Skip to content

Get the scanned resources for a Pipeline as a CSV

Craig Smith requested to merge scanned_resources_csv_endpoint_223673 into master

What does this MR do?

To allow users to see all the URLs scanned by DAST, the MR provides an endpoint to that they might download the full list of URLs in CSV format.

An example CSV file would be:

Method,Scheme,Host,Port,Path,Query String
GET,http,railsgoat,3001,"",
GET,http,railsgoat,3001,/,
GET,http,railsgoat,3001,/assets/application.debug-999ac41d3f4b6736d79b1c8d363b4e2e1e2263ef2217c0a7b98321bd7c78e2b3.js,
GET,http,railsgoat,3001,/assets/application.debug-c6dcdc4b7eb60f590d2db194541c994d0e00b6264df5ccaf7a41926b9954613c.css,
GET,http,railsgoat,3001,/assets/validation.debug-732d56f958eff9a7b1494ef48972d7c251561dc77442c07767dbbb5a4750969c.js,
GET,http,railsgoat,3001,/forgot_password,

This MR relates to #223673 (closed)

Screenshots

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team
Edited by Craig Smith

Merge request reports