Move Dependency Scanning parsing and data storage to CE

Problem to solve

We are considering to move Dependency Scanning to gitlab-ce and make it opensource. See discussion in &440 (closed) for more information and timelines.

This task requires that all the parsing and the data storage are available in the gitlab-ce codebase.

Further details

This is independent from the data visualization (e.g., security reports in the MR widget).

Proposal

Port relevant code from gitlab-ee to gitlab-ce, removing any license check for it.

To access Gemnasium data, we can require a free registration to obtain an access key to use to request a scan.

Registration would require that users keep Usage Ping enabled. This can be done in a transparent way for users, so they just need to register once and then they can use the features. With this approach, we can get more information about how customers are using our features and where we should focus to create more Ultimate value.

The registration token is discussed in &532 (closed).

Edited Nov 08, 2018 by Fabio Busatto
Assignee Loading
Time tracking Loading