Tutorial: Security scanning in air-gapped environments

What this post added

This post details the process of running GitLab's security scanners (SAST, DAST, Secret Detection, Container Scanning, Dependency Scanning, API Fuzzing, License Scanning) in air-gapped environments. It outlines the prerequisites (Ultimate subscription, offline cloud license, Self-Managed cluster) and the three-step process: downloading and packaging container images from a public internet environment, transferring these images to the offline environment, and loading them into the offline container registry. The tutorial specifically demonstrates the Secret Detection scanner, showing how to pull the image using Podman, save it as a tarball, and then transfer it via SCP to an air-gapped VM. It also covers verifying that the image is not cached and the steps to load the image into the offline registry.