Skip to content
GitLab
菜单
为什么选择 GitLab
定价
联系销售
探索
为什么选择 GitLab
定价
联系销售
探索
登录
获取免费试用
主导航
搜索或转到…
项目
GitLab
管理
动态
成员
标记
计划
议题
议题看板
里程碑
迭代
需求
代码
合并请求
仓库
分支
提交
标签
仓库图
比较修订版本
代码片段
锁定的文件
构建
流水线
作业
流水线计划
测试用例
产物
部署
发布
Package registry
Container registry
模型注册表
运维
环境
Terraform 模块
监控
事件
服务台
分析
价值流分析
贡献者分析
CI/CD 分析
仓库分析
代码评审分析
议题分析
洞察
模型实验
效能分析
帮助
帮助
支持
GitLab 文档
比较 GitLab 各版本
社区论坛
为极狐GitLab 提交贡献
提交反馈
隐私声明
快捷键
?
新增功能
4
代码片段
群组
项目
显示更多面包屑
gitlab-cn
GitLab
提交
87b57ebe
提交
87b57ebe
编辑于
1 year ago
作者:
Russell Dickenson
提交者:
Lorena Ciutacu
1 year ago
浏览文件
操作
下载
补丁
差异文件
Remove outdated content from the SAST docs page
上级
10431006
No related branches found
No related tags found
无相关合并请求
变更
1
隐藏空白变更内容
行内
左右并排
显示
1 个更改的文件
doc/user/application_security/sast/index.md
+0
-22
0 个添加, 22 个删除
doc/user/application_security/sast/index.md
有
0 个添加
和
22 个删除
doc/user/application_security/sast/index.md
+
0
−
22
浏览文件 @
87b57ebe
...
...
@@ -6,8 +6,6 @@ info: To determine the technical writer assigned to the Stage/Group associated w
# Static Application Security Testing (SAST) **(FREE)**
> All open source (OSS) analyzers were moved from GitLab Ultimate to GitLab Free in GitLab 13.3.
NOTE:
The whitepaper
[
"A Seismic Shift in Application Security"
](
https://about.gitlab.com/resources/whitepaper-seismic-shift-application-security/
)
explains how 4 of the top 6 attacks were application based. Download it to learn how to protect your
...
...
@@ -27,31 +25,11 @@ For more details, see the [Summary of features per tier](#summary-of-features-pe

The results are sorted by the priority of the vulnerability:
<!-- vale gitlab.SubstitutionWarning = NO -->
1.
Critical
1.
High
1.
Medium
1.
Low
1.
Info
1.
Unknown
<!-- vale gitlab.SubstitutionWarning = YES -->
A pipeline consists of multiple jobs, including SAST and DAST scanning. If any job fails to finish
for any reason, the security dashboard does not show SAST scanner output. For example, if the SAST
job finishes but the DAST job fails, the security dashboard does not show SAST results. On failure,
the analyzer outputs an
[
exit code
](
../../../development/integrations/secure.md#exit-code
)
.
## Use cases
-
Your code has a potentially dangerous attribute in a class, or unsafe code
that can lead to unintended code execution.
-
Your application is vulnerable to cross-site scripting (XSS) attacks that can
be leveraged to unauthorized access to session data.
## Requirements
SAST runs in the
`test`
stage, which is available by default. If you redefine the stages in the
`.gitlab-ci.yml`
file, the
`test`
stage is required.
...
...
此差异已折叠。
点击以展开。
预览
0%
加载中
请重试
或
添加新附件
.
取消
You are about to add
0
people
to the discussion. Proceed with caution.
先完成此消息的编辑!
保存评论
取消
想要评论请
注册
或
登录