Merge branch 'philipcunningham-bump-dast-in-offline-environments' into 'master'

Update DAST version for offline environments

See merge request gitlab-org/gitlab!65603

ee/spec/lib/gitlab/ci/templates/secure_binaries_ci_yaml_spec.rb

+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe 'Secure-Binaries.gitlab-ci.yml' do
+  subject(:template) { Gitlab::Template::GitlabCiYmlTemplate.find('Secure-Binaries') }
+
+  specify { expect(template).not_to be_nil }
+
+  describe 'the created pipeline' do
+    let_it_be(:project) { create(:project, :custom_repo, files: { 'README.txt' => '' }) }
+
+    let(:default_branch) { project.default_branch_or_main }
+    let(:pipeline_branch) { default_branch }
+    let(:user) { project.owner }
+    let(:service) { Ci::CreatePipelineService.new(project, user, ref: pipeline_branch ) }
+    let(:pipeline) { service.execute!(:push) }
+    let(:build_names) { pipeline.builds.pluck(:name) }
+
+    before do
+      stub_ci_pipeline_yaml_file(template.content)
+
+      allow_next_instance_of(Ci::BuildScheduleWorker) do |worker|
+        allow(worker).to receive(:perform).and_return(true)
+      end
+
+      allow(project).to receive(:default_branch).and_return(default_branch)
+    end
+
+    describe 'dast' do
+      let_it_be(:build_name) { 'dast' }
+
+      it 'creates a dast job' do
+        expect(build_names).to include(build_name)
+      end
+
+      it 'sets SECURE_BINARIES_ANALYZER_VERSION to the correct version' do
+        build = pipeline.builds.find_by(name: build_name)
+
+        expect(build.variables.to_hash).to include('SECURE_BINARIES_ANALYZER_VERSION' => '2')
+      end
+    end
+  end
+end

lib/gitlab/ci/templates/Security/Secure-Binaries.gitlab-ci.yml

@@ -224,7 +224,7 @@ license-finder:
 dast:
   extends: .download_images
   variables:
-    SECURE_BINARIES_ANALYZER_VERSION: "1"
+    SECURE_BINARIES_ANALYZER_VERSION: "2"
   only:
     variables:
       - $SECURE_BINARIES_DOWNLOAD_IMAGES == "true" &&