Commit dd4fa164 authored by Achilleas Pipinellis's avatar Achilleas Pipinellis

Merge branch 'docs/run-daily-security-scan' into 'master'

Add information for keeping security dashboard up-to-date.

Closes #6941

See merge request gitlab-org/gitlab-ee!7299
parents df22bdb3 a1bb61a2
# Project Security Dashboard # Project Security Dashboard
> [Introduced][ee-6165] in [GitLab Ultimate][ee] 11.1. > [Introduced](https://gitlab.com/gitlab-org/gitlab-ee/issues/6165) in [GitLab Ultimate](https://about.gitlab.com/pricing) 11.1.
The Security Dashboard displays the latest security reports for your project. The Security Dashboard displays the latest security reports for your project.
Use it to find and fix vulnerabilities affecting the [default branch](./repository/branches/index.md#default-branch). Use it to find and fix vulnerabilities affecting the [default branch](./repository/branches/index.md#default-branch).
...@@ -9,10 +9,27 @@ Use it to find and fix vulnerabilities affecting the [default branch](./reposito ...@@ -9,10 +9,27 @@ Use it to find and fix vulnerabilities affecting the [default branch](./reposito
## How it works? ## How it works?
To benefit from the Security Dashboard you must first configure the [Security Reports](./merge_requests/index.md#security-reports). To benefit from the Security Dashboard you must first configure the [Security Reports](merge_requests/index.md#security-reports).
The Security Dashboard will then list security vulnerabilities from the latest pipeline run on the default branch (e.g., `master`). The Security Dashboard will then list security vulnerabilities from the latest pipeline run on the default branch (e.g., `master`).
You will also be able to interact with the reports [the same way you can do on a merge request](./merge_requests/index.md#interacting-with-security-reports).
[ee-6165]: https://gitlab.com/gitlab-org/gitlab-ee/issues/6165 You will also be able to interact with the reports [the same way you can on a merge request](merge_requests/index.md#interacting-with-security-reports).
[ee]: https://about.gitlab.com/pricing
## Keeping the Security Dashboard updated
The Security Dashboard displays information from the results of the most recent security scan on the default branch. Security scans are performed every time the branch is updated.
If the default branch is updated infrequently, scans are run infrequently and the information on the Security Dashboard can become outdated as new vulnerabilities are discovered.
To ensure the information on the Security Dashboard is regularly updated, configure a [scheduled pipeline](pipelines/schedules.md) to run a daily security scan. This will update the information displayed on the Security Dashboard regardless of how often the default branch is updated.
A daily security scan can be configured to only execute jobs that to relate to security. For more information on configuring security-related jobs, see:
- [Static Application Security Testing](merge_requests/sast.md) and [example](../../ci/examples/sast.md).
- [Dynamic Application Security Testing](merge_requests/dast.md) and [example](../../ci/examples/dast.md).
- [Dependency Scanning](merge_requests/dependency_scanning.md) and [example](../../ci/examples/dependency_scanning.md).
- [Container Scanning](merge_requests/container_scanning.md) and [example](../../ci/examples/container_scanning.md).
### Security scans using Auto DevOps
When using [Auto DevOps](../../topics/autodevops/index.md), use [special environment variables](../../topics/autodevops/index.md#environment-variables) to configure daily security scans.
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment