Tutorial: Security scanning in air-gapped environments
Feb 5, 2025Fernando Diaz
Summary
This post details the process of running GitLab security scanners (SAST, DAST, Secret Detection, Container Scanning, Dependency Scanning, API Fuzzing, License Scanning) in air-gapped environments. It explains how to download, package, transfer, and load container images for these scanners into an offline GitLab instance's container registry. It also outlines the prerequisites for offline scanning, including an Ultimate subscription and offline cloud license, and demonstrates the process using Secret Detection.
More from the Security Control Framework trail
- Track organization-wide security risk in one dashboard
- Dependency Firewall: Block risky packages before the build
- Two front doors: Module-level access in a Django GRC app
- How GitLab tracks vulnerabilities through refactors and reformatting
- Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting