You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: appsec-portal/scanners/scanner-description/code-scanners/gemnasium.md
+21Lines changed: 21 additions & 0 deletions
Original file line number
Diff line number
Diff line change
@@ -4,4 +4,25 @@ description: Dependency Scanning analyzer that uses the GitLab Advisory Database
4
4
5
5
# Gemnasium
6
6
7
+
**AppSec Portal Importer Name**: GitLab Gemnasium
8
+
7
9
[GitLab Gemnasium](https://gitlab.com/gitlab-org/security-products/analyzers/gemnasium) is a tool for automatically detecting vulnerabilities in project dependencies. It scans the used **libraries** and **components** to identify known vulnerabilities, providing developers with information about the need to update or replace dependencies to mitigate security risks.
In this command, the following parameters are used:
20
+
21
+
1.`-X POST`: specifies the HTTP method to be used (in this case, POST)
22
+
2.`-H "Authorization: Token <authorization_token>"`: specifies the [**authorization token**](https://docs.whitespots.io/appsec-portal/scanners/importing-reports-from-scanners-to-appsec-portal#authorization-token) obtained from AppSec Portal.
23
+
3.`-H "Content-Type: multipart/form-data"`: specifies the content type of the request.
24
+
4.`-F "file=@<report_file_path>"`: specifies the **path to the report file** generated by the scanner.
25
+
5.`-F "product_name=<product_name>"`: specifies the **name of the product** being scanned.
26
+
6.`-F "product_type=<product_type>"`: specifies the **type of the product** being scanned.
27
+
7.`-F "scanner_name=<scanner_name>"`: specifies the **name of the scanner** used to generate the report (GitLab Gemnasium)
28
+
8.`-F "branch=<branch_name>"`: (_optional_) specifies the name of the branch in the source code repository (if applicable) This parameter is particularly useful when you want to associate the scan results with a specific branch in your repository. If not provided, the scan will be associated with the default branch
0 commit comments