How a new integration helps GitLab customers secure their code
Aug 20, 2021Christian Simko
Summary
This post introduces the integration of GrammaTech's CodeSonar SAST solution into GitLab Ultimate. It details how CodeSonar analyzes code using a unified data flow and symbolic execution engine to discover defects, and how these findings are presented within the GitLab UI, including vulnerability reports and detailed warning views with annotated source code. Prerequisites for using the integration are also outlined.
More from the Security Control Framework trail
- Track organization-wide security risk in one dashboard
- Dependency Firewall: Block risky packages before the build
- Two front doors: Module-level access in a Django GRC app
- How GitLab tracks vulnerabilities through refactors and reformatting
- Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting