Скачать или смотреть GitLab 17.7 - Vulnerability Auto Resolve

In GitLab 17.7, we introduced the Vulnerability Management policy for users who want vulnerabilities automatically set to Resolved when no longer detected by automated scanning.

Simply configure a new policy with the new Auto-resolve option and apply it to the appropriate project(s). You can even configure the policy to only Auto-resolve vulnerabilities of a certain severity or from specific security scanners.
Once in place, the next time the project’s default branch is scanned, any existing vulnerabilities that are no longer found will be marked as Resolved.

The action updates the vulnerability record with an activity note, timestamp when the action occurred, and the pipeline the vulnerability was determined to be removed in.

OUTLINE
00:00 - Introduction
00:28 - Creating a Vulnerability Management Policy
02:10 - Looking at detected vulnerabilities
02:51 - Remediating a vulnerability
03:41 - Viewing an auto-resolved vulnerability
04:24 - Conclusion

USEFUL LINKS
Release Blog Post: https://about.gitlab.com/releases/202...
Documentation: https://docs.gitlab.com/ee/user/appli...
Feature Epic: https://gitlab.com/groups/gitlab-org/...

Thanks for watching! Be sure to subscribe and follow @awkwardferny and @gitlab on X (formerly twitter) and LinkedIn for similar content.