Add latest changes from gitlab-org/gitlab@master
This commit is contained in:
parent
06d5641a54
commit
35ee286f94
|
@ -1 +1 @@
|
|||
2982990541d6980bf5035987996e976042c8ccc6
|
||||
6941c499e077fe2303dd5c31a08807d14ad7a616
|
||||
|
|
|
@ -5,4 +5,4 @@ rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/325130
|
|||
milestone: '13.12'
|
||||
type: development
|
||||
group: group::dynamic analysis
|
||||
default_enabled: false
|
||||
default_enabled: true
|
||||
|
|
|
@ -110,6 +110,8 @@ and get the pipeline status and duration. In combination with a Grafana dashboar
|
|||
this helps build an actionable view for your operations team. Metric graphs can also
|
||||
be embedded into incidents making problem resolving easier. Additionally, it can also export metrics about jobs and environments.
|
||||
|
||||
If you use the GitLab CI Pipelines Exporter, you should start with the [example configuration](https://github.com/mvisonneau/gitlab-ci-pipelines-exporter/blob/main/docs/configuration_syntax.md).
|
||||
|
||||
![Grafana Dashboard for GitLab CI Pipelines Prometheus Exporter](img/ci_efficiency_pipeline_health_grafana_dashboard.png)
|
||||
|
||||
Alternatively, you can use a monitoring tool that can execute scripts, like
|
||||
|
|
|
@ -14,6 +14,8 @@ need it for your tests to run.
|
|||
|
||||
If you want to use a MySQL container, you can use [GitLab Runner](../runners/README.md) with the Docker executor.
|
||||
|
||||
This example shows you how to set a username and password that GitLab uses to access the MySQL container. If you do not set a username and password, you must use `root`.
|
||||
|
||||
1. [Create CI/CD variables](../variables/README.md#custom-cicd-variables) for your
|
||||
MySQL database and password by going to **Settings > CI/CD**, expanding **Variables**,
|
||||
and clicking **Add Variable**.
|
||||
|
@ -54,6 +56,9 @@ If you want to use a MySQL container, you can use [GitLab Runner](../runners/REA
|
|||
Database: <your_mysql_database>
|
||||
```
|
||||
|
||||
In this example, the user is `runner`. You should use a user that has permission to
|
||||
access your database.
|
||||
|
||||
## Use MySQL with the Shell executor
|
||||
|
||||
You can also use MySQL on manually-configured servers that use
|
||||
|
|
|
@ -978,6 +978,7 @@ required for an on-demand DAST scan.
|
|||
A site profile contains the following:
|
||||
|
||||
- **Profile name**: A name you assign to the site to be scanned.
|
||||
- **Site type**: The type of target to be scanned, either website or API scan.
|
||||
- **Target URL**: The URL that DAST runs against.
|
||||
- **Excluded URLs**: A comma-separated list of URLs to exclude from the scan.
|
||||
- **Request headers**: A comma-separated list of HTTP request headers, including names and values. These headers are added to every request made by DAST.
|
||||
|
@ -988,6 +989,8 @@ A site profile contains the following:
|
|||
- **Username form field**: The name of username field at the sign-in HTML form.
|
||||
- **Password form field**: The name of password field at the sign-in HTML form.
|
||||
|
||||
When an API site type is selected, a [host override](#host-override) is used to ensure the API being scanned is on the same host as the target. This is done to reduce the risk of running an active scan against the wrong API.
|
||||
|
||||
#### Site profile validation
|
||||
|
||||
> [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/233020) in GitLab 13.8.
|
||||
|
|
|
@ -518,6 +518,7 @@ Experimental features available are:
|
|||
|
||||
- Enable scanning of iOS and Android apps using the [MobSF analyzer](https://gitlab.com/gitlab-org/security-products/analyzers/mobsf/).
|
||||
- Enable the [semgrep analyzer](https://gitlab.com/gitlab-org/security-products/analyzers/semgrep/).
|
||||
- Semgrep may be inconsistent when reporting vulnerabilities found in minified JavaScript files.
|
||||
|
||||
#### Enable experimental features
|
||||
|
||||
|
|
Loading…
Reference in New Issue