@@ -335,8 +335,9 @@ a detailed information will pop up with two different possible options:
...
@@ -335,8 +335,9 @@ a detailed information will pop up with two different possible options:
-**Dismiss vulnerability** - Dismissing a vulnerability will place a <s>strikethrough</s> styling on it.
-**Dismiss vulnerability** - Dismissing a vulnerability will place a <s>strikethrough</s> styling on it.
-**Create issue** - The new issue will have the title and description
-**Create issue** - The new issue will have the title and description
pre-populated with the information of the vulnerability report.
pre-populated with the information from the vulnerability report.
-**Solution** - For some vulnerabilities ([Dependency Scanning](dependency_scanning.md) and [Container Scanning](container_scanning.md)) will provide a solution on how to fix the vulnerability.
-**Solution** - For some vulnerabilities ([Dependency Scanning](dependency_scanning.md) and [Container Scanning](container_scanning.md))
a solution is provided for how to fix the vulnerability.
![Interacting with security reports](img/interactive_reports.png)
![Interacting with security reports](img/interactive_reports.png)
...
@@ -349,12 +350,12 @@ been taken.
...
@@ -349,12 +350,12 @@ been taken.
CAUTION: **Warning:** Automatic Patch creation is only available for a subset of [Dependency Scanning](dependency_scanning.md). At the moment only Node.JS projects managed with yarn are supported.
CAUTION: **Warning:** Automatic Patch creation is only available for a subset of [Dependency Scanning](dependency_scanning.md). At the moment only Node.JS projects managed with yarn are supported.
Some Vulnerabilities can be fixed by applying a patch provided by us. To apply the fix:
Some Vulnerabilities can be fixed by applying a patch that is automatically generated by GitLab. To apply the fix:
1. Download and review the patch file `remediation.patch`
1. Download and review the patch file `remediation.patch`
2. Ensure your local project has the same commit checked out that was used to generate the patch
2. Ensure your local project has the same commit checked out that was used to generate the patch.
3. Run `git apply remediation.patch`
3. Run `git apply remediation.patch`.
4. Verify and commit the changes to your branch
4. Verify and commit the changes to your branch.
![Solutions for dependency scanning](img/vulnerability_solution.png)
![Solutions for dependency scanning](img/vulnerability_solution.png)