Skip to content

Add script for performing DAST site validation

What?

this merge request implements a new script that will run inside a docker container on a runner to validate dast sites for on-demand scans.

Why?

currently site validation takes place in a sidekiq job, which isn't always guaranteed to be on the same network as the target application. this prevents customers from performing active scans against targets that aren't accessible from their gitlab instance. moving validation to the runner allows these to be more easily brought into alignment.

Notes

Related Issue(s)

Related Merge Request(s)

Edited by Philip Cunningham

Merge request reports