Skip to content

Move defaults into script for DAST API

Michael Eddington requested to merge 324734-defaults-to-script-dastapi into master

What does this MR do?

Move variable defaults into script section of DAST API job. This makes it easier to customize the job by end users, and removed the requirement that DAST API configuration variables must be set globally.

Some variables that are used by the job have been removed and are no longer available for use:

  • DAST_API_REPORT
  • DAST_API_REPORT_ASSET_PATH

Related to #324734 (closed)

CI Template

  • Changes are not backwards compatible. Changes made to latest template version.
  • No documentation updates are needed (docs still going through review)
  • No test changes are needed as the template logic has not changed
  • Test project:

Screenshots (strongly suggested)

No screenshot added as latest templates do not display in the UX.

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • [-] Label as security and @ mention @gitlab-com/gl-security/appsec
  • [-] The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • [-] Security reports checked/validated by a reviewer from the AppSec team
Edited by Michael Eddington

Merge request reports