Commit Graph

75 Commits

Author SHA1 Message Date
Paul Gascou-Vaillancourt 0cc4f2e620 Update security dashboards documentation
Reflect the addition of a "hide dismissed vulnerabilities" toggle in
security dashboards, see https://gitlab.com/gitlab-org/gitlab-ee/issues/9102
2019-09-05 10:43:44 +00:00
Mark Florian c742ee762c Update Pipeline Security Dashboard documentation
Tracked in https://gitlab.com/gitlab-org/gitlab-ee/issues/13496.
2019-09-04 18:33:43 +00:00
Seth Berger 42d0ca82a0 Clarified website url precedence 2019-09-04 15:57:07 +00:00
Seth Berger 39566ccb0d Removed reference to project for DAST 2019-09-04 15:17:21 +00:00
yonatan miller 554f419273 Update `true` with `"true"`
Gitlab CI Linter otherwise gives error `variables config should be a hash value of key value pairs`
2019-09-02 17:07:36 +00:00
Marcia Ramos d645196c4a Merge branch 'docs/license-compliance' into 'master'
Update screenshots for License Compliance

Closes gitlab-ee#8910

See merge request gitlab-org/gitlab-ce!32537
2019-09-02 14:21:59 +00:00
Matt Penna c1000b7948 Added example for passing Maven repo credentials 2019-09-02 13:42:35 +00:00
Achilleas Pipinellis 3cf2aac874
Update screenshots for License Compliance 2019-09-02 15:21:12 +02:00
Dave Pisek 807c3307d5 Update documentation for security dashboard
This commit updates a screenshot and the description
of the documentation of the group security dashboard to it is in
sync with the latest version of the dashboard.
2019-08-30 21:25:49 +10:00
Marcel Amirault 03b152c5b9 Fix broken markdown in various docs 2019-08-30 03:29:45 +00:00
Marcel Amirault 513d3f5811 Fix markdown in various docs
Clean up issues that may cause the docs-lint
test to fail, such as trailing whitespace, no
EOF newline, blockquotes, etc
2019-08-30 02:25:44 +00:00
Victor Zagorodny e4fbd94cf5 Update CE files for GSD projects filter
A new param with_security_reports was added to
GET /groups/:id/projects API and the code to
support this logic in GroupProjectsFinder and
Project model. Also, a DB index was added to
ci_job_artifacts table to speed up the search
of security reports artifacts for projects
2019-08-28 14:26:42 +00:00
Achilleas Pipinellis a83f68baa7 Rename all filenames and occurrences to License Compliance
- New redirect doc/user/application_security/license_compliance/index.md
- Renaming of images.
- Some links that were pointing to the old location are fixed.
2019-08-28 06:48:58 +00:00
Fabien Catteau 6a85824170 License Compliance defaults to Python 3
License Compliance now uses Python 3 by default.

See https://gitlab.com/gitlab-org/gitlab-ee/issues/12032
2019-08-26 19:58:02 +00:00
Seth Berger 317586379a Updated container scanning
Updated container scanning docs with a sample config
2019-08-26 19:31:06 +00:00
Achilleas Pipinellis 0122ec455c Merge branch 'docs-upgrade-gosec-url-data-to-partially-reliable' into 'master'
Update docs - SAST golang analyzer URLs are partially reliable

See merge request gitlab-org/gitlab-ce!32164
2019-08-26 08:29:27 +00:00
Lucas Charles 37b333e4e6 Update docs - SAST golang analyzer URLs are partially reliable
With https://gitlab.com/gitlab-org/security-products/analyzers/gosec/merge_requests/18
we have added some basic URLs to our gosec analyzer, upgrading data from none to partially reliable
2019-08-23 18:26:23 +00:00
Lucas Charles 05bf353355
Add example usage to SAST/DS docs for file exclusion 2019-08-23 11:02:29 -07:00
Lucas Charles 1fc2129037
Use common terminology for SAT/DS table headers 2019-08-23 11:02:01 -07:00
Lucas Charles 0eb03f47f4
Add headers to missing SAST doc tables 2019-08-23 11:02:01 -07:00
Achilleas Pipinellis 450d84ff83 Rename License Management to License Compliance
As part of https://gitlab.com/gitlab-org/gitlab-ee/issues/8910,
all occurrences of License Management are replace with
License Compliance.
2019-08-22 07:44:58 +00:00
Mark Florian 00c08cc5d4 Update/expand docs for the Dependency List
These changes align the docs with the features introduced in [1].

See also the [issue tracking the documentation changes][2].

[1]: https://gitlab.com/gitlab-org/gitlab-ee/issues/10077
[2]: https://gitlab.com/gitlab-org/gitlab-ee/issues/12986
2019-08-15 06:15:15 +00:00
Evan Read c77797ea23 Merge branch 'patch-72' into 'master'
Docs: Fix typo when enumerating GOSEC levels for SAST

See merge request gitlab-org/gitlab-ce!31141
2019-08-12 07:17:43 +00:00
Julius Kvedaras 9994dfa5db Sorting in alphabetical order, adding strings to be used with analyzers 2019-08-08 23:20:15 +00:00
Achilleas Pipinellis 95145f3e3e Compress images with pngquant 2019-08-07 10:01:48 +00:00
Lucas Charles c01ed60b39 Add pmd-apex sast analyzer to sast docs
Includes documentation for new Apex (Salesforce) analyzer
2019-08-05 05:43:06 +00:00
Lucas Charles 0fadca7fa9 Add documentation for Security Approvals for MRs
Documents how to enable security approvals
2019-08-02 00:10:34 +00:00
Achilleas Pipinellis b559d9909f Merge branch 'mnguyen4-master-patch-95950' into 'master'
Add Link to Seismic Shift Whitepaper to /dast/ landing page

See merge request gitlab-org/gitlab-ce!30868
2019-08-01 09:07:02 +00:00
Marcel Amirault d869b636a3 Add gradle to not-yet-supported list 2019-07-30 02:25:10 +00:00
Evan Read 12b93fcb49 Refine topics for Phase 2 of SSoT audit
Includes admin_area and application_security
topics.
2019-07-25 14:16:25 +00:00
TomKriek 386c4be6e9 Fix typo when enumerating GOSEC levels 2019-07-25 11:37:35 +00:00
Dave Pisek 3e340b6ffc Update docs to reflect new Security tabs
This commit includes changes to update the documentation so it
reflects the new navigation structure introduced by the additional
tab "Security & Compliance" to the project-views sidebar and
"Security" to the group-views sidebar.

* Screenshot
* Paths to the Dependency List
* Paths to the group-level security dashboard
2019-07-24 11:57:57 +10:00
mo khan 0a93fea3f6 Add PIP_DEPENDENCY_PATH to dependency scanning template 2019-07-23 19:40:39 +00:00
Achilleas Pipinellis 917f9b4da0 Document all the available options for SAST
Port all info from:

- security-products/sast/blob/master/docs/README.md
- security-products/sast/blob/master/docs/analyzers.md
2019-07-22 02:25:01 +00:00
Evan Read 9e85a1889f Merge branch 'docs/dast-analyzers' into 'master'
Document all the available DAST variables

Closes gitlab-ee#10122

See merge request gitlab-org/gitlab-ce!30801
2019-07-19 04:14:21 +00:00
Marcel Amirault 7da80b2d36 Update numbered lists for docs standards
Ensure that all numbered lists use only 1. and no other numbers.
Also ensure that numbered lists use proper spacing.
2019-07-19 02:20:32 +00:00
Matt Nguyen ac0bc49b56 Update note section with CTA to whitepaper 2019-07-17 20:13:54 +00:00
Fabien Catteau 5c97713bcd Propagate PIP index URL
Propagate PIP_INDEX_URL, PIP_EXTRA_INDEX_URL
to the dependency-scanning Docker image
to support Python projects depending on custom
Pypi registries. These variables will be consumed
by the gemnasium-python analyzer.
2019-07-17 00:59:03 +00:00
Achilleas Pipinellis f6888b9b60
Document all the available DAST variables 2019-07-16 19:54:14 +03:00
Can Eldem b544c921fc Update dependency scanning to add new variable 2019-07-15 13:10:46 +00:00
Marcel Amirault 4121c63676 Remove extra blank lines from docs
Removing extra blank lines in docs that serve
no purpose, as well as some --- lines that also
are not needed.
2019-07-15 01:04:35 +00:00
Achilleas Pipinellis 72aa6f5b51
Remove deprecated docs sections of Secure jobs
The manual job definitions are deprecated and are not
guaranteed to work as expected. We should not confuse
our users with including them in the docs.

This deletes all the deprecated sections and cleans up
the configuration section significantly.
2019-07-09 19:50:04 +03:00
Marcel Amirault 73c6477b7e Changing badges to use parentheses not brackets
Previously, we used brackets to denote the tier badges,
but this made Kramdown, the docs site Markdown renderer,
show many warnings when building the site. This is now
fixed by using parentheses instead of square brackets.

This was caused by [PREMIUM] looking like a link to
Kramdown, which couldn't find a URL there.

See:
- https://gitlab.com/gitlab-com/gitlab-docs/merge_requests/484
- https://gitlab.com/gitlab-org/gitlab-ce/issues/63800
2019-07-08 08:50:38 +00:00
Zachary Knight f7f94b6ce2 Added experimental languages to license management docs. 2019-07-05 18:27:55 +00:00
Achilleas Pipinellis e49f7905c1
Document the security tools maintenance and vulnerabilities DB update
Addresses the following questions:

- How often do we update the vulnerability DB or analyzers?
- Do we have to update GitLab to benefit from latest vulnerabilities
  definitions?
2019-06-26 16:56:11 +02:00
Achilleas Pipinellis b7e75774d4
Mention what tools are not supported in Dependency Scanning 2019-06-25 13:42:44 +02:00
Achilleas Pipinellis 60cd12a6d7
Document all the available options for Dependency Scanning
Port all info from:

- security-products/dependency-scanning/blob/master/docs/README.md
- security-products/dependency-scanning/blob/master/docs/analyzers.md
2019-06-24 10:31:45 +02:00
Achilleas Pipinellis a84a7233e3
Remove Gemnasium dead link from docs 2019-06-21 18:04:29 +02:00
Achilleas Pipinellis 511e67e5ab Mention Container Scanning NFS bug and how to fix it 2019-06-21 14:05:03 +00:00
Fernando 91cf0cb2d5 Paginate license management and add license search
First pass at license pagination

* Paginate license management client side
* Refactor license list into seperate component

Add string filtering to license names

* Add search input to query on license name

Add add license button

* Refactor add license button to be a slot

Clean up styles and button state logic

* Clean up alignment
* Disable button when dorpdown is open

Remove client side alphabetical sorting

* Let the databse return order by date

Refactor list to use row slot

Further abstract pagination list compnent

Finish refactor of paginated list

* Refactor component into generic paginated list component
* Add additional style tweaks + responsive classes

Run prettier

Update license_management_spec

Run Prettier

Add unit tests for paginated list component

* Refactor template to be valid html (li in ul)
* Add jest unit tests

Add additional unit tests

* Add unit tests around pagination and search states

Add unit tests for filter props

Pretty print, lint, and add changelog

Update po files

Regernate pot file

Backport EE changes

* Update paginated list component
* Update specs and snapshot

Add POT file

Update default copy for pagianted list

* update copy for empty and empty search result states

Update pot file

Backport changes from EE merge request

* Paginaed list component and specs

Backport EE changes

Update paginated list snapshot

Update license management docs and images

Backport paginated-list component from EE

Link to gitlab-ui artifacts job

Match gitlab ui build to EE

Update pot file

Backport Paginated list changes

Set gitlab-ui to temp artifact

Add changelog
2019-06-20 02:54:09 -04:00