Skip to content

Audit DAST site profile actions

Avielle Wolfe requested to merge 217872-audit-dast-site-profile-actions into master

What does this MR do?

This MR adds auditing to DAST site profile creation, deletion, and updates. The audit event messages do not include values for the request_headers and auth_password fields since they are secret.

Screenshots

This gif shows audit events for creating, updating, and deleting a DAST site profile:

dast_site_profile_audit_720

Issue

This is the second MR (of 3) for adding audit events for DAST on-demand scans. See #217872 (closed) for details

Docs

Docs for this feature will be added after the audit events for DAST on-demand scan profiles have been set up

Edited by Avielle Wolfe

Merge request reports