Скачать или смотреть GitLab 17.7 - Expanded Code Flow View

For specific types of vulnerabilities, GitLab Advanced SAST provides code flow information. A vulnerability’s code flow is the path the data takes from the user input (source) to the vulnerable line of code (sink), through all assignments, manipulation, and sanitization.

With GitLab 17.7, the Advanced SAST code flow view is now available wherever vulnerabilities are shown, including the:
Vulnerability Report
Merge request security widget
Pipeline security report
Merge request changes view

OUTLINE
00:00 - Introduction
00:33 - Enabling GitLab Advanced SAST
00:53 - Viewing Code Flow in Merge Request (MR)
01:43 - Conclusion

USEFUL LINKS
Release Blog Post: https://about.gitlab.com/releases/202...
Documentation: https://docs.gitlab.com/ee/user/appli...
Feature Issue: https://gitlab.com/groups/gitlab-org/...

Thanks for watching! Be sure to subscribe and follow @awkwardferny and @gitlab on X (formerly twitter) and LinkedIn for similar content.