Commit 8fe75f44 authored by Russell Dickenson's avatar Russell Dickenson

Merge branch 'schwartz-dependency-list-clarification-default-pipeline-only' into 'master'

Update to be clear only applies to default

See merge request gitlab-org/gitlab!60865
parents 5186aaaa e7892265
...@@ -10,10 +10,11 @@ info: To determine the technical writer assigned to the Stage/Group associated w ...@@ -10,10 +10,11 @@ info: To determine the technical writer assigned to the Stage/Group associated w
> [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/10075) in GitLab Ultimate 12.0. > [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/10075) in GitLab Ultimate 12.0.
Use the dependency list to review your project's dependencies and key Use the dependency list to review your project's dependencies and key
details about those dependencies, including their known vulnerabilities. To see the dependency list, details about those dependencies, including their known vulnerabilities. It is a collection of dependencies in your project, including existing and new findings. To see the dependency list, go to your project and select **Security & Compliance > Dependency List**.
in your project, go to **Security & Compliance > Dependency List**.
This information is sometimes referred to as a Software Bill of Materials or SBoM / BOM. This information is sometimes referred to as a Software Bill of Materials or SBoM / BOM.
The dependency list only shows the results of the last successful pipeline to run on the default branch. This is why we recommend not changing the default behavior of allowing the secure jobs to fail.
## Prerequisites ## Prerequisites
To view your project's dependencies, ensure you meet the following requirements: To view your project's dependencies, ensure you meet the following requirements:
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment