Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
G
gitlab-ce
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
1
Merge Requests
1
Analytics
Analytics
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
nexedi
gitlab-ce
Commits
8d00ab6f
Commit
8d00ab6f
authored
Apr 18, 2022
by
Michael Eddington
Committed by
Russell Dickenson
Apr 18, 2022
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Document _IMAGE_SUFFIX variable for API Security
parent
7f11b5b8
Changes
2
Hide whitespace changes
Inline
Side-by-side
Showing
2 changed files
with
7 additions
and
4 deletions
+7
-4
doc/user/application_security/api_fuzzing/index.md
doc/user/application_security/api_fuzzing/index.md
+4
-3
doc/user/application_security/dast_api/index.md
doc/user/application_security/dast_api/index.md
+3
-1
No files found.
doc/user/application_security/api_fuzzing/index.md
View file @
8d00ab6f
...
...
@@ -586,7 +586,8 @@ profile increases as the number of tests increases.
| CI/CD variable | Description |
|-------------------------------------------------------------|-------------|
|
`SECURE_ANALYZERS_PREFIX`
| Specify the Docker registry base address from which to download the analyzer. |
|
`FUZZAPI_VERSION`
| Specify API Fuzzing container version. Defaults to
`latest`
. |
|
`FUZZAPI_VERSION`
| Specify API Fuzzing container version. Defaults to
`1`
. |
|
`FUZZAPI_IMAGE_SUFFIX`
| Specify a container image suffix. Defaults to none. |
|
`FUZZAPI_TARGET_URL`
| Base URL of API testing target. |
|
`FUZZAPI_CONFIG`
|
[
Deprecated
](
https://gitlab.com/gitlab-org/gitlab/-/issues/276395
)
in GitLab 13.12, replaced with default
`.gitlab/gitlab-api-fuzzing-config.yml`
. API Fuzzing configuration file. |
|
[
`FUZZAPI_PROFILE`
](
#api-fuzzing-profiles
)
| Configuration profile to use during testing. Defaults to
`Quick-10`
. |
...
...
@@ -920,7 +921,7 @@ def get_auth_response():
# In our example, access token is retrieved from a given endpoint
try
:
# Performs a http request, response sample:
# Performs a http request, response sample:
# { "Token" : "b5638ae7-6e77-4585-b035-7d9de2e3f6b3" }
response
=
get_auth_response
()
...
...
@@ -950,7 +951,7 @@ except Exception as e:
logging
.
error
(
f'Error, unknown error while retrieving access token. Error message:
{
e
}
'
)
raise
# computes object that holds overrides file content.
# computes object that holds overrides file content.
# It uses data fetched from request
overrides_data
=
{
"headers"
:
{
...
...
doc/user/application_security/dast_api/index.md
View file @
8d00ab6f
...
...
@@ -537,7 +537,9 @@ can be added, removed, and modified by creating a custom configuration.
| CI/CD variable | Description |
|------------------------------------------------------|--------------------|
|
`DAST_API_VERSION`
| Specify DAST API container version. Defaults to
`latest`
. |
|
`SECURE_ANALYZERS_PREFIX`
| Specify the Docker registry base address from which to download the analyzer. |
|
`DAST_API_VERSION`
| Specify DAST API container version. Defaults to
`1`
. |
|
`DAST_API_IMAGE_SUFFIX`
| Specify a container image suffix. Defaults to none. |
|
`DAST_API_TARGET_URL`
| Base URL of API testing target. |
|
[
`DAST_API_CONFIG`
](
#configuration-files
)
| DAST API configuration file. Defaults to
`.gitlab-dast-api.yml`
. |
|
[
`DAST_API_PROFILE`
](
#configuration-files
)
| Configuration profile to use during testing. Defaults to
`Quick`
. |
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment