@@ -46,6 +46,10 @@ To run a Dependency Scanning job, you need GitLab Runner with the
...
@@ -46,6 +46,10 @@ To run a Dependency Scanning job, you need GitLab Runner with the
executor running in privileged mode. If you're using the shared Runners on GitLab.com,
executor running in privileged mode. If you're using the shared Runners on GitLab.com,
this is enabled by default.
this is enabled by default.
CAUTION: **Caution:**
If you use your own Runners, make sure that the Docker version you have installed
is **not**`19.03.00`. See [troubleshooting information](#error-response-from-daemon-error-processing-tar-file-docker-tar-relocation-error) for details.
## Supported languages and package managers
## Supported languages and package managers
The following languages and dependency managers are supported.
The following languages and dependency managers are supported.
...
@@ -343,14 +347,11 @@ You can search the [gemnasium-db](https://gitlab.com/gitlab-org/security-product
...
@@ -343,14 +347,11 @@ You can search the [gemnasium-db](https://gitlab.com/gitlab-org/security-product
to find a vulnerability in the Gemnasium database.
to find a vulnerability in the Gemnasium database.
You can also [submit new vulnerabilities](https://gitlab.com/gitlab-org/security-products/gemnasium-db/blob/master/CONTRIBUTING.md).
You can also [submit new vulnerabilities](https://gitlab.com/gitlab-org/security-products/gemnasium-db/blob/master/CONTRIBUTING.md).
<!-- ## Troubleshooting
## Troubleshooting
Include any troubleshooting steps that you can foresee. If you know beforehand what issues
### Error response from daemon: error processing tar file: docker-tar: relocation error
one might have when setting this up, or when something is changed, or on upgrading, it's
important to describe those, too. Think of things that may go wrong and include them here.
This is important to minimize requests for support, and to avoid doc comments with
questions that you know someone might ask.
Each scenario can be a third-level heading, e.g. `### Getting error message X`.
This error occurs when the Docker version used to run the SAST job is `19.03.00`.
If you have none to add when creating a doc, leave this section in place
You are advised to update to Docker `19.03.01` or greater. Older versions are not
but commented out to help encourage others to add to it in the future. -->
@@ -51,6 +51,10 @@ To run a SAST job, you need GitLab Runner with the
...
@@ -51,6 +51,10 @@ To run a SAST job, you need GitLab Runner with the
executor running in privileged mode. If you're using the shared Runners on GitLab.com,
executor running in privileged mode. If you're using the shared Runners on GitLab.com,
this is enabled by default.
this is enabled by default.
CAUTION: **Caution:**
If you use your own Runners, make sure that the Docker version you have installed
is **not**`19.03.00`. See [troubleshooting information](#error-response-from-daemon-error-processing-tar-file-docker-tar-relocation-error) for details.
## Supported languages and frameworks
## Supported languages and frameworks
The following table shows which languages, package managers and frameworks are supported and which tools are used.
The following table shows which languages, package managers and frameworks are supported and which tools are used.
...
@@ -350,14 +354,11 @@ Once a vulnerability is found, you can interact with it. Read more on how to
...
@@ -350,14 +354,11 @@ Once a vulnerability is found, you can interact with it. Read more on how to
For more information about the vulnerabilities database update, check the
For more information about the vulnerabilities database update, check the