Skip to content

Enable On Demand DAST Scans in FIPS Mode

Arpit Gogia requested to merge 430212-enable-ods-fips into master

What does this MR do and why?

  • Enables on demand DAST Scans in FIPS mode using the Browser Based Analyzer
  • The Browser Based Analyzer for On Demand DAST Scans is currently behind the feature flag dast_ods_browser_based_scanner , hence On Demand Scans will be available in FIPS mode only when the feature flag is enabled

Related Issue: Enable On Demand DAST Scans in FIPS Mode (#430212 - closed)

Screenshots or screen recordings

Project Menu shows On Demand Scans menu item

image1.png

On Demand Badge

image 2.png

On Demand Scan CI Job fetching the FIPS image

image 3.png

Site Validation uses the FIPS image

image 4.png

How to set up and validate locally

  1. Set up GDK and enable FIPS mode (quick hack: hard code true in lib/gitlab/fips.rb
  2. Setup On Demand Scan through the project menu

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #430212 (closed)

Edited by Arpit Gogia

Merge request reports