Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

why-gitlab

Package Overview
Dependencies
Maintainers
1
Versions
14
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

why-gitlab - npm Package Compare versions

Comparing version 1.7.1 to 1.8.0

docs/security/json-format-secret-free.png

8

docs/security/sast-basic-free.en.md

@@ -19,2 +19,8 @@ ### Static Application Security Testing (SAST) basic features

https://docs.gitlab.com/ee/user/application_security/sast/#summary-of-features-per-tier
https://docs.gitlab.com/ee/user/application_security/sast/#summary-of-features-per-tier
#### Reports JSON format
SAST outputs a report file in JSON format. The report file contains details of all found vulnerabilities. To download the report file, you can download the file in merge requests page.
![Download JSON format](./json-format.png)

@@ -18,1 +18,7 @@ ### 静态安全检测(SAST)基础功能

https://docs.gitlab.com/ee/user/application_security/sast/#summary-of-features-per-tier
#### JSON 格式的报告
SAST 输出一个 JSON 格式的报告。这个报告文件包含所有现漏洞的细节。可以在合并请求页面下载 JSON 文件。
![Download JSON format](./json-format.png)

@@ -8,1 +8,20 @@ ### Static Application Security Testing (SAST) advanced features

https://docs.gitlab.com/ee/user/application_security/sast/#customize-rulesets
#### See new findings in merge request widget
With GitLab Ultimate, SAST results are also processed so you can:
- See them in merge requests.
- Use them in approval workflows.
- Review them in the security dashboard.
The results are sorted by the priority of the vulnerability:
1. Critical
2. High
3. Medium
4. Low
5. Info
6. Unknown
![sast-in-mr](./sast-in-mr.en.png)

@@ -6,1 +6,20 @@ ### 静态安全检测(SAST)高级功能

此功能由 极狐 GitLab 旗舰版提供。
#### 在合并请求中展示 SAST 结果
使用极狐 GitLab 的旗舰版本,SAST 的结果也会被处理,你可以在以下流程中看到结果:
- 合并请求
- 同意的工作流
- 安全仪表盘
结果将会按照漏洞的严重性来分类:
1. 严重
2. 高
3. 中
4. 低
5. 信息
6. 未知
![sast-in-mr](./sast-in-mr.png)

2

package.json
{
"name": "why-gitlab",
"description": "Why GitLab? DevSecOps",
"version": "1.7.1",
"version": "1.8.0",
"author": "sink @sinkcup",

@@ -6,0 +6,0 @@ "main": "src/main.js",

@@ -123,2 +123,4 @@ import os from 'os';

{ path: 'sast-full-ultimate', name: '静态安全检测(SAST)高级功能' },
{ path: 'secret-detection-basic-free', name: '密码检测基础功能' },
{ path: 'secret-detection-full-ultimate', name: '密码检测高级功能' },
],

@@ -125,0 +127,0 @@ },

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc