@@ -335,8 +335,9 @@ a detailed information will pop up with two different possible options:
-**Dismiss vulnerability** - Dismissing a vulnerability will place a <s>strikethrough</s> styling on it.
-**Create issue** - The new issue will have the title and description
pre-populated with the information of the vulnerability report.
-**Solution** - For some vulnerabilities ([Dependency Scanning](dependency_scanning.md) and [Container Scanning](container_scanning.md)) will provide a solution on how to fix the vulnerability.
pre-populated with the information from the vulnerability report.
-**Solution** - For some vulnerabilities ([Dependency Scanning](dependency_scanning.md) and [Container Scanning](container_scanning.md))
a solution is provided for how to fix the vulnerability.
![Interacting with security reports](img/interactive_reports.png)
...
...
@@ -349,12 +350,12 @@ been taken.
CAUTION: **Warning:** Automatic Patch creation is only available for a subset of [Dependency Scanning](dependency_scanning.md). At the moment only Node.JS projects managed with yarn are supported.
Some Vulnerabilities can be fixed by applying a patch provided by us. To apply the fix:
Some Vulnerabilities can be fixed by applying a patch that is automatically generated by GitLab. To apply the fix:
1. Download and review the patch file `remediation.patch`
2. Ensure your local project has the same commit checked out that was used to generate the patch
3. Run `git apply remediation.patch`
4. Verify and commit the changes to your branch
2. Ensure your local project has the same commit checked out that was used to generate the patch.
3. Run `git apply remediation.patch`.
4. Verify and commit the changes to your branch.
![Solutions for dependency scanning](img/vulnerability_solution.png)