why-gitlab
Advanced tools
Comparing version 1.7.1 to 1.8.0
@@ -19,2 +19,8 @@ ### Static Application Security Testing (SAST) basic features | ||
https://docs.gitlab.com/ee/user/application_security/sast/#summary-of-features-per-tier | ||
https://docs.gitlab.com/ee/user/application_security/sast/#summary-of-features-per-tier | ||
#### Reports JSON format | ||
SAST outputs a report file in JSON format. The report file contains details of all found vulnerabilities. To download the report file, you can download the file in merge requests page. | ||
![Download JSON format](./json-format.png) |
@@ -18,1 +18,7 @@ ### 静态安全检测(SAST)基础功能 | ||
https://docs.gitlab.com/ee/user/application_security/sast/#summary-of-features-per-tier | ||
#### JSON 格式的报告 | ||
SAST 输出一个 JSON 格式的报告。这个报告文件包含所有现漏洞的细节。可以在合并请求页面下载 JSON 文件。 | ||
![Download JSON format](./json-format.png) |
@@ -8,1 +8,20 @@ ### Static Application Security Testing (SAST) advanced features | ||
https://docs.gitlab.com/ee/user/application_security/sast/#customize-rulesets | ||
#### See new findings in merge request widget | ||
With GitLab Ultimate, SAST results are also processed so you can: | ||
- See them in merge requests. | ||
- Use them in approval workflows. | ||
- Review them in the security dashboard. | ||
The results are sorted by the priority of the vulnerability: | ||
1. Critical | ||
2. High | ||
3. Medium | ||
4. Low | ||
5. Info | ||
6. Unknown | ||
![sast-in-mr](./sast-in-mr.en.png) |
@@ -6,1 +6,20 @@ ### 静态安全检测(SAST)高级功能 | ||
此功能由 极狐 GitLab 旗舰版提供。 | ||
#### 在合并请求中展示 SAST 结果 | ||
使用极狐 GitLab 的旗舰版本,SAST 的结果也会被处理,你可以在以下流程中看到结果: | ||
- 合并请求 | ||
- 同意的工作流 | ||
- 安全仪表盘 | ||
结果将会按照漏洞的严重性来分类: | ||
1. 严重 | ||
2. 高 | ||
3. 中 | ||
4. 低 | ||
5. 信息 | ||
6. 未知 | ||
![sast-in-mr](./sast-in-mr.png) |
{ | ||
"name": "why-gitlab", | ||
"description": "Why GitLab? DevSecOps", | ||
"version": "1.7.1", | ||
"version": "1.8.0", | ||
"author": "sink @sinkcup", | ||
@@ -6,0 +6,0 @@ "main": "src/main.js", |
@@ -123,2 +123,4 @@ import os from 'os'; | ||
{ path: 'sast-full-ultimate', name: '静态安全检测(SAST)高级功能' }, | ||
{ path: 'secret-detection-basic-free', name: '密码检测基础功能' }, | ||
{ path: 'secret-detection-full-ultimate', name: '密码检测高级功能' }, | ||
], | ||
@@ -125,0 +127,0 @@ }, |
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
5437437
108
4968