Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Supported GitLab Offerings

Info

This integration only supports Self-Managed instances. It does not currently support GitLab.com instances.

WhiteSource Mend for GitLab integrates into your native GitLab environment, scanning your repositories, as part of your WhiteSource Mend account. It is an integrated product within GitLab that detects all of your open-source components and displays all vulnerabilities for these components.

WhiteSource Mend for GitLab provides you with information on vulnerable and outdated open-source components and generates comprehensive up-to-date reports in the Issues tab and the security dashboard of the scanned project. In addition, you will be able to view the scanned projects in the WhiteSource Mend portal.

WhiteSource Mend for GitLab is part of WhiteSource Mend Developer Integrations and includes automated fix Merge Requests as well as Automated Dependency Updates (as part of WhiteSource Mend Renovate) with WhiteSource Mend Remediate.

Info

WhiteSource Mend for GitLab is a Docker-based integration, deployed on your local environment.

All open-source components are communicated using their sha1 hash value between your local environment and WhiteSourceMend.

Refer to the following sections: