Sign inSign up

tabll/gemnasium

By tabll

•Updated over 5 years ago

依赖项扫描,检测依赖项的已知漏洞

Image
1

3.8K

tabll/gemnasium repository overview

⁠Gemnasium

TAG 2 => Gemnasium analyzer v2.19.0

用于项目中依赖项扫描
由于 registry.gitlab.com 间歇性无法访问,所以复制一份出来

Gemnasium 在 2018 年 1 月被 GitLab 收购 .自 2018 年 5 月 15 日起,Gemnasium 提供的服务不再可用. Gemnasium 背后的团队已加入 GitLab,成为新的安全产品团队

⁠使用方式

在 .gitlab-ci.yml 文件中:

dependency_scan:
  stage: security
  image: tabll/gemnasium:2
  variables:
    DS_EXCLUDED_PATHS: "spec, test, tests, tmp"
    SECURE_LOG_LEVEL: "info"
    GEMNASIUM_DB_REMOTE_URL: "https://github.com/Tabll/gemnasium-db.git"
  tags:
    - quality
  allow_failure: true
  script:
    - /analyzer run
  artifacts:
    reports:
      dependency_scanning: gl-dependency-scanning-report.json

源:registry.gitlab.com/gitlab-org/security-products/analyzers/gemnasium:2

⁠运行效果

Tag summary

Content type

Image

Digest

Size

101.1 MB

Last updated

almost 6 years ago

docker pull tabll/gemnasium