Commit 40bc1771 authored by Marcel Amirault's avatar Marcel Amirault

Merge branch 'russell/expand-dast-saved-scan-instructions' into 'master'

Add required steps to DAST on-demand saved scans documentation

See merge request gitlab-org/gitlab!54390
parents f0c84195 ebe1b045
...@@ -727,6 +727,8 @@ Alternatively, you can use the CI/CD variable `SECURE_ANALYZERS_PREFIX` to overr ...@@ -727,6 +727,8 @@ Alternatively, you can use the CI/CD variable `SECURE_ANALYZERS_PREFIX` to overr
> - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/218465) in GitLab 13.2. > - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/218465) in GitLab 13.2.
> - [Improved](https://gitlab.com/gitlab-org/gitlab/-/issues/218465) in GitLab 13.3. > - [Improved](https://gitlab.com/gitlab-org/gitlab/-/issues/218465) in GitLab 13.3.
> - The saved scans feature was [added](https://gitlab.com/groups/gitlab-org/-/epics/5100) in
> GitLab 13.9.
An on-demand DAST scan runs outside the DevOps life cycle. Changes in your repository don't trigger An on-demand DAST scan runs outside the DevOps life cycle. Changes in your repository don't trigger
the scan. You must start it manually. the scan. You must start it manually.
...@@ -765,9 +767,11 @@ To run an on-demand scan, either: ...@@ -765,9 +767,11 @@ To run an on-demand scan, either:
- [Create and run an on-demand scan](#create-and-run-an-on-demand-scan). - [Create and run an on-demand scan](#create-and-run-an-on-demand-scan).
- [Run a previously saved on-demand scan](#run-a-saved-on-demand-scan). - [Run a previously saved on-demand scan](#run-a-saved-on-demand-scan).
### Create and run an on-demand scan #### Create and run an on-demand scan
1. From your project's home page, go to **Security & Compliance > On-demand Scans** in the left sidebar. 1. From your project's home page, go to **Security & Compliance > On-demand Scans** in the left
sidebar.
1. Complete the **Scan name** and **Description** fields.
1. In **Scanner profile**, select a scanner profile from the dropdown. 1. In **Scanner profile**, select a scanner profile from the dropdown.
1. In **Site profile**, select a site profile from the dropdown. 1. In **Site profile**, select a site profile from the dropdown.
1. To run the on-demand scan now, select **Save and run scan**. Otherwise select **Save scan** to 1. To run the on-demand scan now, select **Save and run scan**. Otherwise select **Save scan** to
...@@ -775,49 +779,53 @@ To run an on-demand scan, either: ...@@ -775,49 +779,53 @@ To run an on-demand scan, either:
The on-demand DAST scan runs and the project's dashboard shows the results. The on-demand DAST scan runs and the project's dashboard shows the results.
#### List saved on-demand scans ### List saved on-demand scans
To list saved on-demand scans: To list saved on-demand scans:
1. From your project's home page, go to **Security & Compliance > Configuration**. 1. From your project's home page, go to **Security & Compliance > Configuration**.
1. Select the **Saved Scans** tab. 1. Select the **Saved Scans** tab.
#### View details of an on-demand scan ### View details of an on-demand scan
To view details of an on-demand scan: To view details of an on-demand scan:
1. From your project's home page, go to **Security & Compliance > Configuration**. 1. From your project's home page, go to **Security & Compliance > Configuration**.
1. Select **Manage DAST scans**.
1. Select **Manage** in the **DAST Profiles** row. 1. Select **Manage** in the **DAST Profiles** row.
1. Select the **Saved Scans** tab. 1. Select the **Saved Scans** tab.
1. In the saved scan's row select **More actions** (**{ellipsis_v}**), then select **Edit**. 1. In the saved scan's row select **More actions** (**{ellipsis_v}**), then select **Edit**.
#### Run a saved on-demand scan ### Run a saved on-demand scan
To run a saved on-demand scan: To run a saved on-demand scan:
1. From your project's home page, go to **Security & Compliance > Configuration**. 1. From your project's home page, go to **Security & Compliance > Configuration**.
1. Select **Manage DAST scans**.
1. Select **Manage** in the **DAST Profiles** row. 1. Select **Manage** in the **DAST Profiles** row.
1. Select the **Saved Scans** tab. 1. Select the **Saved Scans** tab.
1. In the scan's row select **Run scan**. 1. In the scan's row select **Run scan**.
The on-demand DAST scan runs and the project's dashboard shows the results. The on-demand DAST scan runs and the project's dashboard shows the results.
#### Edit an on-demand scan ### Edit an on-demand scan
To edit an on-demand scan: To edit an on-demand scan:
1. From your project's home page, go to **Security & Compliance > Configuration**. 1. From your project's home page, go to **Security & Compliance > Configuration**.
1. Select **Manage DAST scans**.
1. Select **Manage** in the **DAST Profiles** row. 1. Select **Manage** in the **DAST Profiles** row.
1. Select the **Saved Scans** tab. 1. Select the **Saved Scans** tab.
1. In the saved scan's row select **More actions** (**{ellipsis_v}**), then select **Edit**. 1. In the saved scan's row select **More actions** (**{ellipsis_v}**), then select **Edit**.
1. Edit the form. 1. Edit the form.
1. Select **Save scan**. 1. Select **Save scan**.
#### Delete an on-demand scan ### Delete an on-demand scan
To delete an on-demand scan: To delete an on-demand scan:
1. From your project's home page, go to **Security & Compliance > Configuration**. 1. From your project's home page, go to **Security & Compliance > Configuration**.
1. Select **Manage DAST scans**.
1. Select **Manage** in the **DAST Profiles** row. 1. Select **Manage** in the **DAST Profiles** row.
1. Select the **Saved Scans** tab. 1. Select the **Saved Scans** tab.
1. In the saved scan's row select **More actions** (**{ellipsis_v}**), then select **Delete**. 1. In the saved scan's row select **More actions** (**{ellipsis_v}**), then select **Delete**.
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment