Skip to content
Snippets Groups Projects

Adherence check - Container Scanning

    • Open Issue created by Nate Rosandich @nrosandich

    Problem to solve

    To adhere to regulatory standards and to provide evidence of compliance, I need to be able to generate a report for auditors detailing the last date/time each of my repositories were scanned by each security scanner. I would leverage this data to also action against projects that are out of compliance to bring them into compliance and ensure that scanners are properly enabled/enforced to run.

    Proposal

    Add an adherence check for the "GitLab Standard" that checks that Container Scanning is enabled on the project.

    Container Scanning can be enabled to configure Container Scanning for the current project. For more details, https://docs.gitlab.com/ee/user/application_security/container_scanning/index.html#enable-container-scanning-through-an-automatic-merge-request

    Implementation plan

    Edited by Nate Rosandich

    Designs

      Child items 0

      2. No child items are currently assigned. Use child items to break down this issue into smaller parts.

      Activity

      Please register or sign in to reply