Commit 7b8f0bf5 authored by Dmitriy Zaporozhets's avatar Dmitriy Zaporozhets Committed by Achilleas Pipinellis

Add sast:image section to autodevops docs

Signed-off-by: default avatarDmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
parent 4127a1ec
...@@ -20,6 +20,7 @@ project in an easy and automatic way: ...@@ -20,6 +20,7 @@ project in an easy and automatic way:
1. [Auto Test](#auto-test) 1. [Auto Test](#auto-test)
1. [Auto Code Quality](#auto-code-quality) 1. [Auto Code Quality](#auto-code-quality)
1. [Auto SAST (Static Application Security Testing)](#auto-sast) 1. [Auto SAST (Static Application Security Testing)](#auto-sast)
1. [Auto SAST for Docker images](#auto-sast-for-docker-images)
1. [Auto Browser Performance Testing](#auto-browser-performance-testing) 1. [Auto Browser Performance Testing](#auto-browser-performance-testing)
1. [Auto Review Apps](#auto-review-apps) 1. [Auto Review Apps](#auto-review-apps)
1. [Auto Deploy](#auto-deploy) 1. [Auto Deploy](#auto-deploy)
...@@ -209,17 +210,17 @@ check out. ...@@ -209,17 +210,17 @@ check out.
Any security warnings are also [shown in the merge request widget](../../user/project/merge_requests/sast.md). Any security warnings are also [shown in the merge request widget](../../user/project/merge_requests/sast.md).
### Auto SAST ### Auto SAST for Docker images
> Introduced in [GitLab Enterprise Edition Ultimate][ee] 10.3. > Introduced in [GitLab Enterprise Edition Ultimate][ee] 10.4.
Static Application Security Testing (SAST) uses the Vulnerability Static Analysis for Containers. It uses the
[gl-sast Docker image](https://gitlab.com/gitlab-org/gl-sast) to run static [clair](https://github.com/coreos/clair) to run static
analysis on the current code and checks for potential security issues. Once the analysis on the current Docker image and checks for potential security issues. Once the
report is created, it's uploaded as an artifact which you can later download and report is created, it's uploaded as an artifact which you can later download and
check out. check out.
Any security warnings are also [shown in the merge request widget](https://docs.gitlab.com/ee/user/project/merge_requests/sast.html). Any security warnings are also [shown in the merge request widget](../../user/project/merge_requests/sast.md).
### Auto Browser Performance Testing ### Auto Browser Performance Testing
...@@ -233,7 +234,8 @@ Auto Browser Performance Testing utilizes the [Sitespeed.io container](https://h ...@@ -233,7 +234,8 @@ Auto Browser Performance Testing utilizes the [Sitespeed.io container](https://h
/direction /direction
``` ```
In GitLab Enterprise Edition Premium, performance differences between the source and target branches are [shown in the merge request widget](https://docs.gitlab.com/ee/user/project/merge_requests/browser_performance_testing.html). In GitLab Enterprise Edition Premium, performance differences between the source
and target branches are [shown in the merge request widget](../../user/project/merge_requests/browser_performance_testing.md).
### Auto Review Apps ### Auto Review Apps
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment