Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
G
gitlab-ce
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
1
Merge Requests
1
Analytics
Analytics
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
nexedi
gitlab-ce
Commits
149ac076
Commit
149ac076
authored
Mar 05, 2021
by
Igor Frenkel
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Update link to gemnasium analyzer
parent
8da5d135
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
10 additions
and
10 deletions
+10
-10
doc/user/application_security/dependency_scanning/index.md
doc/user/application_security/dependency_scanning/index.md
+10
-10
No files found.
doc/user/application_security/dependency_scanning/index.md
View file @
149ac076
...
...
@@ -62,16 +62,16 @@ The following languages and dependency managers are supported:
| Package Managers | Languages | Supported files | Scan tools |
| ------------------- | --------- | --------------- | ------------ |
|
[
Bundler
](
https://bundler.io/
)
| Ruby |
`Gemfile.lock`
,
`gems.locked`
|
[
Gemnasium
](
https://gitlab.com/gitlab-org/security-products/gemnasium
)
,
[
bundler-audit
](
https://github.com/rubysec/bundler-audit
)
|
|
[
Composer
](
https://getcomposer.org/
)
| PHP |
`composer.lock`
|
[
Gemnasium
](
https://gitlab.com/gitlab-org/security-products/gemnasium
)
|
|
[
Conan
](
https://conan.io/
)
| C, C++ |
[
`conan.lock`
](
https://docs.conan.io/en/latest/versioning/lockfiles.html
)
|
[
Gemnasium
](
https://gitlab.com/gitlab-org/security-products/gemnasium
)
|
|
[
Golang
](
https://golang.org/
)
| Go |
`go.sum`
|
[
Gemnasium
](
https://gitlab.com/gitlab-org/security-products/gemnasium
)
|
|
[
Gradle
](
https://gradle.org/
)
,
[
Maven
](
https://maven.apache.org/
)
| Java |
`build.gradle`
,
`build.gradle.kts`
,
`pom.xml`
|
[
Gemnasium
](
https://gitlab.com/gitlab-org/security-products/gemnasium
)
|
|
[
npm
](
https://www.npmjs.com/
)
,
[
yarn
](
https://classic.yarnpkg.com/en/
)
1.x | JavaScript |
`package-lock.json`
,
`npm-shrinkwrap.json`
,
`yarn.lock`
|
[
Gemnasium
](
https://gitlab.com/gitlab-org/security-products/gemnasium
)
|
|
[
Bundler
](
https://bundler.io/
)
| Ruby |
`Gemfile.lock`
,
`gems.locked`
|
[
Gemnasium
](
https://gitlab.com/gitlab-org/security-products/
analyzers/
gemnasium
)
,
[
bundler-audit
](
https://github.com/rubysec/bundler-audit
)
|
|
[
Composer
](
https://getcomposer.org/
)
| PHP |
`composer.lock`
|
[
Gemnasium
](
https://gitlab.com/gitlab-org/security-products/
analyzers/
gemnasium
)
|
|
[
Conan
](
https://conan.io/
)
| C, C++ |
[
`conan.lock`
](
https://docs.conan.io/en/latest/versioning/lockfiles.html
)
|
[
Gemnasium
](
https://gitlab.com/gitlab-org/security-products/
analyzers/
gemnasium
)
|
|
[
Golang
](
https://golang.org/
)
| Go |
`go.sum`
|
[
Gemnasium
](
https://gitlab.com/gitlab-org/security-products/
analyzers/
gemnasium
)
|
|
[
Gradle
](
https://gradle.org/
)
,
[
Maven
](
https://maven.apache.org/
)
| Java |
`build.gradle`
,
`build.gradle.kts`
,
`pom.xml`
|
[
Gemnasium
](
https://gitlab.com/gitlab-org/security-products/
analyzers/
gemnasium
)
|
|
[
npm
](
https://www.npmjs.com/
)
,
[
yarn
](
https://classic.yarnpkg.com/en/
)
1.x | JavaScript |
`package-lock.json`
,
`npm-shrinkwrap.json`
,
`yarn.lock`
|
[
Gemnasium
](
https://gitlab.com/gitlab-org/security-products/
analyzers/
gemnasium
)
|
|
[
npm
](
https://www.npmjs.com/
)
(
7
and earlier),
[
yarn
](
https://classic.yarnpkg.com/en/
)
1.x | JavaScript |
`package.json`
|
[
Retire.js
](
https://retirejs.github.io/retire.js/
)
|
|
[
NuGet
](
https://www.nuget.org/
)
4.9+ | .NET, C# |
[
`packages.lock.json`
](
https://docs.microsoft.com/en-us/nuget/consume-packages/package-references-in-project-files#enabling-lock-file
)
|
[
Gemnasium
](
https://gitlab.com/gitlab-org/security-products/gemnasium
)
|
|
[
`setuptools`
](
https://setuptools.readthedocs.io/en/latest/
)
,
[
pip
](
https://pip.pypa.io/en/stable/
)
,
[
Pipenv
](
https://pipenv.pypa.io/en/latest/
)
(
*1*
)
| Python |
`setup.py`
,
`requirements.txt`
,
`requirements.pip`
,
`requires.txt`
,
`Pipfile`
,
`Pipfile.lock`
|
[
Gemnasium
](
https://gitlab.com/gitlab-org/security-products/gemnasium
)
|
|
[
sbt
](
https://www.scala-sbt.org/
)
(
*2*
)
| Scala |
`build.sbt`
|
[
Gemnasium
](
https://gitlab.com/gitlab-org/security-products/gemnasium
)
|
|
[
NuGet
](
https://www.nuget.org/
)
4.9+ | .NET, C# |
[
`packages.lock.json`
](
https://docs.microsoft.com/en-us/nuget/consume-packages/package-references-in-project-files#enabling-lock-file
)
|
[
Gemnasium
](
https://gitlab.com/gitlab-org/security-products/
analyzers/
gemnasium
)
|
|
[
`setuptools`
](
https://setuptools.readthedocs.io/en/latest/
)
,
[
pip
](
https://pip.pypa.io/en/stable/
)
,
[
Pipenv
](
https://pipenv.pypa.io/en/latest/
)
(
*1*
)
| Python |
`setup.py`
,
`requirements.txt`
,
`requirements.pip`
,
`requires.txt`
,
`Pipfile`
,
`Pipfile.lock`
|
[
Gemnasium
](
https://gitlab.com/gitlab-org/security-products/
analyzers/
gemnasium
)
|
|
[
sbt
](
https://www.scala-sbt.org/
)
(
*2*
)
| Scala |
`build.sbt`
|
[
Gemnasium
](
https://gitlab.com/gitlab-org/security-products/
analyzers/
gemnasium
)
|
1.
[
Pipenv
](
https://pipenv.pypa.io/en/latest/
)
projects are scanned when a
`Pipfile`
is present.
1.
Support for
[
sbt
](
https://www.scala-sbt.org/
)
1.3 and above was added in GitLab 13.9.
...
...
@@ -80,7 +80,7 @@ Plans are underway for supporting the following languages, dependency managers,
| Package Managers | Languages | Supported files | Scan tools | Issue |
| ------------------- | --------- | --------------- | ---------- | ----- |
|
[
Poetry
](
https://python-poetry.org/
)
| Python |
`poetry.lock`
|
[
Gemnasium
](
https://gitlab.com/gitlab-org/security-products/gemnasium
)
|
[
GitLab#7006
](
https://gitlab.com/gitlab-org/gitlab/-/issues/7006
)
|
|
[
Poetry
](
https://python-poetry.org/
)
| Python |
`poetry.lock`
|
[
Gemnasium
](
https://gitlab.com/gitlab-org/security-products/
analyzers/
gemnasium
)
|
[
GitLab#7006
](
https://gitlab.com/gitlab-org/gitlab/-/issues/7006
)
|
## Contribute your scanner
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment