Commit 723b9463 authored by Lukas Eipert's avatar Lukas Eipert

Introductions on how to use the new remediation

parent 1990246b
...@@ -333,16 +333,31 @@ This feature is currently [Alpha](https://about.gitlab.com/handbook/product/#alp ...@@ -333,16 +333,31 @@ This feature is currently [Alpha](https://about.gitlab.com/handbook/product/#alp
Each security vulnerability in the report is actionable. Clicking on an entry, Each security vulnerability in the report is actionable. Clicking on an entry,
a detailed information will pop up with two different possible options: a detailed information will pop up with two different possible options:
- **Dismiss vulnerability** - Dismissing a vulnerability will place a - **Dismiss vulnerability** - Dismissing a vulnerability will place a <s>strikethrough</s> styling on it.
<s>strikethrough</s> styling on it.
- **Create issue** - The new issue will have the title and description - **Create issue** - The new issue will have the title and description
pre-populated with the information of the vulnerability report. pre-populated with the information of the vulnerability report.
- **Solution** - For some vulnerabilities ([Dependency Scanning](dependency_scanning.md) and [Container Scanning](container_scanning.md)) will provide a solution on how to fix the vulnerability.
![Interacting with security reports](img/interactive_reports.png) ![Interacting with security reports](img/interactive_reports.png)
You can also revert your dismissal or see the linked issue after the action has You can also revert your dismissal or see the linked issue after the action has
been taken. been taken.
### Solutions for Dependency Scanning **[ULTIMATE]**
> Introduced in [GitLab Ultimate][products] 11.7.
CAUTION: **Warning:** Automatic Patch creation is only available for a subset of [Dependency Scanning](dependency_scanning.md). At the only Node.JS projects managed with yarn are supported.
Some Vulnerabilities can be fixed by applying a patch provided by us. To apply the fix:
1. Download and review the patch file `remediation.patch`
2. Ensure your local project has the same commit checked out that was used to generate the patch
3. Run `git apply remediation.patch`
4. Verify and commit the changes to your branch
![Solutions for dependency scanning](img/vulnerability_solution.png)
## Live preview with Review Apps ## Live preview with Review Apps
If you configured [Review Apps](https://about.gitlab.com/features/review-apps/) for your project, If you configured [Review Apps](https://about.gitlab.com/features/review-apps/) for your project,
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment