Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The security report displays all the vulnerabilities that were found in descending order according to the severity and CVSS score. The following information is displayed for each vulnerability:

  • Severity: Overall CVE: A link to the related CVE page for the vulnerability. Displayed in a collapsible format (click the arrow to expand/collapse for more information regarding the vulnerability).

  • Severity: Overall score of the severity (High, Medium or Low).

  • CVSS Score 

  • CVE: A link to the related CVE page for the vulnerability.

  • GitLab Score

  • Vulnerable Library

  • Suggested Fix 

  • Issue: A link to the WhiteSource issue that was generated for the vulnerability.

...

All head commits that fail the scan due to the security check detecting vulnerabilities or due to an error that occurred during the scan will display a failed commit status.
The following screenshots display screenshot displays a failure indicator for a head commit and a security report containing several security vulnerabilities.

...