GitLab Dependency Scanning

• With GitLab 12.7, you can now install a custom version of pip in Dependency Scanning by using the DS_PIP_VERSION variable. When this is set, it will be passed down to the Dependency Scanning analyzers.

See also

• GitLab: Install GitLab, Upgrade GitLab Gitlab runner (changelog), gitlab.rb, .gitlab/, gitlab-ci.yml, gitlab-ctl, gitlab-rake, gitlab-backup, gitlab-rails, GitLab editions, GitLab Security Dashboards, GitLab environments, GitLab environment variables, Auto DevOps, permissions, GitLab Pages, gitlab-rails, GitLab scheduled pipelines, GitLab logs, GitLab changelog , GitLab Release CLI, GitLab Omnibus, GitLab Advanced Search, GitLab container registry, GitLab infrastructure registry
• Software Composition Analysis (SCA): Flexera, FOSSA, GitLab Ultimate, JFrog Xray, Snyk, Sonatype, Synopsys: Black Duck, Veracode, WhiteHat Security, WhiteSource, Bill of Materials (BOM), Semgrep, Clair