GitLab

How to integrate custom security scanners into GitLab

Feb 27, 2024Fernando Diaz
How to integrate custom security scanners into GitLab
SummaryAI, from the source post

This post details the integration of custom security scanners into GitLab. It explains how these scanners can populate various security-related UI elements (merge request widget, Pipeline Security section, Vulnerability Report, vulnerability pages, Security dashboard) and integrate with Scan Result Policies. The post outlines the requirements for a custom scanner (scanning a directory, emitting JSON, containerization, providing a template) and provides a tutorial using the Fern Pattern Scanner. It emphasizes the use of JSON schemas for vulnerability data.

More from the Bug Triage and Reporting trail