Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
G
gitlab-ce
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
1
Merge Requests
1
Analytics
Analytics
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
nexedi
gitlab-ce
Commits
5fc396e4
Commit
5fc396e4
authored
Aug 26, 2019
by
GitLab Bot
Browse files
Options
Browse Files
Download
Plain Diff
Automatic merge of gitlab-org/gitlab-ce master
parents
676b856a
8c5f583a
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
31 additions
and
1 deletion
+31
-1
doc/user/application_security/container_scanning/index.md
doc/user/application_security/container_scanning/index.md
+31
-1
No files found.
doc/user/application_security/container_scanning/index.md
View file @
5fc396e4
...
...
@@ -94,6 +94,36 @@ If you want to whitelist some specific vulnerabilities, you can do so by definin
them in a YAML file named
`clair-whitelist.yml`
. Read more in the
[
Clair documentation
](
https://github.com/arminc/clair-scanner/blob/master/README.md#example-whitelist-yaml-file
)
.
## Example
The following is a sample
`.gitlab-ci.yml`
that will build your Docker Image, push it to the container registry and run Container Scanning.
```
yaml
variables
:
DOCKER_DRIVER
:
overlay2
services
:
-
docker:stable-dind
stages
:
-
build
-
test
include
:
-
template
:
Container-Scanning.gitlab-ci.yml
build
:
image
:
docker:stable
stage
:
build
variables
:
IMAGE
:
$CI_REGISTRY_IMAGE/$CI_COMMIT_REF_SLUG:$CI_COMMIT_SHA
script
:
-
docker info
-
docker login -u gitlab-ci-token -p $CI_JOB_TOKEN $CI_REGISTRY
-
docker build -t $IMAGE .
-
docker push $IMAGE
```
## Security Dashboard
The Security Dashboard is a good place to get an overview of all the security
...
...
@@ -125,4 +155,4 @@ docker: Error response from daemon: failed to copy xattrs: failed to set xattr "
This is a result of a bug in Docker which is now
[
fixed
](
https://github.com/containerd/continuity/pull/138
"fs: add WithAllowXAttrErrors CopyOpt"
)
.
To prevent the error, ensure the Docker version that the Runner is using is
`18.09.03`
or higher. For more information, see
[
issue #10241
](
https://gitlab.com/gitlab-org/gitlab-ee/issues/10241
"Investigate why Container Scanning is not working with NFS mounts"
)
.
[
issue #10241
](
https://gitlab.com/gitlab-org/gitlab-ee/issues/10241
"Investigate why Container Scanning is not working with NFS mounts"
)
.
\ No newline at end of file
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment