Upcoming Breaking Changes to Secure Analyzers in GitLab 13.4
Aug 19, 2020Taylor McCaslin
Summary
This post announces the removal of the `secrets-sast` job from the SAST CI template, the deprecation and upcoming removal of Docker-in-Docker (DinD) for security scanners, the transition of the GitLab Bandit Python Analyzer to an Alpine Linux image, and the deprecation and removal of the TSLint job in favor of ESLint. It provides guidance on how users should update their configurations to maintain secret scanning and other security functionalities.
More from the Security Control Framework trail
- Track organization-wide security risk in one dashboard
- Dependency Firewall: Block risky packages before the build
- Two front doors: Module-level access in a Django GRC app
- How GitLab tracks vulnerabilities through refactors and reformatting
- Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting