled_batched_migration
+      }
+
+      migration.after -> {
+        expect(batched_migration).to have_scheduled_batched_migration(
+          table_name: :vulnerability_external_issue_links,
+          column_name: :id,
+          interval: described_class::DELAY_INTERVAL,
+          batch_size: described_class::BATCH_SIZE,
+          sub_batch_size: described_class::SUB_BATCH_SIZE,
+          gitlab_schema: :gitlab_main_cell,
+          job_arguments: [
+            :project_id,
+            :vulnerabilities,
+            :project_id,
+            :vulnerability_id
+          ]
+        )
+      }
+    end
+  end
+end
diff --git a/spec/migrations/20240624142014_queue_backfill_merge_requests_closing_issues_project_id_spec.rb b/spec/migrations/20240624142014_queue_backfill_merge_requests_closing_issues_project_id_spec.rb
new file mode 100644
index 00000000000..e84a97c0185
--- /dev/null
+++ b/spec/migrations/20240624142014_queue_backfill_merge_requests_closing_issues_project_id_spec.rb
@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+require_migration!
+
+RSpec.describe QueueBackfillMergeRequestsClosingIssuesProjectId, feature_category: :code_review_workflow do
+  let!(:batched_migration) { described_class::MIGRATION }
+
+  it 'schedules a new batched migration' do
+    reversible_migration do |migration|
+      migration.before -> {
+        expect(batched_migration).not_to have_scheduled_batched_migration
+      }
+
+      migration.after -> {
+        expect(batched_migration).to have_scheduled_batched_migration(
+          table_name: :merge_requests_closing_issues,
+          column_name: :id,
+          interval: described_class::DELAY_INTERVAL,
+          batch_size: described_class::BATCH_SIZE,
+          sub_batch_size: described_class::SUB_BATCH_SIZE,
+          gitlab_schema: :gitlab_main_cell,
+          job_arguments: [
+            :project_id,
+            :merge_requests,
+            :target_project_id,
+            :merge_request_id
+          ]
+        )
+      }
+    end
+  end
+end
diff --git a/spec/migrations/20240624142361_queue_backfill_ml_model_metadata_project_id_spec.rb b/spec/migrations/20240624142361_queue_backfill_ml_model_metadata_project_id_spec.rb
new file mode 100644
index 00000000000..9299edd2a12
--- /dev/null
+++ b/spec/migrations/20240624142361_queue_backfill_ml_model_metadata_project_id_spec.rb
@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+require_migration!
+
+RSpec.describe QueueBackfillMlModelMetadataProjectId, feature_category: :mlops do
+  let!(:batched_migration) { described_class::MIGRATION }
+
+  it 'schedules a new batched migration' do
+    reversible_migration do |migration|
+      migration.before -> {
+        expect(batched_migration).not_to have_scheduled_batched_migration
+      }
+
+      migration.after -> {
+        expect(batched_migration).to have_scheduled_batched_migration(
+          table_name: :ml_model_metadata,
+          column_name: :id,
+          interval: described_class::DELAY_INTERVAL,
+          batch_size: described_class::BATCH_SIZE,
+          sub_batch_size: described_class::SUB_BATCH_SIZE,
+          gitlab_schema: :gitlab_main_cell,
+          job_arguments: [
+            :project_id,
+            :ml_models,
+            :project_id,
+            :model_id
+          ]
+        )
+      }
+    end
+  end
+end
diff --git a/spec/models/concerns/issuable_spec.rb b/spec/models/concerns/issuable_spec.rb
index fb1f46a6c0e..e20fd6cb6c5 100644
--- a/spec/models/concerns/issuable_spec.rb
+++ b/spec/models/concerns/issuable_spec.rb
@@ -475,10 +475,11 @@ RSpec.describe Issuable, feature_category: :team_planning do
       it 'delegates to Gitlab::DataBuilder::Issuable#build and does not set labels, assignees, nor total_time_spent' do
         expect(builder).to receive(:build).with(
           user: user,
-          changes: hash_not_including(:total_time_spent, :labels, :assignees))
+          changes: hash_not_including(:total_time_spent, :labels, :assignees),
+          action: 'open')
 
         # In some cases, old_associations is empty, e.g. on a close event
-        issue.to_hook_data(user)
+        issue.to_hook_data(user, action: 'open')
       end
     end
 
@@ -494,11 +495,12 @@ RSpec.describe Issuable, feature_category: :team_planning do
       it 'delegates to Gitlab::DataBuilder::Issuable#build' do
         expect(builder).to receive(:build).with(
           user: user,
+          action: 'update',
           changes: hash_including(
             'labels' => [[labels[0].hook_attrs], [labels[1].hook_attrs]]
           ))
 
-        issue.to_hook_data(user, old_associations: { labels: [labels[0]] })
+        issue.to_hook_data(user, old_associations: { labels: [labels[0]] }, action: 'update')
       end
     end
 
@@ -513,11 +515,12 @@ RSpec.describe Issuable, feature_category: :team_planning do
       it 'delegates to Gitlab::DataBuilder::Issuable#build' do
         expect(builder).to receive(:build).with(
           user: user,
+          action: 'update',
           changes: hash_including(
             'total_time_spent' => [1, 2]
           ))
 
-        issue.to_hook_data(user, old_associations: { total_time_spent: 1 })
+        issue.to_hook_data(user, old_associations: { total_time_spent: 1 }, action: 'update')
       end
     end
 
@@ -533,11 +536,12 @@ RSpec.describe Issuable, feature_category: :team_planning do
       it 'delegates to Gitlab::DataBuilder::Issuable#build' do
         expect(builder).to receive(:build).with(
           user: user,
+          action: 'update',
           changes: hash_including(
             'assignees' => [[user.hook_attrs], [user.hook_attrs, user2.hook_attrs]]
           ))
 
-        issue.to_hook_data(user, old_associations: { assignees: [user] })
+        issue.to_hook_data(user, old_associations: { assignees: [user] }, action: 'update')
       end
     end
 
@@ -555,11 +559,12 @@ RSpec.describe Issuable, feature_category: :team_planning do
       it 'delegates to Gitlab::DataBuilder::Issuable#build' do
         expect(builder).to receive(:build).with(
           user: user,
+          action: 'update',
           changes: hash_including(
             'assignees' => [[user.hook_attrs], [user.hook_attrs, user2.hook_attrs]]
           ))
 
-        merge_request.to_hook_data(user, old_associations: { assignees: [user] })
+        merge_request.to_hook_data(user, old_associations: { assignees: [user] }, action: 'update')
       end
     end
 
@@ -577,10 +582,11 @@ RSpec.describe Issuable, feature_category: :team_planning do
       it 'delegates to Gitlab::DataBuilder::Issuable#build' do
         expect(builder).to receive(:build).with(
           user: user,
+          action: 'update',
           changes: hash_including(
             'reviewers' => [[user.hook_attrs], [user.hook_attrs, user2.hook_attrs]]
           ))
-        merge_request.to_hook_data(user, old_associations: { reviewers: [user] })
+        merge_request.to_hook_data(user, old_associations: { reviewers: [user] }, action: 'update')
       end
     end
 
@@ -596,11 +602,12 @@ RSpec.describe Issuable, feature_category: :team_planning do
       it 'delegates to Gitlab::DataBuilder::Issuable#build' do
         expect(builder).to receive(:build).with(
           user: user,
+          action: 'update',
           changes: hash_including(
             'severity' => %w[unknown low]
           ))
 
-        issue.to_hook_data(user, old_associations: { severity: 'unknown' })
+        issue.to_hook_data(user, old_associations: { severity: 'unknown' }, action: 'update')
       end
     end
 
@@ -617,11 +624,12 @@ RSpec.describe Issuable, feature_category: :team_planning do
       it 'delegates to Gitlab::DataBuilder::Issuable#build' do
         expect(builder).to receive(:build).with(
           user: user,
+          action: 'update',
           changes: hash_including(
             'escalation_status' => %i[triggered acknowledged]
           ))
 
-        issue.to_hook_data(user, old_associations: { escalation_status: :triggered })
+        issue.to_hook_data(user, old_associations: { escalation_status: :triggered }, action: 'update')
       end
     end
 
@@ -639,11 +647,12 @@ RSpec.describe Issuable, feature_category: :team_planning do
       it 'includes the cumulative changes of both saves' do
         expect(builder).to receive(:build).with(
           user: user,
+          action: 'update',
           changes: hash_including(
             'title' => ["initial title", "final title"],
             'target_branch' => %w[initial-branch final-branch]
           ))
-        merge_request.to_hook_data(user)
+        merge_request.to_hook_data(user, action: 'update')
       end
     end
   end
diff --git a/spec/models/container_repository_spec.rb b/spec/models/container_repository_spec.rb
index 0984258cf7b..61ab5339885 100644
--- a/spec/models/container_repository_spec.rb
+++ b/spec/models/container_repository_spec.rb
@@ -578,7 +578,8 @@ RSpec.describe ContainerRepository, :aggregate_failures, feature_category: :cont
             short_revision: expected_revision[0..8],
             created_at: DateTime.rfc3339(tags_response[index][:created_at].rfc3339),
             updated_at: DateTime.rfc3339(tags_response[index][:updated_at].rfc3339),
-            published_at: DateTime.rfc3339(tags_response[index][:published_at].rfc3339)
+            published_at: DateTime.rfc3339(tags_response[index][:published_at].rfc3339),
+            media_type: tags_response[index][:media_type]
           )
 
           Array(tag.referrers).each_with_index do |ref, ref_index|
diff --git a/spec/requests/api/ci/runner/jobs_request_post_spec.rb b/spec/requests/api/ci/runner/jobs_request_post_spec.rb
index b0a69951287..92a5eba5c2d 100644
--- a/spec/requests/api/ci/runner/jobs_request_post_spec.rb
+++ b/spec/requests/api/ci/runner/jobs_request_post_spec.rb
@@ -1163,7 +1163,7 @@ RSpec.describe API::Ci::Runner, :clean_gitlab_redis_shared_state, feature_catego
             runner.update!(tag_list: ['tag-1'])
           end
 
-          it 'successfully picks job', quarantine: 'https://gitlab.com/gitlab-org/gitlab/-/issues/466439' do
+          it 'successfully picks job' do
             request_job
 
             build.reload
diff --git a/spec/support/shared_examples/models/concerns/protected_ref_access_shared_examples.rb b/spec/support/shared_examples/models/concerns/protected_ref_access_shared_examples.rb
index 9e2a51822d5..b11bd4a008b 100644
--- a/spec/support/shared_examples/models/concerns/protected_ref_access_shared_examples.rb
+++ b/spec/support/shared_examples/models/concerns/protected_ref_access_shared_examples.rb
@@ -51,7 +51,7 @@ RSpec.shared_examples 'protected ref access' do |association|
     it { is_expected.to eq(levels) }
   end
 
-  describe '#check_access' do
+  describe '#check_access(user, current_project)' do
     let_it_be(:group) { create(:group) }
     # Making a project public to avoid false positives tests
     let_it_be(:project) { create(:project, :public, group: group) }
@@ -59,74 +59,43 @@ RSpec.shared_examples 'protected ref access' do |association|
     let_it_be(:protected_ref) { create(association, project: project) }
 
     let(:access_level) { ::Gitlab::Access::DEVELOPER }
-
-    before_all do
-      project.add_developer(current_user)
-    end
-
-    subject do
+    let(:current_project) { project }
+    let(:described_instance) do
       described_class.new(
         association => protected_ref,
         access_level: access_level
       )
     end
 
-    context 'when current_user is nil' do
-      it { expect(subject.check_access(nil)).to eq(false) }
+    before_all do
+      project.add_developer(current_user)
     end
 
-    context 'when current_user access exists without membership' do
-      let(:other_user) { create(:user) }
-      let(:user_access) do
-        described_class.new(association => protected_ref, access_level: access_level, user_id: other_user.id)
-      end
+    subject do
+      described_instance.check_access(current_user, current_project)
+    end
 
-      let(:enable_ff) { false }
+    context 'when current_user is nil' do
+      let(:current_user) { nil }
 
-      before do
-        stub_feature_flags(check_membership_in_protected_ref_access: enable_ff)
-      end
-
-      it 'does not check membership if check_membership_in_protected_ref_access FF is disabled' do
-        expect(project).not_to receive(:member?).with(other_user)
-
-        user_access.check_access(other_user)
-      end
-
-      context 'when check_membership_in_protected_ref_access FF is enabled' do
-        let(:enable_ff) { true }
-
-        it 'does check membership' do
-          expect(project).to receive(:member?).with(other_user)
-
-          user_access.check_access(other_user)
-        end
-
-        it 'returns false' do
-          expect(user_access.check_access(other_user)).to be_falsey
-        end
-
-        context 'when user has inherited membership' do
-          let!(:inherited_membership) { create(:group_member, group: group, user: other_user) }
-
-          it do
-            expect(user_access.check_access(other_user)).to be_truthy
-          end
-        end
-      end
+      it { is_expected.to eq false }
     end
 
     context 'when access_level is NO_ACCESS' do
       let(:access_level) { ::Gitlab::Access::NO_ACCESS }
 
-      it { expect(subject.check_access(current_user)).to eq(false) }
+      it { is_expected.to eq false }
     end
 
     context 'when instance admin access is configured' do
       let(:access_level) { Gitlab::Access::ADMIN }
 
       context 'when current_user is a maintainer' do
-        it { expect(subject.check_access(current_user)).to eq(false) }
+        before_all do
+          project.add_maintainer(current_user)
+        end
+
+        it { is_expected.to eq false }
       end
 
       context 'when current_user is admin' do
@@ -134,36 +103,36 @@ RSpec.shared_examples 'protected ref access' do |association|
           allow(current_user).to receive(:admin?).and_return(true)
         end
 
-        it { expect(subject.check_access(current_user)).to eq(true) }
+        it { is_expected.to eq true }
       end
     end
 
     context 'when current_user can push_code to project' do
       context 'and member access is high enough' do
-        it { expect(subject.check_access(current_user)).to eq(true) }
+        it { is_expected.to eq true }
 
         context 'when external authorization denies access' do
           before do
             external_service_deny_access(current_user, project)
           end
 
-          it { expect(subject.check_access(current_user)).to be_falsey }
+          it { is_expected.to eq false }
         end
       end
 
       context 'and member access is too low' do
         let(:access_level) { ::Gitlab::Access::MAINTAINER }
 
-        it { expect(subject.check_access(current_user)).to eq(false) }
+        it { is_expected.to eq false }
       end
     end
 
     context 'when current_user cannot push_code to project' do
       before do
-        allow(current_user).to receive(:can?).with(:push_code, project).and_return(false)
+        allow(current_user).to receive(:can?).with(:push_code, project).and_return(false) # rubocop:disable CodeReuse/ActiveRecord -- false positive flag on `with`
       end
 
-      it { expect(subject.check_access(current_user)).to eq(false) }
+      it { is_expected.to eq false }
     end
   end
 end
diff --git a/spec/support/shared_examples/models/concerns/protected_ref_deploy_key_access_shared_examples.rb b/spec/support/shared_examples/models/concerns/protected_ref_deploy_key_access_shared_examples.rb
index 988d2f6d417..f841c6baaa0 100644
--- a/spec/support/shared_examples/models/concerns/protected_ref_deploy_key_access_shared_examples.rb
+++ b/spec/support/shared_examples/models/concerns/protected_ref_deploy_key_access_shared_examples.rb
@@ -3,7 +3,7 @@
 RSpec.shared_examples 'protected ref deploy_key access' do
   let_it_be(:described_instance) { described_class.model_name.singular }
   let_it_be(:protected_ref_name) { described_class.module_parent.model_name.singular }
-  let_it_be(:project) { create(:project) }
+  let_it_be(:project) { create(:project, :in_group) }
   let_it_be(:protected_ref) { create(protected_ref_name, project: project) } # rubocop:disable Rails/SaveBang -- False positive because factory name is dynamic
 
   describe 'associations' do
@@ -84,85 +84,124 @@ RSpec.shared_examples 'protected ref deploy_key access' do
       create(:deploy_keys_project, :write_access, project: project, deploy_key: deploy_key)
     end
 
-    before_all do
-      project.add_maintainer(user)
-    end
+    subject(:perform_access_check) { access_level.check_access(user) }
 
     context "when this #{described_class.model_name.singular} is tied to a deploy key" do
       let!(:access_level) do
         create(described_instance, protected_ref_name => protected_ref, deploy_key: deploy_key)
       end
 
-      context 'when the deploy key is among the active keys for this project' do
-        it { expect(access_level.check_access(user)).to be_truthy }
-      end
-
-      context 'when user is missing' do
-        it { expect(access_level.check_access(nil)).to be_falsey }
-      end
-
-      context 'when deploy key does not belong to the user' do
-        let(:another_user) { create(:user) }
-
-        it { expect(access_level.check_access(another_user)).to be_falsey }
-      end
-
-      context 'when user cannot access the project' do
+      context 'and user is not a project member' do
         before do
-          allow(user).to receive(:can?).with(:read_project, project).and_return(false)
+          allow(project).to receive(:public?).and_return(true)
+          stub_feature_flags(check_membership_in_protected_ref_access: enable_ff)
         end
 
-        it { expect(access_level.check_access(user)).to be_falsey }
+        context 'when check_membership_in_protected_ref_access is enabled' do
+          let(:enable_ff) { true }
+
+          it 'does check membership' do
+            expect(project).to receive(:member?).with(user)
+
+            perform_access_check
+          end
+
+          it { is_expected.to eq(false) }
+
+          context 'when user has inherited membership' do
+            let!(:inherited_membership) { create(:group_member, group: project.group, user: user) }
+
+            it { is_expected.to eq(true) }
+          end
+        end
+
+        context 'when check_membership_in_protected_ref_access is disabled' do
+          let(:enable_ff) { false }
+
+          it 'does not check membership' do
+            expect(project).not_to receive(:member?).with(user)
+
+            perform_access_check
+          end
+        end
       end
 
-      context 'when the deploy key is not among the active keys of this project' do
-        before do
-          deploy_keys_project.update!(can_push: false)
+      context 'when the user is a project maintainer' do
+        before_all do
+          project.add_maintainer(user)
         end
 
-        after do
-          deploy_keys_project.update!(can_push: true)
+        context 'when the deploy key is among the active keys for this project' do
+          it { is_expected.to eq(true) }
         end
 
-        it { expect(access_level.check_access(user)).to be_falsey }
+        context 'when the deploy key is not among the active keys of this project' do
+          before do
+            deploy_keys_project.update!(can_push: false)
+          end
+
+          after do
+            deploy_keys_project.update!(can_push: true)
+          end
+
+          it { is_expected.to eq(false) }
+        end
+
+        context 'when user cannot access the project' do
+          before do
+            allow(user).to receive(:can?).with(:read_project, project).and_return(false)
+          end
+
+          it { is_expected.to eq(false) }
+        end
+
+        context 'when deploy key does not belong to the user' do
+          let_it_be(:deploy_key) do
+            create(:deploy_keys_project, :write_access, project: project).deploy_key
+          end
+
+          it { is_expected.to eq(false) }
+        end
+      end
+
+      context 'when user is nil' do
+        let(:user) { nil }
+
+        it { is_expected.to eq(false) }
       end
     end
   end
 
   describe '#type' do
+    subject { access_level.type }
+
     context 'when deploy_key is present and deploy_key_id is nil' do
       let(:access_level) { build(described_instance, deploy_key: build(:deploy_key)) }
 
-      it 'returns :deploy_key' do
-        expect(access_level.type).to eq(:deploy_key)
-      end
+      it { is_expected.to eq(:deploy_key) }
     end
 
     context 'when deploy_key_id is present and deploy_key is nil' do
       let(:access_level) { build(described_instance, deploy_key_id: 0) }
 
-      it 'returns :deploy_key' do
-        expect(access_level.type).to eq(:deploy_key)
-      end
+      it { is_expected.to eq(:deploy_key) }
     end
   end
 
   describe '#humanize' do
+    subject { access_level.humanize }
+
     context 'when deploy_key is present' do
       let(:deploy_key) { build(:deploy_key) }
       let(:access_level) { build(described_instance, deploy_key: deploy_key) }
 
-      it 'returns deploy_key.title' do
-        expect(access_level.humanize).to eq(deploy_key.title)
-      end
+      it { is_expected.to eq(deploy_key.title) }
     end
 
     context 'when deploy_key_id is present and deploy_key is nil' do
       let(:access_level) { build(described_instance, deploy_key_id: 0) }
 
-      it 'returns "Deploy key"' do
-        expect(access_level.humanize).to eq('Deploy key')
-      end
+      it { is_expected.to eq('Deploy key') }
     end
   end
 end
diff --git a/spec/tasks/cache_rake_spec.rb b/spec/tasks/cache_rake_spec.rb
index 470d715bfd7..6fe341ff1ca 100644
--- a/spec/tasks/cache_rake_spec.rb
+++ b/spec/tasks/cache_rake_spec.rb
@@ -3,7 +3,7 @@
 require 'spec_helper'
 
 RSpec.describe 'clearing redis cache', :clean_gitlab_redis_repository_cache, :clean_gitlab_redis_cache,
-               :silence_stdout, :use_null_store_as_repository_cache, feature_category: :redis do
+  :silence_stdout, :use_null_store_as_repository_cache, feature_category: :redis do
   before do
     Rake.application.rake_require 'tasks/cache'
   end
diff --git a/spec/tasks/gitlab/cleanup_rake_spec.rb b/spec/tasks/gitlab/cleanup_rake_spec.rb
index 5341bab43e8..e4db8d69d9e 100644
--- a/spec/tasks/gitlab/cleanup_rake_spec.rb
+++ b/spec/tasks/gitlab/cleanup_rake_spec.rb
@@ -110,8 +110,8 @@ RSpec.describe 'gitlab:cleanup rake tasks', :silence_stdout do
         expect(Gitlab::Cleanup::OrphanJobArtifactFiles)
           .to receive(:new)
           .with(dry_run: false,
-                niceness: anything,
-                logger: anything)
+            niceness: anything,
+            logger: anything)
           .and_call_original
 
         rake_task
@@ -144,8 +144,8 @@ RSpec.describe 'gitlab:cleanup rake tasks', :silence_stdout do
         expect(Gitlab::Cleanup::OrphanLfsFileReferences)
           .to receive(:new)
           .with(project,
-                dry_run: false,
-                logger: anything)
+            dry_run: false,
+            logger: anything)
           .and_call_original
 
         rake_task
@@ -193,19 +193,19 @@ RSpec.describe 'gitlab:cleanup rake tasks', :silence_stdout do
       project.repository.raw.create_branch(delete_branch_name, "master")
 
       create(:merge_request, :merged, :remove_source_branch, source_project: project, target_project: project,
-     source_branch: delete_branch_name, target_branch: 'master')
+        source_branch: delete_branch_name, target_branch: 'master')
     end
 
     let!(:mr2) do
       project.repository.raw.create_branch(keep_branch_name, "master")
 
       create(:merge_request, :merged, source_project: project, target_project: project, source_branch: keep_branch_name,
-     target_branch: 'master')
+        target_branch: 'master')
     end
 
     let!(:mr3) do
       create(:merge_request, :remove_source_branch, source_project: project, target_project: project,
-     source_branch: keep_branch_name, target_branch: 'master')
+        source_branch: keep_branch_name, target_branch: 'master')
     end
 
     let!(:mr4) do
@@ -214,7 +214,7 @@ RSpec.describe 'gitlab:cleanup rake tasks', :silence_stdout do
 
     let!(:mr5) do
       create(:merge_request, :merged, :remove_source_branch, source_branch: 'test', source_project: project,
-             target_project: project, target_branch: 'master')
+        target_project: project, target_branch: 'master')
     end
 
     let!(:protected) do
@@ -260,7 +260,7 @@ RSpec.describe 'gitlab:cleanup rake tasks', :silence_stdout do
         project.repository.raw.create_branch(delete_me_not, "master")
 
         create(:merge_request, :merged, :remove_source_branch, source_project: project, target_project: project,
-               source_branch: delete_me_not, target_branch: 'master')
+          source_branch: delete_me_not, target_branch: 'master')
       end
 
       before do
@@ -306,7 +306,7 @@ RSpec.describe 'gitlab:cleanup rake tasks', :silence_stdout do
           project.repository.raw.create_branch(delete_me_not, "master")
 
           create(:merge_request, :opened, :remove_source_branch, source_project: project, target_project: project,
-                 source_branch: delete_me_not, target_branch: 'master')
+            source_branch: delete_me_not, target_branch: 'master')
         end
 
         it 'does not delete the branch of the merged/open mr' do
@@ -364,7 +364,7 @@ RSpec.describe 'gitlab:cleanup rake tasks', :silence_stdout do
       before do
         Gitlab::Redis::Sessions.with do |redis|
           redis.set(ActiveSession.key_name(user.id, existing_session_id),
-                    ActiveSession.new(session_id: 'x').dump)
+            ActiveSession.new(session_id: 'x').dump)
           redis.sadd(ActiveSession.lookup_key_name(user.id), (1..10).to_a)
         end
       end
diff --git a/spec/tasks/gitlab/db/decomposition/rollback/bump_ci_sequences_rake_spec.rb b/spec/tasks/gitlab/db/decomposition/rollback/bump_ci_sequences_rake_spec.rb
index 41c9e837ead..6011fa4a43b 100644
--- a/spec/tasks/gitlab/db/decomposition/rollback/bump_ci_sequences_rake_spec.rb
+++ b/spec/tasks/gitlab/db/decomposition/rollback/bump_ci_sequences_rake_spec.rb
@@ -3,7 +3,7 @@
 require 'spec_helper'
 
 RSpec.describe 'gitlab:db:decomposition:rollback:bump_ci_sequences', :silence_stdout,
-               :suppress_gitlab_schemas_validate_connection, feature_category: :cell, query_analyzers: false do
+  :suppress_gitlab_schemas_validate_connection, feature_category: :cell, query_analyzers: false do
   before(:all) do
     Rake.application.rake_require 'tasks/gitlab/db/decomposition/rollback/bump_ci_sequences'
   end
diff --git a/spec/tasks/gitlab/db/truncate_legacy_tables_rake_spec.rb b/spec/tasks/gitlab/db/truncate_legacy_tables_rake_spec.rb
index 940bb9baa60..0bee717ac18 100644
--- a/spec/tasks/gitlab/db/truncate_legacy_tables_rake_spec.rb
+++ b/spec/tasks/gitlab/db/truncate_legacy_tables_rake_spec.rb
@@ -3,7 +3,7 @@
 require 'spec_helper'
 
 RSpec.describe 'gitlab:db:truncate_legacy_tables', :silence_stdout, :reestablished_active_record_base,
-               :suppress_gitlab_schemas_validate_connection, feature_category: :cell do
+  :suppress_gitlab_schemas_validate_connection, feature_category: :cell do
   let(:main_connection) { ApplicationRecord.connection }
   let(:ci_connection) { Ci::ApplicationRecord.connection }
   let(:test_gitlab_main_table) { '_test_gitlab_main_table' }
diff --git a/spec/tasks/gitlab/sidekiq_rake_spec.rb b/spec/tasks/gitlab/sidekiq_rake_spec.rb
index 2419449814e..8f38f572b3a 100644
--- a/spec/tasks/gitlab/sidekiq_rake_spec.rb
+++ b/spec/tasks/gitlab/sidekiq_rake_spec.rb
@@ -26,9 +26,9 @@ RSpec.describe 'sidekiq.rake', :aggregate_failures, :silence_stdout do
 
       expect(::Gitlab::SidekiqMigrateJobs)
         .to receive(:new).with(a_hash_including('PostReceive' => 'default',
-                                                'MergeWorker' => 'default',
-                                                'DeleteDiffFilesWorker' => 'delete_diff_files'),
-                                                logger: an_instance_of(Logger)).and_return(migrator)
+          'MergeWorker' => 'default',
+          'DeleteDiffFilesWorker' => 'delete_diff_files'),
+          logger: an_instance_of(Logger)).and_return(migrator)
 
       expect(migrator).to receive(:migrate_set).with(sidekiq_set).and_call_original
 
@@ -66,8 +66,8 @@ RSpec.describe 'sidekiq.rake', :aggregate_failures, :silence_stdout do
 
       expect(::Gitlab::SidekiqMigrateJobs)
         .to receive(:new).with(a_hash_including('PostReceive' => 'default',
-                                                'MergeWorker' => 'default'),
-                               logger: an_instance_of(Logger)).and_return(migrator)
+          'MergeWorker' => 'default'),
+          logger: an_instance_of(Logger)).and_return(migrator)
 
       expect(migrator).to receive(:migrate_queues).and_call_original
 
diff --git a/spec/tooling/danger/sidekiq_queues_spec.rb b/spec/tooling/danger/sidekiq_queues_spec.rb
index 143ea9732cd..686b1273ab1 100644
--- a/spec/tooling/danger/sidekiq_queues_spec.rb
+++ b/spec/tooling/danger/sidekiq_queues_spec.rb
@@ -54,8 +54,8 @@ RSpec.describe Tooling::Danger::SidekiqQueues do
       }
 
       new_queues = old_queues.merge(mailers: { name: :mailers, urgency: :high },
-                                    post_receive: { name: :post_receive, urgency: :low },
-                                    process_commit: { name: :process_commit, urgency: :low })
+        post_receive: { name: :post_receive, urgency: :low },
+        process_commit: { name: :process_commit, urgency: :low })
 
       allow(sidekiq_queues).to receive(:old_queues).and_return(old_queues)
       allow(sidekiq_queues).to receive(:new_queues).and_return(new_queues)
diff --git a/spec/tooling/graphql/docs/renderer_spec.rb b/spec/tooling/graphql/docs/renderer_spec.rb
index cb638f8bbf3..85b56b0c9d3 100644
--- a/spec/tooling/graphql/docs/renderer_spec.rb
+++ b/spec/tooling/graphql/docs/renderer_spec.rb
@@ -163,22 +163,22 @@ RSpec.describe Tooling::Graphql::Docs::Renderer do
           description 'Testing doc refs'
 
           field :foo,
-                type: GraphQL::Types::String,
-                null: false,
-                description: 'The foo.',
-                see: { 'A list of foos' => 'https://example.com/foos' }
+            type: GraphQL::Types::String,
+            null: false,
+            description: 'The foo.',
+            see: { 'A list of foos' => 'https://example.com/foos' }
           field :bar,
-                type: GraphQL::Types::String,
-                null: false,
-                description: 'The bar.',
-                see: { 'A list of bars' => 'https://example.com/bars' } do
-                  argument :barity, ::GraphQL::Types::Int, required: false, description: '?'
-                end
+            type: GraphQL::Types::String,
+            null: false,
+            description: 'The bar.',
+            see: { 'A list of bars' => 'https://example.com/bars' } do
+            argument :barity, ::GraphQL::Types::Int, required: false, description: '?'
+          end
           field :wibbles,
-                type: wibble.connection_type,
-                null: true,
-                description: 'The wibbles',
-                see: { 'wibblance' => 'https://example.com/wibbles' }
+            type: wibble.connection_type,
+            null: true,
+            description: 'The wibbles',
+            see: { 'wibblance' => 'https://example.com/wibbles' }
         end
       end
 
@@ -221,14 +221,14 @@ RSpec.describe Tooling::Graphql::Docs::Renderer do
           description 'A thing we used to use, but no longer support'
 
           field :foo,
-                type: GraphQL::Types::String,
-                null: false,
-                description: 'A description.' do
-                  argument :foo_arg, GraphQL::Types::String,
-                           required: false,
-                           description: 'The argument.',
-                           deprecated: { reason: 'Bad argument', milestone: '101.2' }
-                end
+            type: GraphQL::Types::String,
+            null: false,
+            description: 'A description.' do
+            argument :foo_arg, GraphQL::Types::String,
+              required: false,
+              description: 'The argument.',
+              deprecated: { reason: 'Bad argument', milestone: '101.2' }
+          end
         end
       end
 
@@ -258,26 +258,26 @@ RSpec.describe Tooling::Graphql::Docs::Renderer do
           description 'A thing we used to use, but no longer support'
 
           field :foo,
-                type: GraphQL::Types::String,
-                null: false,
-                deprecated: { reason: 'This is deprecated', milestone: '1.10' },
-                description: 'A description.'
+            type: GraphQL::Types::String,
+            null: false,
+            deprecated: { reason: 'This is deprecated', milestone: '1.10' },
+            description: 'A description.'
           field :foo_with_args,
-                type: GraphQL::Types::String,
-                null: false,
-                deprecated: { reason: 'Do not use', milestone: '1.10', replacement: 'X.y' },
-                description: 'A description.' do
-                  argument :arg, GraphQL::Types::Int, required: false, description: 'Argity'
-                end
+            type: GraphQL::Types::String,
+            null: false,
+            deprecated: { reason: 'Do not use', milestone: '1.10', replacement: 'X.y' },
+            description: 'A description.' do
+            argument :arg, GraphQL::Types::Int, required: false, description: 'Argity'
+          end
           field :bar,
-                type: GraphQL::Types::String,
-                null: false,
-                description: 'A description.',
-                deprecated: {
-                  reason: :renamed,
-                  milestone: '1.10',
-                  replacement: 'Query.boom'
-                }
+            type: GraphQL::Types::String,
+            null: false,
+            description: 'A description.',
+            deprecated: {
+              reason: :renamed,
+              milestone: '1.10',
+              replacement: 'Query.boom'
+            }
         end
       end
 
@@ -355,14 +355,14 @@ RSpec.describe Tooling::Graphql::Docs::Renderer do
           description 'A thing with arguments in alpha'
 
           field :foo,
-                type: GraphQL::Types::String,
-                null: false,
-                description: 'A description.' do
-                  argument :foo_arg, GraphQL::Types::String,
-                           required: false,
-                           description: 'Argument description.',
-                           alpha: { milestone: '101.2' }
-                end
+            type: GraphQL::Types::String,
+            null: false,
+            description: 'A description.' do
+            argument :foo_arg, GraphQL::Types::String,
+              required: false,
+              description: 'Argument description.',
+              alpha: { milestone: '101.2' }
+          end
         end
       end
 
@@ -392,17 +392,17 @@ RSpec.describe Tooling::Graphql::Docs::Renderer do
           description 'A thing with fields in alpha'
 
           field :foo,
-                type: GraphQL::Types::String,
-                null: false,
-                alpha: { milestone: '1.10' },
-                description: 'A description.'
+            type: GraphQL::Types::String,
+            null: false,
+            alpha: { milestone: '1.10' },
+            description: 'A description.'
           field :foo_with_args,
-                type: GraphQL::Types::String,
-                null: false,
-                alpha: { milestone: '1.10' },
-                description: 'A description.' do
-                  argument :arg, GraphQL::Types::Int, required: false, description: 'Argity'
-                end
+            type: GraphQL::Types::String,
+            null: false,
+            alpha: { milestone: '1.10' },
+            description: 'A description.' do
+            argument :arg, GraphQL::Types::Int, required: false, description: 'Argity'
+          end
         end
       end
 
@@ -477,13 +477,13 @@ RSpec.describe Tooling::Graphql::Docs::Renderer do
           description 'A test of an enum.'
 
           value 'BAZ',
-                description: 'A description of BAZ.'
+            description: 'A description of BAZ.'
           value 'BAR',
-                description: 'A description of BAR.',
-                deprecated: { reason: 'This is deprecated', milestone: '1.10' }
+            description: 'A description of BAR.',
+            deprecated: { reason: 'This is deprecated', milestone: '1.10' }
           value 'BOOP',
-                description: 'A description of BOOP.',
-                deprecated: { reason: :renamed, replacement: 'MyEnum.BAR', milestone: '1.10' }
+            description: 'A description of BOOP.',
+            deprecated: { reason: :renamed, replacement: 'MyEnum.BAR', milestone: '1.10' }
         end
 
         Class.new(Types::BaseObject) do
@@ -561,34 +561,34 @@ RSpec.describe Tooling::Graphql::Docs::Renderer do
         mutation.description 'Make everything very pretty.'
 
         mutation.argument :prettiness_factor,
-                          type: GraphQL::Types::Float,
-                          required: true,
-                          description: 'How much prettier?'
+          type: GraphQL::Types::Float,
+          required: true,
+          description: 'How much prettier?'
 
         mutation.argument :pulchritude,
-                          type: GraphQL::Types::Float,
-                          required: false,
-                          description: 'How much prettier?',
-                          deprecated: {
-                            reason: :renamed,
-                            replacement: 'prettinessFactor',
-                            milestone: '72.34'
-                          }
+          type: GraphQL::Types::Float,
+          required: false,
+          description: 'How much prettier?',
+          deprecated: {
+            reason: :renamed,
+            replacement: 'prettinessFactor',
+            milestone: '72.34'
+          }
 
         mutation.field :everything,
-                       type: GraphQL::Types::String,
-                       null: true,
-                       description: 'What we made prettier.'
+          type: GraphQL::Types::String,
+          null: true,
+          description: 'What we made prettier.'
 
         mutation.field :omnis,
-                       type: GraphQL::Types::String,
-                       null: true,
-                       description: 'What we made prettier.',
-                       deprecated: {
-                         reason: :renamed,
-                         replacement: 'everything',
-                         milestone: '72.34'
-                       }
+          type: GraphQL::Types::String,
+          null: true,
+          description: 'What we made prettier.',
+          deprecated: {
+            reason: :renamed,
+            replacement: 'everything',
+            milestone: '72.34'
+          }
 
         mutation
       end
@@ -641,9 +641,9 @@ RSpec.describe Tooling::Graphql::Docs::Renderer do
           graphql_name 'Foo'
           field :wibble, type: ::GraphQL::Types::Int, null: true do
             argument :date_range,
-                     type: ::Types::TimeframeInputType,
-                     required: true,
-                     description: 'When the foo happened.'
+              type: ::Types::TimeframeInputType,
+              required: true,
+              description: 'When the foo happened.'
           end
         end
       end
diff --git a/tooling/danger/suggestor.rb b/tooling/danger/suggestor.rb
index 0e61005629d..2ffdb06543e 100644
--- a/tooling/danger/suggestor.rb
+++ b/tooling/danger/suggestor.rb
@@ -15,7 +15,7 @@ module Tooling
           break if once_per_file && processed_line_numbers.any?
 
           line_number = find_line_number(file_lines, added_line.delete_prefix('+'),
-exclude_indexes: processed_line_numbers)
+            exclude_indexes: processed_line_numbers)
 
           next unless line_number
           next if !exclude.nil? && added_line.include?(exclude)