Skip to content
GitLab
菜单
为什么选择 GitLab
定价
联系销售
探索
为什么选择 GitLab
定价
联系销售
探索
登录
获取免费试用
主导航
搜索或转到…
项目
GitLab
管理
动态
成员
标记
计划
议题
议题看板
里程碑
迭代
需求
代码
合并请求
仓库
分支
提交
标签
仓库图
比较修订版本
代码片段
锁定的文件
构建
流水线
作业
流水线计划
测试用例
产物
部署
发布
Package registry
Container registry
模型注册表
运维
环境
Terraform 模块
监控
事件
服务台
分析
价值流分析
贡献者分析
CI/CD 分析
仓库分析
代码评审分析
议题分析
洞察
模型实验
效能分析
帮助
帮助
支持
GitLab 文档
比较 GitLab 各版本
社区论坛
为极狐GitLab 提交贡献
提交反馈
隐私声明
快捷键
?
新增功能
4
代码片段
群组
项目
显示更多面包屑
gitlab-cn
GitLab
提交
28b9c4cb
提交
28b9c4cb
编辑于
4 years ago
作者:
Nicole Schwartz
提交者:
Nick Gaskill
4 years ago
浏览文件
操作
下载
补丁
差异文件
Update interacting with vulns auto-remediation docs
上级
39290fed
No related branches found
No related tags found
无相关合并请求
变更
1
隐藏空白变更内容
行内
左右并排
显示
1 个更改的文件
doc/user/application_security/vulnerabilities/index.md
+3
-24
3 个添加, 24 个删除
doc/user/application_security/vulnerabilities/index.md
有
3 个添加
和
24 个删除
doc/user/application_security/vulnerabilities/index.md
+
3
−
24
浏览文件 @
28b9c4cb
...
...
@@ -23,7 +23,7 @@ several different ways:
-
[
Create issue
](
#creating-an-issue-for-a-vulnerability
)
- Create a new issue with the
title and description pre-populated with information from the vulnerability report.
By default, such issues are
[
confidential
](
../../project/issues/confidential_issues.md
)
.
-
[
Solution
](
#automatic-remediation-
solutions-
for-vulnerabilities
)
- For some vulnerabilities,
-
[
Solution
](
#automatic-remediation-for-vulnerabilities
)
- For some vulnerabilities,
a solution is provided for how to fix the vulnerability.
## Changing vulnerability status
...
...
@@ -47,28 +47,7 @@ project the vulnerability came from, and pre-populates it with useful informatio
the vulnerability report. After the issue is created, GitLab redirects you to the
issue page so you can edit, assign, or comment on the issue.
## Automatic remediation
solutions
for vulnerabilities
## Automatic remediation for vulnerabilities
You can fix some vulnerabilities by applying the solution that GitLab automatically
generates for you. GitLab supports the following scanners:
-
[
Dependency Scanning
](
../dependency_scanning/index.md
)
: Automatic Patch creation
is only available for Node.js projects managed with
`yarn`
.
-
[
Container Scanning
](
../container_scanning/index.md
)
.
When an automatic solution is available, the button in the header will show "Resolve with merge request":

Selecting the button will create a merge request with the automatic solution.
### Manually applying a suggested patch
To manually apply the patch that was generated by GitLab for a vulnerability, select the dropdown arrow on the "Resolve
with merge request" button, then select the "Download patch to resolve" option:

This will change the button text to "Download patch to resolve". Click on it to download the patch:

generates for you.
[
Read more about the automatic remediation for vulnerabilities feature
](
../index.md#solutions-for-vulnerabilities-auto-remediation
)
.
此差异已折叠。
点击以展开。
预览
0%
加载中
请重试
或
添加新附件
.
取消
You are about to add
0
people
to the discussion. Proceed with caution.
先完成此消息的编辑!
保存评论
取消
想要评论请
注册
或
登录