why-gitlab - npm Package Compare versions

Comparing version 1.8.0 to 1.9.0

docs/security/dast-ultimate.en.md

@@ -8,1 +8,13 @@ ### Dynamic Application Security Testing (DAST)
 https://docs.gitlab.com/ee/user/application_security/dast/
+
+All identified vulnerabilities are reported in the:  
+
+Merge request widget  
+
+![dast-in-mr](./dast-in-mr.png)  
+
+Pipelines' Security tab  
+
+![dast-in-pipeline-tab](./dast-in-pipeline-tab.png)   
+
+Example project using Dynamic Application Security Testing (DAST): [Demo DAST](https://jihulab.com/ultimate-plan/demo/dast-demo/-/tree/2-demo-test-new-policy-name)

docs/security/dast-ultimate.md

@@ -6,1 +6,13 @@ ### 动态应用安全扫描（DAST）
 此功能由 极狐 GitLab 旗舰版提供。
+
+所有检测出的漏洞将被展示在： 
+
+合并请求  
+
+![dast-in-mr](./dast-in-mr.png)    
+
+流水线的安全栏  
+
+![dast-in-pipeline-tab](./dast-in-pipeline-tab.png)   
+
+示例：[Demo DAST](https://jihulab.com/ultimate-plan/demo/dast-demo/-/tree/2-demo-test-new-policy-name)

docs/security/sast-basic-free.en.md

@@ -26,1 +26,3 @@ ### Static Application Security Testing (SAST) basic features
 ![Download JSON format](./json-format.png)  
+
+Example project using Static Application Security Testing (SAST): [Demo SAST](https://jihulab.com/ultimate-plan/demo/sast-demo/-/tree/3-test-new-policy-name)

docs/security/sast-basic-free.md

@@ -24,1 +24,3 @@ ### 静态安全检测（SAST）基础功能
 ![Download JSON format](./json-format.png)  
+
+示例： [Demo SAST](https://jihulab.com/ultimate-plan/demo/sast-demo/-/tree/3-test-new-policy-name)

docs/security/sast-full-ultimate.en.md

@@ -27,1 +27,3 @@ ### Static Application Security Testing (SAST) advanced features
 ![sast-in-mr](./sast-in-mr.en.png)  
+
+Example project using Static Application Security Testing (SAST): [Demo SAST](https://jihulab.com/ultimate-plan/demo/sast-demo/-/tree/3-test-new-policy-name)

docs/security/sast-full-ultimate.md

@@ -25,1 +25,3 @@ ### 静态安全检测（SAST）高级功能
 ![sast-in-mr](./sast-in-mr.png)  
+
+示例： [Demo SAST](https://jihulab.com/ultimate-plan/demo/sast-demo/-/tree/3-test-new-policy-name)

docs/security/secret-detection-basic-free.en.md

@@ -26,1 +26,3 @@ ### Secret Detection basic features
 
+Example project using Secret Detection: [Demo Secret Detection](https://jihulab.com/ultimate-plan/demo/secret-detection-demo/-/tree/1-test-secret-detection)
+

docs/security/secret-detection-basic-free.md

@@ -24,1 +24,3 @@ ### 密码检测基础功能
  
+示例：[Demo Secret Detection](https://jihulab.com/ultimate-plan/demo/secret-detection-demo/-/tree/1-test-secret-detection)
+

docs/security/secret-detection-full-ultimate.en.md

@@ -13,1 +13,3 @@ ### Secret Detection advanced features
 
+Example project using Secret Detection: [Demo Secret Detection](https://jihulab.com/ultimate-plan/demo/secret-detection-demo/-/tree/1-test-secret-detection)
+

docs/security/secret-detection-full-ultimate.md

@@ -5,8 +5,10 @@ ### 密码检测高级功能
 
-合并请求  
+合并请求：  
 
 ![secret-detection-in-mr](./secret-detection-in-mr.png)  
 
-流水线的安全栏  
+流水线的安全栏：  
 
 ![secret-detection-in-pipeline-tab](./secret-detection-in-pipeline-tab.png)
+
+示例：[Demo Secret Detection](https://jihulab.com/ultimate-plan/demo/secret-detection-demo/-/tree/1-test-secret-detection)

package.json

 {
   "name": "why-gitlab",
   "description": "Why GitLab? DevSecOps",
-  "version": "1.8.0",
+  "version": "1.9.0",
   "author": "sink @sinkcup",
@@ -6,0 +6,0 @@ "main": "src/main.js",

tests/main.test.js

@@ -120,3 +120,10 @@ import os from 'os';
       features: [
+        { path: 'api-fuzzing-ultimate', name: 'API 模糊测试' },
+        { path: 'container-scanning-basic-free', name: '容器扫描基础功能' },
+        { path: 'container-scanning-full-ultimate', name: '容器扫描高级功能' },
         { path: 'dast-ultimate', name: '动态应用安全扫描（DAST）' },
+        { path: 'dependency-scanning-full-ultimate', name: '依赖扫描' },
+        { path: 'iac-scanning-basic-free', name: '基础设施即代码扫描基础功能' },
+        { path: 'iac-scanning-full-ultimate', name: '基础设施即代码扫描高级功能' },
+        { path: 'license-compliance-ultimate', name: '许可证合规' },
         { path: 'sast-basic-free', name: '静态安全检测（SAST）基础功能' },
@@ -123,0 +130,0 @@ { path: 'sast-full-ultimate', name: '静态安全检测（SAST）高级功能' },

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Unidentified License

License

(Experimental) Something that seems like a license was found, but its contents could not be matched with a known license.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

6415091

increased by17.98%

Number of package files

132

increased by22.22%

Lines of code

4975

increased by0.14%

Worsened metrics

Number of low license alerts

16

increased by14.29%

No dependency changes