FIPS Package Dependency Management
Getting started with GitLab application security

Getting started with GitLab application security

3/15/2023 · Victor Hernandez

What this post added

This post details how to enable and utilize GitLab's security scanning features, specifically focusing on dependency scanning as an example. It outlines the prerequisites for enabling scans, the process of adding scanner templates to `.gitlab-ci.yml` (both manually and via the UI), and how to view scan results. It also touches upon scan enforcement for Premium and Ultimate users and provides links to further resources. The post introduces the concept of enabling dependency scanning via the UI, which creates a merge request to update the `.gitlab-ci.yml` file, and shows how to view scan results in JSON reports and the merge request widget.

Read the original post ↗