Commit 43a9030d authored by Kati Paizee's avatar Kati Paizee

Merge branch 'russell/clarify-scheduled-security-scan' into 'master'

Clarify docs on scheduled security scan

See merge request gitlab-org/gitlab!69724
parents 7043b942 8b34be77
...@@ -166,22 +166,17 @@ To add projects to the Security Center: ...@@ -166,22 +166,17 @@ To add projects to the Security Center:
After you add projects, the security dashboard and vulnerability report display the vulnerabilities After you add projects, the security dashboard and vulnerability report display the vulnerabilities
found in those projects' default branches. found in those projects' default branches.
## Keeping the dashboards up to date ## Keep dashboards up to date
The Security Dashboard displays information from the results of the most recent The Security Dashboard displays results of the most recent security scan on the
security scan on the [default branch](../../project/repository/branches/default.md), [default branch](../../project/repository/branches/default.md). By default, security scans are run
which means that security scans are performed every time the branch is updated. only when the default branch is updated. Information on the Security Dashboard may not reflect
newly-discovered vulnerabilities.
If the default branch is updated infrequently, scans are run infrequently and the
information on the Security Dashboard can become outdated as new vulnerabilities
are discovered.
To ensure the information on the Security Dashboard is regularly updated, To ensure the information on the Security Dashboard is regularly updated,
[configure a scheduled pipeline](../../../ci/pipelines/schedules.md) to run a [configure a scheduled pipeline](../../../ci/pipelines/schedules.md) to run a daily security scan.
daily security scan. This updates the information displayed on the Security This updates the information displayed on the Security Dashboard regardless of how often the default
Dashboard regardless of how often the default branch is updated. branch is updated.
That way, reports are created even if no code change happens.
WARNING: WARNING:
Running Dependency Scanning from a scheduled pipeline might result in false negatives if your Running Dependency Scanning from a scheduled pipeline might result in false negatives if your
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment