Add latest changes from gitlab-org/gitlab@master

23 files changed, 362 insertions, 160 deletions

diff --git a/spec/lib/gitlab/background_migration/delete_orphaned_operational_vulnerabilities_spec.rb b/spec/lib/gitlab/background_migration/delete_orphaned_operational_vulnerabilities_spec.rb
new file mode 100644
index 00000000000..afa955a6056
--- /dev/null
+++ b/spec/lib/gitlab/background_migration/delete_orphaned_operational_vulnerabilities_spec.rb
@@ -0,0 +1,111 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe Gitlab::BackgroundMigration::DeleteOrphanedOperationalVulnerabilities, :migration do
+  include MigrationHelpers::VulnerabilitiesHelper
+
+  let_it_be(:namespace) { table(:namespaces).create!(name: 'user', path: 'user') }
+  let_it_be(:users) { table(:users) }
+  let_it_be(:user) do
+    users.create!(
+      name: "Example User",
+      email: "user@example.com",
+      username: "Example User",
+      projects_limit: 0,
+      confirmed_at: Time.current
+    )
+  end
+
+  let_it_be(:project) do
+    table(:projects).create!(
+      id: 123,
+      namespace_id: namespace.id,
+      project_namespace_id: namespace.id
+    )
+  end
+
+  let_it_be(:scanners) { table(:vulnerability_scanners) }
+  let_it_be(:scanner) { scanners.create!(project_id: project.id, external_id: 'test 1', name: 'test scanner 1') }
+  let_it_be(:different_scanner) do
+    scanners.create!(
+      project_id: project.id,
+      external_id: 'test 2',
+      name: 'test scanner 2'
+    )
+  end
+
+  let_it_be(:vulnerabilities) { table(:vulnerabilities) }
+  let_it_be(:vulnerability_with_finding) do
+    create_vulnerability!(
+      project_id: project.id,
+      author_id: user.id
+    )
+  end
+
+  let_it_be(:vulnerability_without_finding) do
+    create_vulnerability!(
+      project_id: project.id,
+      author_id: user.id
+    )
+  end
+
+  let_it_be(:cis_vulnerability_without_finding) do
+    create_vulnerability!(
+      project_id: project.id,
+      author_id: user.id,
+      report_type: 7
+    )
+  end
+
+  let_it_be(:custom_vulnerability_without_finding) do
+    create_vulnerability!(
+      project_id: project.id,
+      author_id: user.id,
+      report_type: 99
+    )
+  end
+
+  let_it_be(:vulnerability_identifiers) { table(:vulnerability_identifiers) }
+  let_it_be(:primary_identifier) do
+    vulnerability_identifiers.create!(
+      project_id: project.id,
+      external_type: 'uuid-v5',
+      external_id: 'uuid-v5',
+      fingerprint: '7e394d1b1eb461a7406d7b1e08f057a1cf11287a',
+      name: 'Identifier for UUIDv5')
+  end
+
+  let_it_be(:vulnerabilities_findings) { table(:vulnerability_occurrences) }
+  let_it_be(:finding) do
+    create_finding!(
+      vulnerability_id: vulnerability_with_finding.id,
+      project_id: project.id,
+      scanner_id: scanner.id,
+      primary_identifier_id: primary_identifier.id
+    )
+  end
+
+  subject(:background_migration) do
+    described_class.new(start_id: vulnerabilities.minimum(:id),
+                        end_id: vulnerabilities.maximum(:id),
+                        batch_table: :vulnerabilities,
+                        batch_column: :id,
+                        sub_batch_size: 2,
+                        pause_ms: 0,
+                        connection: ActiveRecord::Base.connection)
+  end
+
+  it 'drops Cluster Image Scanning and Custom Vulnerabilities without any Findings' do
+    expect(vulnerabilities.pluck(:id)).to match_array([
+                                                        vulnerability_with_finding.id,
+                                                        vulnerability_without_finding.id,
+                                                        cis_vulnerability_without_finding.id,
+                                                        custom_vulnerability_without_finding.id
+                                                      ])
+
+    expect { background_migration.perform }.to change(vulnerabilities, :count).by(-2)
+
+    expect(vulnerabilities.pluck(:id)).to match_array([vulnerability_with_finding.id, vulnerability_without_finding.id])
+  end
+end
diff --git a/spec/migrations/20220929213730_schedule_delete_orphaned_operational_vulnerabilities_spec.rb b/spec/migrations/20220929213730_schedule_delete_orphaned_operational_vulnerabilities_spec.rb
new file mode 100644
index 00000000000..9220b5e8a95
--- /dev/null
+++ b/spec/migrations/20220929213730_schedule_delete_orphaned_operational_vulnerabilities_spec.rb
@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+require_migration!
+
+RSpec.describe ScheduleDeleteOrphanedOperationalVulnerabilities do
+  let_it_be(:migration) { described_class.new }
+  let_it_be(:post_migration) { described_class::MIGRATION }
+
+  describe '#up' do
+    it 'schedules background jobs for each batch of vulnerabilities' do
+      migration.up
+
+      expect(post_migration).to(
+        have_scheduled_batched_migration(
+          table_name: :vulnerabilities,
+          column_name: :id,
+          interval: described_class::INTERVAL,
+          batch_size: described_class::BATCH_SIZE
+        )
+      )
+    end
+  end
+
+  describe '#down' do
+    it 'deletes all batched migration records' do
+      migration.down
+
+      expect(post_migration).not_to have_scheduled_batched_migration
+    end
+  end
+end
diff --git a/spec/requests/projects/ci/promeheus_metrics/histograms_controller_spec.rb b/spec/requests/projects/ci/promeheus_metrics/histograms_controller_spec.rb
index 7d5eb1c9685..c5e7369b0a9 100644
--- a/spec/requests/projects/ci/promeheus_metrics/histograms_controller_spec.rb
+++ b/spec/requests/projects/ci/promeheus_metrics/histograms_controller_spec.rb
@@ -8,10 +8,11 @@ RSpec.describe 'Projects::Ci::PrometheusMetrics::HistogramsController' do
   describe 'POST /*namespace_id/:project_id/-/ci/prometheus_metrics/histograms' do
     context 'with known histograms' do
       it 'returns 201 Created' do
-        post histograms_route(histograms: [
-          { name: :pipeline_graph_link_calculation_duration_seconds, value: 1 },
-          { name: :pipeline_graph_links_total, value: 10 }
-        ])
+        post histograms_route(histograms:
+          [
+            { name: :pipeline_graph_link_calculation_duration_seconds, value: 1 },
+            { name: :pipeline_graph_links_total, value: 10 }
+          ])
 
         expect(response).to have_gitlab_http_status(:created)
       end
diff --git a/spec/requests/projects/issues_controller_spec.rb b/spec/requests/projects/issues_controller_spec.rb
index de1d55ff5be..aa2ba5e114b 100644
--- a/spec/requests/projects/issues_controller_spec.rb
+++ b/spec/requests/projects/issues_controller_spec.rb
@@ -31,11 +31,12 @@ RSpec.describe Projects::IssuesController do
         notes = discussions.flat_map { |d| d['notes'] }
 
         expect(discussions.count).to eq(2)
-        expect(notes).to match([
-          a_hash_including('id' => discussion.id.to_s),
-          a_hash_including('id' => discussion_reply.id.to_s),
-          a_hash_including('type' => 'StateNote')
-        ])
+        expect(notes).to match(
+          [
+            a_hash_including('id' => discussion.id.to_s),
+            a_hash_including('id' => discussion_reply.id.to_s),
+            a_hash_including('type' => 'StateNote')
+          ])
 
         cursor = response.header['X-Next-Page-Cursor']
         expect(cursor).to be_present
@@ -46,9 +47,7 @@ RSpec.describe Projects::IssuesController do
         notes = discussions.flat_map { |d| d['notes'] }
 
         expect(discussions.count).to eq(1)
-        expect(notes).to match([
-          a_hash_including('id' => discussion_2.id.to_s)
-        ])
+        expect(notes).to match([a_hash_including('id' => discussion_2.id.to_s)])
       end
     end
   end
diff --git a/spec/requests/projects/merge_requests_controller_spec.rb b/spec/requests/projects/merge_requests_controller_spec.rb
index 6580fc8b80f..2ee86bb423b 100644
--- a/spec/requests/projects/merge_requests_controller_spec.rb
+++ b/spec/requests/projects/merge_requests_controller_spec.rb
@@ -29,11 +29,12 @@ RSpec.describe Projects::MergeRequestsController do
         notes = discussions.flat_map { |d| d['notes'] }
 
         expect(discussions.count).to eq(2)
-        expect(notes).to match([
-          a_hash_including('id' => discussion.id.to_s),
-          a_hash_including('id' => discussion_reply.id.to_s),
-          a_hash_including('type' => 'StateNote')
-        ])
+        expect(notes).to match(
+          [
+            a_hash_including('id' => discussion.id.to_s),
+            a_hash_including('id' => discussion_reply.id.to_s),
+            a_hash_including('type' => 'StateNote')
+          ])
 
         cursor = response.header['X-Next-Page-Cursor']
         expect(cursor).to be_present
@@ -44,9 +45,7 @@ RSpec.describe Projects::MergeRequestsController do
         notes = discussions.flat_map { |d| d['notes'] }
 
         expect(discussions.count).to eq(1)
-        expect(notes).to match([
-          a_hash_including('id' => discussion_2.id.to_s)
-        ])
+        expect(notes).to match([a_hash_including('id' => discussion_2.id.to_s)])
       end
 
       context 'when paginated_mr_discussions is disabled' do
diff --git a/spec/serializers/build_trace_entity_spec.rb b/spec/serializers/build_trace_entity_spec.rb
index 82bd56caaac..f3d1d0a21a8 100644
--- a/spec/serializers/build_trace_entity_spec.rb
+++ b/spec/serializers/build_trace_entity_spec.rb
@@ -38,8 +38,9 @@ RSpec.describe BuildTraceEntity do
   end
 
   it 'includes the trace content in json' do
-    expect(subject[:lines]).to eq([
-      { offset: 0, content: [{ text: 'the-trace' }] }
-    ])
+    expect(subject[:lines]).to eq(
+      [
+        { offset: 0, content: [{ text: 'the-trace' }] }
+      ])
   end
 end
diff --git a/spec/serializers/ci/daily_build_group_report_result_serializer_spec.rb b/spec/serializers/ci/daily_build_group_report_result_serializer_spec.rb
index ddeeb367afe..6fe1376b890 100644
--- a/spec/serializers/ci/daily_build_group_report_result_serializer_spec.rb
+++ b/spec/serializers/ci/daily_build_group_report_result_serializer_spec.rb
@@ -18,22 +18,23 @@ RSpec.describe Ci::DailyBuildGroupReportResultSerializer do
     let(:json) { Gitlab::Json.parse(serializer.to_json) }
 
     it 'returns an array of group results' do
-      expect(json).to eq([
-        {
-          'group_name' => 'rspec',
-          'data' => [
-            { 'date' => '2020-05-20', 'coverage' => 79.1 },
-            { 'date' => '2020-05-19', 'coverage' => 77.1 }
-          ]
-        },
-        {
-          'group_name' => 'karma',
-          'data' => [
-            { 'date' => '2020-05-20', 'coverage' => 90.1 },
-            { 'date' => '2020-05-19', 'coverage' => 89.1 }
-          ]
-        }
-      ])
+      expect(json).to eq(
+        [
+          {
+            'group_name' => 'rspec',
+            'data' => [
+              { 'date' => '2020-05-20', 'coverage' => 79.1 },
+              { 'date' => '2020-05-19', 'coverage' => 77.1 }
+            ]
+          },
+          {
+            'group_name' => 'karma',
+            'data' => [
+              { 'date' => '2020-05-20', 'coverage' => 90.1 },
+              { 'date' => '2020-05-19', 'coverage' => 89.1 }
+            ]
+          }
+        ])
     end
   end
 end
diff --git a/spec/serializers/merge_request_poll_widget_entity_spec.rb b/spec/serializers/merge_request_poll_widget_entity_spec.rb
index 90a82d16e38..59ffba0e7a9 100644
--- a/spec/serializers/merge_request_poll_widget_entity_spec.rb
+++ b/spec/serializers/merge_request_poll_widget_entity_spec.rb
@@ -152,17 +152,19 @@ RSpec.describe MergeRequestPollWidgetEntity do
 
   describe '#builds_with_coverage' do
     it 'serializes the builds with coverage' do
-      allow(resource).to receive(:head_pipeline_builds_with_coverage).and_return([
-        double(name: 'rspec', coverage: 91.5),
-        double(name: 'jest', coverage: 94.1)
-      ])
+      allow(resource).to receive(:head_pipeline_builds_with_coverage).and_return(
+        [
+          double(name: 'rspec', coverage: 91.5),
+          double(name: 'jest', coverage: 94.1)
+        ])
 
       result = subject[:builds_with_coverage]
 
-      expect(result).to eq([
-        { name: 'rspec', coverage: 91.5 },
-        { name: 'jest', coverage: 94.1 }
-      ])
+      expect(result).to eq(
+        [
+          { name: 'rspec', coverage: 91.5 },
+          { name: 'jest', coverage: 94.1 }
+        ])
     end
   end
 
diff --git a/spec/services/award_emojis/copy_service_spec.rb b/spec/services/award_emojis/copy_service_spec.rb
index e85c548968e..abb9c65e25d 100644
--- a/spec/services/award_emojis/copy_service_spec.rb
+++ b/spec/services/award_emojis/copy_service_spec.rb
@@ -4,10 +4,12 @@ require 'spec_helper'
 
 RSpec.describe AwardEmojis::CopyService do
   let_it_be(:from_awardable) do
-    create(:issue, award_emoji: [
-      build(:award_emoji, name: 'thumbsup'),
-      build(:award_emoji, name: 'thumbsdown')
-    ])
+    create(
+      :issue,
+      award_emoji: [
+        build(:award_emoji, name: 'thumbsup'),
+        build(:award_emoji, name: 'thumbsdown')
+      ])
   end
 
   describe '#initialize' do
diff --git a/spec/services/bulk_update_integration_service_spec.rb b/spec/services/bulk_update_integration_service_spec.rb
index 7c5bd1db565..24a868b524d 100644
--- a/spec/services/bulk_update_integration_service_spec.rb
+++ b/spec/services/bulk_update_integration_service_spec.rb
@@ -11,8 +11,8 @@ RSpec.describe BulkUpdateIntegrationService do
 
   let(:excluded_attributes) do
     %w[
-       id project_id group_id inherit_from_id instance template
-       created_at updated_at encrypted_properties encrypted_properties_iv
+      id project_id group_id inherit_from_id instance template
+      created_at updated_at encrypted_properties encrypted_properties_iv
     ]
   end
 
diff --git a/spec/services/ci/compare_test_reports_service_spec.rb b/spec/services/ci/compare_test_reports_service_spec.rb
index 01d58b2095f..6d3df0f5383 100644
--- a/spec/services/ci/compare_test_reports_service_spec.rb
+++ b/spec/services/ci/compare_test_reports_service_spec.rb
@@ -72,10 +72,11 @@ RSpec.describe Ci::CompareTestReportsService do
 
       it 'loads recent failures on limited test cases to avoid building up a huge DB query', :aggregate_failures do
         expect(comparison[:data]).to match_schema('entities/test_reports_comparer')
-        expect(recent_failures_per_test_case).to eq([
-          { 'count' => 1, 'base_branch' => 'master' },
-          { 'count' => 1, 'base_branch' => 'master' }
-        ])
+        expect(recent_failures_per_test_case).to eq(
+          [
+            { 'count' => 1, 'base_branch' => 'master' },
+            { 'count' => 1, 'base_branch' => 'master' }
+          ])
         expect(new_failures.count).to eq(2)
       end
     end
diff --git a/spec/services/ci/create_pipeline_service/rules_spec.rb b/spec/services/ci/create_pipeline_service/rules_spec.rb
index 87e9b4400e7..c737b8cc329 100644
--- a/spec/services/ci/create_pipeline_service/rules_spec.rb
+++ b/spec/services/ci/create_pipeline_service/rules_spec.rb
@@ -540,9 +540,10 @@ RSpec.describe Ci::CreatePipelineService, :yaml_processor_feature_flag_corectnes
             let(:compare_to) { 'invalid-branch' }
 
             it 'returns an error' do
-              expect(pipeline.errors.full_messages).to eq([
-                'Failed to parse rule for job1: rules:changes:compare_to is not a valid ref'
-              ])
+              expect(pipeline.errors.full_messages).to eq(
+                [
+                  'Failed to parse rule for job1: rules:changes:compare_to is not a valid ref'
+                ])
             end
           end
 
diff --git a/spec/services/ci/find_exposed_artifacts_service_spec.rb b/spec/services/ci/find_exposed_artifacts_service_spec.rb
index 32d96471f16..6e11c153a75 100644
--- a/spec/services/ci/find_exposed_artifacts_service_spec.rb
+++ b/spec/services/ci/find_exposed_artifacts_service_spec.rb
@@ -157,20 +157,21 @@ RSpec.describe Ci::FindExposedArtifactsService do
       subject { described_class.new(project, user).for_pipeline(pipeline, limit: 2) }
 
       it 'returns first 2 results' do
-        expect(subject).to eq([
-          {
-            text: 'artifact 1',
-            url: file_project_job_artifacts_path(project, job1, 'ci_artifacts.txt'),
-            job_name: job1.name,
-            job_path: project_job_path(project, job1)
-          },
-          {
-            text: 'artifact 2',
-            url: browse_project_job_artifacts_path(project, job2),
-            job_name: job2.name,
-            job_path: project_job_path(project, job2)
-          }
-        ])
+        expect(subject).to eq(
+          [
+            {
+              text: 'artifact 1',
+              url: file_project_job_artifacts_path(project, job1, 'ci_artifacts.txt'),
+              job_name: job1.name,
+              job_path: project_job_path(project, job1)
+            },
+            {
+              text: 'artifact 2',
+              url: browse_project_job_artifacts_path(project, job2),
+              job_name: job2.name,
+              job_path: project_job_path(project, job2)
+            }
+          ])
       end
     end
 
@@ -199,20 +200,21 @@ RSpec.describe Ci::FindExposedArtifactsService do
       subject { described_class.new(project, user).for_pipeline(pipeline, limit: 2) }
 
       it 'returns the correct path for cross-project MRs' do
-        expect(subject).to eq([
-          {
-            text: 'file artifact',
-            url: file_project_job_artifacts_path(foreign_project, job_show, 'ci_artifacts.txt'),
-            job_name: job_show.name,
-            job_path: project_job_path(foreign_project, job_show)
-          },
-          {
-            text: 'directory artifact',
-            url: browse_project_job_artifacts_path(foreign_project, job_browse),
-            job_name: job_browse.name,
-            job_path: project_job_path(foreign_project, job_browse)
-          }
-        ])
+        expect(subject).to eq(
+          [
+            {
+              text: 'file artifact',
+              url: file_project_job_artifacts_path(foreign_project, job_show, 'ci_artifacts.txt'),
+              job_name: job_show.name,
+              job_path: project_job_path(foreign_project, job_show)
+            },
+            {
+              text: 'directory artifact',
+              url: browse_project_job_artifacts_path(foreign_project, job_browse),
+              job_name: job_browse.name,
+              job_path: project_job_path(foreign_project, job_browse)
+            }
+          ])
       end
     end
   end
diff --git a/spec/services/design_management/move_designs_service_spec.rb b/spec/services/design_management/move_designs_service_spec.rb
index c8abce77325..519378a8dd4 100644
--- a/spec/services/design_management/move_designs_service_spec.rb
+++ b/spec/services/design_management/move_designs_service_spec.rb
@@ -88,23 +88,24 @@ RSpec.describe DesignManagement::MoveDesignsService do
 
         expect(subject).to be_success
 
-        expect(issue.designs.ordered).to eq([
-          # Existing designs which already had a relative_position set.
-          # These should stay at the beginning, in the same order.
-          other_design1,
-          other_design2,
-
-          # The designs we're passing into the service.
-          # These should be placed between the existing designs, in the correct order.
-          previous_design,
-          current_design,
-          next_design,
-
-          # Existing designs which didn't have a relative_position set.
-          # These should be placed at the end, in the order of their IDs.
-          other_design3,
-          other_design4
-        ])
+        expect(issue.designs.ordered).to eq(
+          [
+            # Existing designs which already had a relative_position set.
+            # These should stay at the beginning, in the same order.
+            other_design1,
+            other_design2,
+
+            # The designs we're passing into the service.
+            # These should be placed between the existing designs, in the correct order.
+            previous_design,
+            current_design,
+            next_design,
+
+            # Existing designs which didn't have a relative_position set.
+            # These should be placed at the end, in the order of their IDs.
+            other_design3,
+            other_design4
+          ])
       end
     end
   end
diff --git a/spec/services/git/tag_hooks_service_spec.rb b/spec/services/git/tag_hooks_service_spec.rb
index 2d50c64d63c..01a0d2e8600 100644
--- a/spec/services/git/tag_hooks_service_spec.rb
+++ b/spec/services/git/tag_hooks_service_spec.rb
@@ -104,12 +104,12 @@ RSpec.describe Git::TagHooksService, :service do
               id: commit.id,
               message: commit.safe_message,
               url: [
-               Gitlab.config.gitlab.url,
-               project.namespace.to_param,
-               project.to_param,
-               '-',
-               'commit',
-               commit.id
+                Gitlab.config.gitlab.url,
+                project.namespace.to_param,
+                project.to_param,
+                '-',
+                'commit',
+                commit.id
               ].join('/')
             )
           end
diff --git a/spec/services/google_cloud/setup_cloudsql_instance_service_spec.rb b/spec/services/google_cloud/setup_cloudsql_instance_service_spec.rb
index e0a622bfa4a..0a0f05ab4be 100644
--- a/spec/services/google_cloud/setup_cloudsql_instance_service_spec.rb
+++ b/spec/services/google_cloud/setup_cloudsql_instance_service_spec.rb
@@ -8,17 +8,19 @@ RSpec.describe GoogleCloud::SetupCloudsqlInstanceService do
   let(:list_databases_empty) { Google::Apis::SqladminV1beta4::ListDatabasesResponse.new(items: []) }
   let(:list_users_empty) { Google::Apis::SqladminV1beta4::ListUsersResponse.new(items: []) }
   let(:list_databases) do
-    Google::Apis::SqladminV1beta4::ListDatabasesResponse.new(items: [
-      Google::Apis::SqladminV1beta4::Database.new(name: 'postgres'),
-      Google::Apis::SqladminV1beta4::Database.new(name: 'main_db')
-    ])
+    Google::Apis::SqladminV1beta4::ListDatabasesResponse.new(
+      items: [
+        Google::Apis::SqladminV1beta4::Database.new(name: 'postgres'),
+        Google::Apis::SqladminV1beta4::Database.new(name: 'main_db')
+      ])
   end
 
   let(:list_users) do
-    Google::Apis::SqladminV1beta4::ListUsersResponse.new(items: [
-      Google::Apis::SqladminV1beta4::User.new(name: 'postgres'),
-      Google::Apis::SqladminV1beta4::User.new(name: 'main_user')
-    ])
+    Google::Apis::SqladminV1beta4::ListUsersResponse.new(
+      items: [
+        Google::Apis::SqladminV1beta4::User.new(name: 'postgres'),
+        Google::Apis::SqladminV1beta4::User.new(name: 'main_user')
+      ])
   end
 
   context 'when unauthorized user triggers worker' do
diff --git a/spec/services/import/gitlab_projects/create_project_service_spec.rb b/spec/services/import/gitlab_projects/create_project_service_spec.rb
index 0da897448b8..59c384bad3c 100644
--- a/spec/services/import/gitlab_projects/create_project_service_spec.rb
+++ b/spec/services/import/gitlab_projects/create_project_service_spec.rb
@@ -139,10 +139,11 @@ RSpec.describe ::Import::GitlabProjects::CreateProjectService, :aggregate_failur
           expect(response.http_status).to eq(:bad_request)
           expect(response.message)
             .to eq(%{Project namespace path can contain only letters, digits, '_', '-' and '.'. Cannot start with '-', end in '.git' or end in '.atom'})
-          expect(response.payload).to eq(other_errors: [
-            %{Path can contain only letters, digits, '_', '-' and '.'. Cannot start with '-', end in '.git' or end in '.atom'},
-            %{Path must not start or end with a special character and must not contain consecutive special characters.}
-          ])
+          expect(response.payload).to eq(
+            other_errors: [
+              %{Path can contain only letters, digits, '_', '-' and '.'. Cannot start with '-', end in '.git' or end in '.atom'},
+              %{Path must not start or end with a special character and must not contain consecutive special characters.}
+            ])
         end
       end
     end
diff --git a/spec/services/jira_connect/sync_service_spec.rb b/spec/services/jira_connect/sync_service_spec.rb
index 7242b1f41f9..32580a7735f 100644
--- a/spec/services/jira_connect/sync_service_spec.rb
+++ b/spec/services/jira_connect/sync_service_spec.rb
@@ -46,10 +46,11 @@ RSpec.describe JiraConnect::SyncService do
 
     context 'when a request returns an error' do
       it 'logs the response as an error' do
-        expect_next(client).to store_info([
-          { 'errorMessages' => ['some error message'] },
-          { 'errorMessages' => ['x'] }
-        ])
+        expect_next(client).to store_info(
+          [
+            { 'errorMessages' => ['some error message'] },
+            { 'errorMessages' => ['x'] }
+          ])
 
         expect_log(:error, { 'errorMessages' => ['some error message'] })
         expect_log(:error, { 'errorMessages' => ['x'] })
diff --git a/spec/services/merge_requests/link_lfs_objects_service_spec.rb b/spec/services/merge_requests/link_lfs_objects_service_spec.rb
index 2fb6bbaf02f..96cb72baac2 100644
--- a/spec/services/merge_requests/link_lfs_objects_service_spec.rb
+++ b/spec/services/merge_requests/link_lfs_objects_service_spec.rb
@@ -52,10 +52,11 @@ RSpec.describe MergeRequests::LinkLfsObjectsService, :sidekiq_inline do
 
           it 'calls Projects::LfsPointers::LfsLinkService#execute with OIDs of LFS objects in merge request' do
             expect_next_instance_of(Projects::LfsPointers::LfsLinkService) do |service|
-              expect(service).to receive(:execute).with(%w[
-                8b12507783d5becacbf2ebe5b01a60024d8728a8f86dcc818bce699e8b3320bc
-                94a72c074cfe574742c9e99e863322f73feff82981d065ff65a0308f44f19f62
-              ])
+              expect(service).to receive(:execute).with(
+                %w[
+                  8b12507783d5becacbf2ebe5b01a60024d8728a8f86dcc818bce699e8b3320bc
+                  94a72c074cfe574742c9e99e863322f73feff82981d065ff65a0308f44f19f62
+                ])
             end
 
             execute
diff --git a/spec/services/merge_requests/refresh_service_spec.rb b/spec/services/merge_requests/refresh_service_spec.rb
index 09d06b8b2ab..5a4b3454b84 100644
--- a/spec/services/merge_requests/refresh_service_spec.rb
+++ b/spec/services/merge_requests/refresh_service_spec.rb
@@ -799,23 +799,24 @@ RSpec.describe MergeRequests::RefreshService do
       it 'does not mark as draft based on commits that do not belong to an MR' do
         allow(refresh_service).to receive(:find_new_commits)
 
-        refresh_service.instance_variable_set("@commits", [
-          double(
-            id: 'aaaaaaa',
-            sha: 'aaaaaaa',
-            short_id: 'aaaaaaa',
-            title: 'Fix issue',
-            draft?: false
-          ),
-          double(
-            id: 'bbbbbbb',
-            sha: 'bbbbbbbb',
-            short_id: 'bbbbbbb',
-            title: 'fixup! Fix issue',
-            draft?: true,
-            to_reference: 'bbbbbbb'
-          )
-        ])
+        refresh_service.instance_variable_set("@commits",
+          [
+            double(
+              id: 'aaaaaaa',
+              sha: 'aaaaaaa',
+              short_id: 'aaaaaaa',
+              title: 'Fix issue',
+              draft?: false
+            ),
+            double(
+              id: 'bbbbbbb',
+              sha: 'bbbbbbbb',
+              short_id: 'bbbbbbb',
+              title: 'fixup! Fix issue',
+              draft?: true,
+              to_reference: 'bbbbbbb'
+            )
+          ])
 
         refresh_service.execute(@oldrev, @newrev, 'refs/heads/master')
         reload_mrs
diff --git a/spec/services/repositories/changelog_service_spec.rb b/spec/services/repositories/changelog_service_spec.rb
index 3615747e191..47ebd55022f 100644
--- a/spec/services/repositories/changelog_service_spec.rb
+++ b/spec/services/repositories/changelog_service_spec.rb
@@ -67,10 +67,11 @@ RSpec.describe Repositories::ChangelogService do
       allow(MergeRequestDiffCommit)
         .to receive(:oldest_merge_request_id_per_commit)
         .with(project.id, [commit2.id, commit1.id])
-        .and_return([
-          { sha: sha2, merge_request_id: mr1.id },
-          { sha: sha3, merge_request_id: mr2.id }
-        ])
+        .and_return(
+          [
+            { sha: sha2, merge_request_id: mr1.id },
+            { sha: sha3, merge_request_id: mr2.id }
+          ])
 
       service = described_class
         .new(project, creator, version: '1.0.0', from: sha1, to: sha3)
@@ -135,10 +136,11 @@ RSpec.describe Repositories::ChangelogService do
         allow(MergeRequestDiffCommit)
           .to receive(:oldest_merge_request_id_per_commit)
           .with(project.id, [commit2.id, commit1.id])
-          .and_return([
-            { sha: sha2, merge_request_id: mr1.id },
-            { sha: sha3, merge_request_id: mr2.id }
-          ])
+          .and_return(
+            [
+              { sha: sha2, merge_request_id: mr1.id },
+              { sha: sha3, merge_request_id: mr2.id }
+            ])
 
         service = described_class
           .new(project, creator, version: '1.0.0', from: sha1, to: sha3)
diff --git a/spec/services/resource_events/synthetic_milestone_notes_builder_service_spec.rb b/spec/services/resource_events/synthetic_milestone_notes_builder_service_spec.rb
index 9c6b6a33b57..f368e107c60 100644
--- a/spec/services/resource_events/synthetic_milestone_notes_builder_service_spec.rb
+++ b/spec/services/resource_events/synthetic_milestone_notes_builder_service_spec.rb
@@ -19,10 +19,11 @@ RSpec.describe ResourceEvents::SyntheticMilestoneNotesBuilderService do
       notes = described_class.new(issue, user).execute
 
       expect(notes.map(&:created_at)).to eq(events.map(&:created_at))
-      expect(notes.map(&:note)).to eq([
-        "changed milestone to %#{milestone.iid}",
-        'removed milestone'
-      ])
+      expect(notes.map(&:note)).to eq(
+        [
+          "changed milestone to %#{milestone.iid}",
+          'removed milestone'
+        ])
     end
 
     it_behaves_like 'filters by paginated notes', :resource_milestone_event
diff --git a/spec/support/helpers/migrations_helpers/vulnerabilities_helper.rb b/spec/support/helpers/migrations_helpers/vulnerabilities_helper.rb
new file mode 100644
index 00000000000..0a86d7abc83
--- /dev/null
+++ b/spec/support/helpers/migrations_helpers/vulnerabilities_helper.rb
@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+module MigrationHelpers
+  module VulnerabilitiesHelper
+    # rubocop:disable Metrics/ParameterLists
+    def create_finding!(
+      vulnerability_id:, project_id:, scanner_id:, primary_identifier_id:,
+                        name: "test", severity: 7, confidence: 7, report_type: 0,
+                        project_fingerprint: '123qweasdzxc', location_fingerprint: 'test',
+                        metadata_version: 'test', raw_metadata: 'test', uuid: 'b1cee17e-3d7a-11ed-b878-0242ac120002')
+      table(:vulnerability_occurrences).create!(
+        vulnerability_id: vulnerability_id,
+        project_id: project_id,
+        name: name,
+        severity: severity,
+        confidence: confidence,
+        report_type: report_type,
+        project_fingerprint: project_fingerprint,
+        scanner_id: scanner_id,
+        primary_identifier_id: primary_identifier_id,
+        location_fingerprint: location_fingerprint,
+        metadata_version: metadata_version,
+        raw_metadata: raw_metadata,
+        uuid: uuid
+      )
+    end
+    # rubocop:enable Metrics/ParameterLists
+
+    def create_vulnerability!(project_id:, author_id:, title: 'test', severity: 7, confidence: 7, report_type: 0)
+      table(:vulnerabilities).create!(
+        project_id: project_id,
+        author_id: author_id,
+        title: title,
+        severity: severity,
+        confidence: confidence,
+        report_type: report_type
+      )
+    end
+  end
+end