Skip to content

Add vulnerability evidence to the DAST schema

Cameron Swords requested to merge add-evidence-to-vulnerability into master

The MR adds the vulnerability.evidence fields to the DAST schema. These fields include

  • summary, summary of the evidence that suggests it is a vulnerability,
  • request.headers/method/url, information about the vulnerable request, and
  • response.headers/reason_phrase/status_code, information about the vulnerable response.

This resolves issue gitlab-org/gitlab#37312 (closed).

Edited by Cameron Swords

Merge request reports