diff --git a/data/deprecations/16-9-deprecate-grype-container-scanning.yml b/data/deprecations/16-9-deprecate-grype-container-scanning.yml new file mode 100644 index 0000000000000000000000000000000000000000..6cb61be7009549cb97e35d030e3449d6d9939ba8 --- /dev/null +++ b/data/deprecations/16-9-deprecate-grype-container-scanning.yml @@ -0,0 +1,16 @@ +- title: "Deprecate Grype scanner for Container Scanning" + removal_milestone: "17.0" + announcement_milestone: "16.9" + breaking_change: true + reporter: thiagocsf + stage: secure + issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/439164 + body: | # (required) Don't change this line. + Support for the Grype scanner in the GitLab Container Scanning analyzer is deprecated in + GitLab 16.9 and will be removed in GitLab 17.0. + + You should use the default setting for `CS_ANALYZER_IMAGE`, which uses the Trivy + scanner. + + To continue to use Grype, see the [Security scanner integration documentation](https://docs.gitlab.com/ee/development/integrations/secure.html) to learn how to + create your own integration with GitLab. diff --git a/doc/update/deprecations.md b/doc/update/deprecations.md index dbb3d07931b2d943a02ce72a06c63167253b3028..5445417064314f080c202058e343744b2429cd47 100644 --- a/doc/update/deprecations.md +++ b/doc/update/deprecations.md @@ -552,6 +552,27 @@ The GraphQL fields, `isTemporaryStorageIncreaseEnabled` and `temporaryStorageInc <div class="deprecation breaking-change" data-milestone="17.0"> +### Deprecate Grype scanner for Container Scanning + +<div class="deprecation-notes"> +- Announced in GitLab <span class="milestone">16.9</span> +- Removal in GitLab <span class="milestone">17.0</span> ([breaking change](https://docs.gitlab.com/ee/update/terminology.html#breaking-change)) +- To discuss this change or learn more, see the [deprecation issue](https://gitlab.com/gitlab-org/gitlab/-/issues/439164). +</div> + +Support for the Grype scanner in the GitLab Container Scanning analyzer is deprecated in +GitLab 16.9 and will be removed in GitLab 17.0. + +You should use the default setting for `CS_ANALYZER_IMAGE`, which uses the Trivy +scanner. + +To continue to use Grype, see the [Security scanner integration documentation](https://docs.gitlab.com/ee/development/integrations/secure.html) to learn how to +create your own integration with GitLab. + +</div> + +<div class="deprecation breaking-change" data-milestone="17.0"> + ### Deprecate License Scanning CI templates <div class="deprecation-notes">