Skip to content
代码片段 群组 项目
未验证 提交 3c62812e 编辑于 作者: Lysanne Pinto's avatar Lysanne Pinto 提交者: GitLab
浏览文件

Merge branch 'rd/cvs-remove-unwanted-section' into 'master'

Remove unnecessary section - Supported languages and package managers

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/147633



Merged-by: default avatarLysanne Pinto <lpinto@gitlab.com>
Approved-by: default avatarOscar Tovar <otovar@gitlab.com>
Approved-by: default avatarLysanne Pinto <lpinto@gitlab.com>
Co-authored-by: default avatarRussell Dickenson <rdickenson@gitlab.com>
No related branches found
No related tags found
无相关合并请求
...@@ -22,9 +22,9 @@ Projects that depend on the affected components have new vulnerabilities automat ...@@ -22,9 +22,9 @@ Projects that depend on the affected components have new vulnerabilities automat
Continuous Vulnerability Scanning detects vulnerabilities in the latest CycloneDX SBOM reports for the default branch. Continuous Vulnerability Scanning detects vulnerabilities in the latest CycloneDX SBOM reports for the default branch.
[Dependency Scanning](../dependency_scanning/index.md) and [Container Scanning](../container_scanning/index.md) are used to generate these reports. [Dependency Scanning](../dependency_scanning/index.md) and [Container Scanning](../container_scanning/index.md) are used to generate these reports.
## Supported component types ## Supported package types
Components with the following [PURL types](https://github.com/package-url/purl-spec/blob/346589846130317464b677bc4eab30bf5040183a/PURL-TYPES.rst) are supported: Components with the following [package URL types](https://github.com/package-url/purl-spec/blob/346589846130317464b677bc4eab30bf5040183a/PURL-TYPES.rst) are supported:
- `composer` - `composer`
- `conan` - `conan`
...@@ -36,7 +36,10 @@ Components with the following [PURL types](https://github.com/package-url/purl-s ...@@ -36,7 +36,10 @@ Components with the following [PURL types](https://github.com/package-url/purl-s
- `nuget` - `nuget`
- `pypi` - `pypi`
Work to support `apk` and `rpm` PURL types is tracked in [issue 428703](https://gitlab.com/gitlab-org/gitlab/-/issues/428703). Work to support `apk` and `rpm` package URL types is tracked in [issue 428703](https://gitlab.com/gitlab-org/gitlab/-/issues/428703).
Go pseudo versions are not supported. A project dependency that references a Go pseudo version is
never considered as affected because this might result in false negatives.
## Configuration ## Configuration
...@@ -51,13 +54,6 @@ For self-managed GitLab instances in an environment with limited, restricted, or ...@@ -51,13 +54,6 @@ For self-managed GitLab instances in an environment with limited, restricted, or
some adjustments are required to successfully scan CycloneDX reports for vulnerabilities. some adjustments are required to successfully scan CycloneDX reports for vulnerabilities.
For more information, see the offline [quick start guide](../../../topics/offline/quick_start_guide.md#enabling-the-package-metadata-database). For more information, see the offline [quick start guide](../../../topics/offline/quick_start_guide.md#enabling-the-package-metadata-database).
## Supported languages and package managers
The supported files and versions are the ones supported by
[Dependency Scanning](../dependency_scanning/index.md#supported-languages-and-package-managers).
Go pseudo versions are not supported. A project dependency that references a Go pseudo version is never considered as affected. This might result in false negatives.
## Checking new vulnerabilities ## Checking new vulnerabilities
New vulnerabilities detected by Continuous Vulnerability Scanning are visible on the [Vulnerability Report](../vulnerability_report/index.md). New vulnerabilities detected by Continuous Vulnerability Scanning are visible on the [Vulnerability Report](../vulnerability_report/index.md).
......
0% 加载中 .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册