How we’re using DAST 2 for easier scan configuration and reduced noise

What this post added

This post details GitLab's internal adoption of DAST 2, focusing on the migration from DAST 1. Key contributions include the move from `DAST_EXCLUDE_RULES` to `DAST_ONLY_INCLUDE_RULES` for simplified scan rule selection, enabling DAST auto-update by upgrading `DAST_VERSION` to `2`, and removing deprecated configuration variables like `DAST_AUTH_EXCLUDE_URLS`. The post highlights the benefits of vulnerability aggregation in DAST 2 for reducing noise and streamlining triage, as well as the advantages of the new browser-based crawler and improved configuration options. It also mentions identifying areas for improvement in DAST, such as misconfiguration detection and a reusable configuration section in the DAST template.