Bug Triage and Reporting
How to integrate custom security scanners into GitLab

How to integrate custom security scanners into GitLab

2/27/2024 · Fernando Diaz

What this post added

This post details the integration of custom security scanners into GitLab. It explains how these scanners can populate various security-related UI elements (merge request widget, Pipeline Security section, Vulnerability Report, vulnerability pages, Security dashboard) and integrate with Scan Result Policies. The post outlines the requirements for a custom scanner (scanning a directory, emitting JSON, containerization, providing a template) and provides a tutorial using the Fern Pattern Scanner. It emphasizes the use of JSON schemas for vulnerability data.

Read the original post ↗