Skip to content

Add Breach and Attack Simulation to security configuration

What does this MR do and why?

Adds a new section to the security configuration page for setting up Breach and Attack Simulation.

BAS is an incubation project which augments existing GitLab security testing tools with attacker techniques and threat intelligence.

Linked MRs

This MR depends on the docs configuration help path/fragment added in !116831 (merged).

Screenshots or screen recordings

Screenshot_2023-04-06_at_04.34.55

Screenshot_2023-04-06_at_02.58.46

How to set up and validate locally

Available with Ultimate state:

  1. Visit the security configuration page of any project.
  2. Confirm the BAS feature is displayed as expected.

Can be enabled state:

  1. Register an Ultimate license.
  2. Visit the security configuration page of any project.
  3. Confirm the BAS feature is displayed as expected with the additional DAST configuration guide button.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Erran Carey

Merge request reports