API Security and DAST API Documentation Updates

To complete the migration of customers from the API scanner that was part of ZAP to using the API Security tool a few documentation updates need to be made.

• Remove API Scan content from DAST page(https://docs.gitlab.com/ee/user/application_security/dast/#api-scan), and include a note that says API Scan configuration is found here https://docs.gitlab.com/ee/user/application_security/dast_api/.

• Remove CI Variables from the DAST page that are for API Scans only.

• Publish deprecation notice for API scanning using the DAST.gitlab-ci.yml. Include in the deprecation notice, migration steps, including, that as of 15.X, using the DAST.gitlab-ci.yml for API scans is deprecated. Users should use the DAST-API.gitlab-ci.yml template.

  • Set your environment variable to use DAST_API_OPENAPI: instead of DAST_API_SPECIFICATION