Commit cf9a037f authored by Alexander Turinske's avatar Alexander Turinske

Update docs for sast, dast, and container scanning

- update screenshots of new UI
parent 8f8b7cb8
...@@ -23,7 +23,7 @@ GitLab checks the Container Scanning report, compares the found vulnerabilities ...@@ -23,7 +23,7 @@ GitLab checks the Container Scanning report, compares the found vulnerabilities
between the source and target branches, and shows the information right on the between the source and target branches, and shows the information right on the
merge request. merge request.
![Container Scanning Widget](img/container_scanning.png) ![Container Scanning Widget](img/container_scanning_v12_10.png)
## Use cases ## Use cases
......
...@@ -35,12 +35,12 @@ NOTE: **Note:** ...@@ -35,12 +35,12 @@ NOTE: **Note:**
This comparison logic uses only the latest pipeline executed for the target branch's base commit. This comparison logic uses only the latest pipeline executed for the target branch's base commit.
Running the pipeline on any other commit has no effect on the merge request. Running the pipeline on any other commit has no effect on the merge request.
![DAST Widget](img/dast_all.png) ![DAST Widget](img/dast_all_v12_10.png)
By clicking on one of the detected linked vulnerabilities, you will be able to By clicking on one of the detected linked vulnerabilities, you will be able to
see the details and the URL(s) affected. see the details and the URL(s) affected.
![DAST Widget Clicked](img/dast_single.png) ![DAST Widget Clicked](img/dast_single_v12_10.png)
[Dynamic Application Security Testing (DAST)](https://en.wikipedia.org/wiki/Dynamic_Application_Security_Testing) [Dynamic Application Security Testing (DAST)](https://en.wikipedia.org/wiki/Dynamic_Application_Security_Testing)
is using the popular open source tool [OWASP ZAProxy](https://github.com/zaproxy/zaproxy) is using the popular open source tool [OWASP ZAProxy](https://github.com/zaproxy/zaproxy)
......
...@@ -25,7 +25,7 @@ that is provided by [Auto DevOps](../../../topics/autodevops/index.md). ...@@ -25,7 +25,7 @@ that is provided by [Auto DevOps](../../../topics/autodevops/index.md).
GitLab checks the SAST report, compares the found vulnerabilities between the GitLab checks the SAST report, compares the found vulnerabilities between the
source and target branches, and shows the information right on the merge request. source and target branches, and shows the information right on the merge request.
![SAST Widget](img/sast.png) ![SAST Widget](img/sast_v12_10.png)
The results are sorted by the priority of the vulnerability: The results are sorted by the priority of the vulnerability:
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment