MR Vulnerability Widget for GitLab

Name: MR Vulnerability Widget for GitLab
Rating: 5 (4 reviews)
Author: Abhinav Sonkar

Adds a widget to GitLab merge request page showing vulnerabilities detected by Container Scanning.

As of June 2026, MR Vulnerability Widget for GitLab has 25 users and a 5.00/5 rating from 4 reviews in the Developer Tools category.

Abhinav Sonkar Developer Tools

Chrome Web Store ↗.crx

Users−35.9%

Rating0%

5.00

4 reviews

Reviews0%

Version

0.0.3

Manifest V3

90-day change · In the last 90 days this extension 1 version update.

History

4 snapshots

Tracking since Apr 19, 2026.

View as table

Date	Users	Rating	Reviews	Version
Apr 19, 2026	39	5.00	4	0.0.2
May 4, 2026	33	5.00	4	0.0.2
Jun 3, 2026	33	5.00	4	0.0.2
Jun 9, 2026	27	5.00	4	0.0.3
Now	25	5.00	4	0.0.3

Changelog

Jun 3, 2026

name

GitLab MR Vulnerability Widget

MR Vulnerability Widget for GitLab

Permissions & access

Permissions: storage
Host access: https://gitlab.com/*

Screenshots

MR Vulnerability Widget for GitLab screenshot 1

MR Vulnerability Widget for GitLab screenshot 2

MR Vulnerability Widget for GitLab screenshot 3

About

Update: 
Now also see Medium vulnerabilities in the widget.
Affected version number is included in the widget.

This extension adds a widget in the Gitlab merge request page showing critical and high vulnerabilities of a container image generated in the associated pipeline.

A container scanning job must exist in the pipeline. This job must generate a container scanning report artifact. To add a container scanning job, follow the steps defined here: https://docs.gitlab.com/ee/user/application_security/container_scanning/

The free version of Gitlab supports container scanning but does not support decoration of the merge request with vulnerability details. This extension fills that gap by decorating the merge request with a vulnerability widget.

Reference:
Container scanning job: https://docs.gitlab.com/ee/user/application_security/container_scanning/
Container scanning report artifact: https://docs.gitlab.com/ee/ci/yaml/artifacts_reports.html#artifactsreportscontainer_scanning