Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
G
gitlab-ce
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
1
Merge Requests
1
Analytics
Analytics
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
nexedi
gitlab-ce
Commits
53a4244e
Commit
53a4244e
authored
Mar 31, 2020
by
David DeSanto
Committed by
Nick Gaskill
Mar 31, 2020
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Remove air-gapped as name for offline mode
parent
00c62397
Changes
4
Hide whitespace changes
Inline
Side-by-side
Showing
4 changed files
with
24 additions
and
14 deletions
+24
-14
doc/user/application_security/container_scanning/index.md
doc/user/application_security/container_scanning/index.md
+3
-2
doc/user/application_security/dast/index.md
doc/user/application_security/dast/index.md
+2
-2
doc/user/application_security/offline_deployments/index.md
doc/user/application_security/offline_deployments/index.md
+18
-9
doc/user/application_security/sast/index.md
doc/user/application_security/sast/index.md
+1
-1
No files found.
doc/user/application_security/container_scanning/index.md
View file @
53a4244e
...
...
@@ -209,13 +209,14 @@ If you want to whitelist specific vulnerabilities, you'll need to:
in the
[
whitelist example file
](
https://github.com/arminc/clair-scanner/blob/v12/example-whitelist.yaml
)
.
1.
Add the
`clair-whitelist.yml`
file to the Git repository of your project.
### Running Container Scanning in an offline
, air-gapped installation
### Running Container Scanning in an offline
environment deployment
Container Scanning can be executed on an offline
air-gapped GitLab Ultimate installation
using the following process:
Container Scanning can be executed on an offline
GitLab Ultimate installation by
using the following process:
1.
Host the following Docker images on a
[
local Docker container registry
](
../../packages/container_registry/index.md
)
:
-
[
arminc/clair-db vulnerabilities database
](
https://hub.docker.com/r/arminc/clair-db
)
-
GitLab klar analyzer:
`registry.gitlab.com/gitlab-org/security-products/analyzers/klar`
1.
[
Override the container scanning template
](
#overriding-the-container-scanning-template
)
in your
`.gitlab-ci.yml`
file to refer to the Docker images hosted on your local Docker container registry:
```
yaml
...
...
doc/user/application_security/dast/index.md
View file @
53a4244e
...
...
@@ -442,9 +442,9 @@ dast:
The DAST job does not require the project's repository to be present when running, so by default
[
`GIT_STRATEGY`
](
../../../ci/yaml/README.md#git-strategy
)
is set to
`none`
.
## Running DAST in an offline
air-gapped installation
## Running DAST in an offline
environment deployment
DAST can be executed on an offline
air-gapped GitLab Ultimate installation
using the following process:
DAST can be executed on an offline
GitLab Ultimate installation by
using the following process:
1.
Host the DAST image
`registry.gitlab.com/gitlab-org/security-products/dast:latest`
in your local
Docker container registry.
...
...
doc/user/application_security/offline_deployments/index.md
View file @
53a4244e
...
...
@@ -2,17 +2,26 @@
type
:
reference, howto
---
#
Air-gapped (or offline)
environment deployments
#
Offline
environment deployments
It is possible to run most of the GitLab security scanners when not
connected to the internet.
This document describes how to operate Secure
scanners in an air-gapped or offline envi
onment. These instructions also apply to
self-managed installations that are secured, have security policies (
e.g., firewall policies), or
otherwise restricted from
accessing the full internet.
These instructions are designed for physically disconnected networks,
but can also be followed in these other use cases.
This document describes how to operate Secure
Categories (that is, scanner types) in an offline envir
onment. These instructions also apply to
self-managed installations that are secured, have security policies (
for example, firewall policies), or are
otherwise restricted from
accessing the full internet.
GitLab refers to these deployments as _offline environment deployments_.
Other common names include:
## Air-gapped (or offline) environments
-
Air-gapped environments
-
Limited connectivity environments
-
Local area network (LAN) environments
-
Intranet environments
These environments have physical barriers or security policies (for example, firewalls) that prevent
or limit internet access. These instructions are designed for physically disconnected networks, but
can also be followed in these other use cases.
## Offline environments
In this situation, the GitLab instance can be one or more servers and services that can communicate
on a local network, but with no or very restricted access to the internet. Assume anything within
...
...
@@ -64,6 +73,6 @@ hosted within your network.
Each individual scanner may be slightly different than the steps described
above. You can find more info at each of the pages below:
-
[
Container scanning offline directions
](
../container_scanning/index.md#running-container-scanning-in-an-offline-
air-gapped-installation
)
-
[
SAST offline directions
](
../sast/index.md#gitlab-sast-in-an-offline-
air-gapped-installation
)
-
[
DAST offline directions
](
../dast/index.md#running-dast-in-an-offline-
air-gapped-installation
)
-
[
Container scanning offline directions
](
../container_scanning/index.md#running-container-scanning-in-an-offline-
environment-deployment
)
-
[
SAST offline directions
](
../sast/index.md#gitlab-sast-in-an-offline-
environment-deployment
)
-
[
DAST offline directions
](
../dast/index.md#running-dast-in-an-offline-
environment-deployment
)
doc/user/application_security/sast/index.md
View file @
53a4244e
...
...
@@ -491,7 +491,7 @@ Once a vulnerability is found, you can interact with it. Read more on how to
For more information about the vulnerabilities database update, check the
[
maintenance table
](
../index.md#maintenance-and-update-of-the-vulnerabilities-database
)
.
## GitLab SAST in an offline
air-gapped installation
## GitLab SAST in an offline
environment deployment
For self-managed GitLab instances in an environment with limited, restricted, or intermittent access
to external resources via the internet, some adjustments are required for the SAST job to
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment