Dependency Scanning

The GitLab Advisory Database, used in GitLab Ultimate Dependency Scanning and Container Scanning.

Contributions welcome!

Search the database at https://advisories.gitlab.com.

Analyzer that scans for application dependencies.

Dependency Scanning Analyzer based on Gemnasium.

EXPERIMENTAL/BETA: Dependency Scanning for supported projects

Project for testing GitLab Dependency Scanning features.

Go packages to implement analyzers

Test project with: Language: Javascript - Package Manager: Npm

Go package for implementing shared vulnerability structs for secure analyzers

Test project with: Language: Ruby - Package Manager: Bundler

Test project with: Language: Php - Package Manager: Composer

Test project with: Language: Python - Package Manager: Pip

Test project with: Language: Javascript - Package Manager: Yarn

Test project with: Language: Scala - Package Manager: Sbt

Test project with: Language: Java - Package Manager: Maven

Test project for Java Gradle

Test project with: Language: Python - Package Manager: Setuptools

Gemnasium Maven plugin for Dependency Scanning