Add basic security merge request widget

Addresses https://gitlab.com/gitlab-org/gitlab/-/issues/249543, part of
https://gitlab.com/groups/gitlab-org/-/epics/4388.

app/controllers/projects/merge_requests_controller.rb

@@ -39,7 +39,7 @@ class Projects::MergeRequestsController < Projects::MergeRequests::ApplicationCo
     push_frontend_feature_flag(:unified_diff_lines, @project, default_enabled: true)
     push_frontend_feature_flag(:highlight_current_diff_row, @project)
     push_frontend_feature_flag(:default_merge_ref_for_diffs, @project)
-    push_frontend_feature_flag(:core_security_mr_widget, @project)
+    push_frontend_feature_flag(:core_security_mr_widget, @project, default_enabled: true)
 
     record_experiment_user(:invite_members_version_a)
     record_experiment_user(:invite_members_version_b)

changelogs/unreleased/249550-remove-feature-flag-for-core-mr-widget.yml

+---
+title: Enable core_security_mr_widget feature flag by default
+merge_request: 44764
+author:
+type: added

config/feature_flags/development/core_security_mr_widget.yml

@@ -4,4 +4,4 @@ introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/44639
 rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/249543
 type: development
 group: group::static analysis
-default_enabled: false
+default_enabled: true

doc/user/application_security/sast/index.md

@@ -365,8 +365,8 @@ analyzer containers: `DOCKER_`, `CI`, `GITLAB_`, `FF_`, `HOME`, `PWD`, `OLDPWD`,
 The SAST tool emits a JSON report file. For more information, see the
 [schema for this report](https://gitlab.com/gitlab-org/security-products/security-report-schemas/-/blob/master/dist/sast-report-format.json).
 
-The JSON report file can be downloaded from the CI pipelines page, for more
-information see [Downloading artifacts](../../../ci/pipelines/job_artifacts.md).
+The JSON report file can be downloaded from the CI pipelines page, or the
+pipelines tab on merge requests. For more information see [Downloading artifacts](../../../ci/pipelines/job_artifacts.md).
 
 Here's an example SAST report: