The Compliance Dashboard shows only the latest MR on each project.
The Compliance Dashboard shows only the latest MR on each project.
...
@@ -63,7 +63,9 @@ This column has four states:
...
@@ -63,7 +63,9 @@ This column has four states:
If you do not see the success icon in your Compliance dashboard; please review the above criteria for the Merge Requests
If you do not see the success icon in your Compliance dashboard; please review the above criteria for the Merge Requests
project to make sure it complies with the separation of duties described above.
project to make sure it complies with the separation of duties described above.
## Chain of Custody report
## Chain of Custody report **(ULTIMATE)**
> [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/213364) in [GitLab Ultimate](https://about.gitlab.com/pricing/) 13.3.
The Chain of Custody report allows customers to export a list of merge commits within the group.
The Chain of Custody report allows customers to export a list of merge commits within the group.
The data provides a comprehensive view with respect to merge commits. It includes the merge commit SHA,
The data provides a comprehensive view with respect to merge commits. It includes the merge commit SHA,
...
@@ -72,6 +74,13 @@ Depending on the merge strategy, the merge commit SHA can either be a merge comm
...
@@ -72,6 +74,13 @@ Depending on the merge strategy, the merge commit SHA can either be a merge comm
To download the Chain of Custody report, navigate to **{shield}****Security & Compliance > Compliance** on the group's menu and click **List of all merge commits**
To download the Chain of Custody report, navigate to **{shield}****Security & Compliance > Compliance** on the group's menu and click **List of all merge commits**
### Commit-specific Chain of Custody Report **(ULTIMATE)**
> [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/267629) in [GitLab Ultimate](https://about.gitlab.com/pricing/) 13.6.
You can generate a commit-specific Chain of Custody report for a given commit SHA. To do so, select
the dropdown next to the **List of all merge commits** button at the top of the Compliance Dashboard.
NOTE: **Note:**
NOTE: **Note:**
The Chain of Custody report download is a CSV file, with a maximum size of 15 MB.
The Chain of Custody report download is a CSV file, with a maximum size of 15 MB.
The remaining records are truncated when this limit is reached.
The remaining records are truncated when this limit is reached.