GitLab Ultimate

How to integrate into the GitLab Security Dashboard

As a GitLab Ultimate subscriber you have access to the Security Dashboards and Security Center features. You can then employ Meterian as your main security scanner to view trends about vulnerabilities detected in your groups and projects.

To get started, set up Meterian in your GitLab CI/CD pipeline to perform scans and generate and upload results directly to GitLab

    name: meterian/cli:latest
    entrypoint: [""]
  allow_failure: true 
  stage: test
    - curl -o /tmp/meterian-cli.jar -O -J -L -s
    - java -jar /tmp/meterian-cli.jar --report-gitlab=gitlab_report.json || true
      dependency_scanning: gitlab_report.json

To ensure the results of the scan are uploaded the overall pipeline must succeed. This is why the scan job shown above has the attribute allow_failure set to true and has the exit code of the client invocation overridden with the expression || true. This will render it a non blocking job.

The client is instructed to generate GitLab-compatible results in the form of a JSON report (--report-gitlab=gitlab_report.json). The report is later uploaded to GitLab for browsing in the Security Dashboards

Last updated