gitlab-org/security-products/dast v3.0.71

on GitLab

Changes

• Append the -bas suffix to the scanner ID when DAST_FF_ENABLE_BAS_ATTACKS is enabled (!751)
• Enable breach attack simulation attacks with feature flag DAST_FF_ENABLE_BAS_ATTACKS (!746)
• Upgrade browserker to version 0.0.148 (!749)
  • Add active check finding summary as vulnerabilities[].location.param so findings are not de-duplicated browserker!1083
  • Release browserker FIPS compliant Docker image browserker!1080 browserker!1073
  • Update dast-chromium to 22.04-108.0.5359.94-1-20230321081952 browserker!1080
  • Ensure active check findings are not deduplicated browserker!1082
  • Attack IDs can be specified in OnlyIncludeChecks browserker!1088
• Upgrade browserker to version 0.0.149 (!752)
  • Move fips image from ubi to ubi-minimal browserker!1092
• Upgrade browserker to version 0.0.150 (!755)
  • Enable FIPS mode on the fips image browserker!1093
• Revert removal of DAST_ZAP_CLI_OPTIONS and DAST_ZAP_LOG_CONFIGURATION environment variables in DAST version 4 (!764)
• Upgrade browserker to version 0.0.151 (!768)
  • Upgrade dast-chromium to version 22.04-112.0.5615.138-1-20230502163251 browserker!1110
  • Upgrade FIPS dast-chromium to version 8.7-112.0.5615.165-1-20230502163251 browserker!1110
  • Log version of Chromium used browserker!1109
  • Fix concurrency issues when using the global logger browserker!1107
  • Use nosemgrep code comments for suppressing false positive SAST findings browserker!1103
  • Hide Squid proxy startup warnings browserker!1100
  • Display banner and if FIPS has been enabled in FIPS image browserker!1101
  • Optimize clearing of login fields browserker!1099
  • Remove requirement for selectors to have a type from version 1.0.0 browserker!1105
• Upgrade ZAP add-on Linux WebDrivers to 54 (!768)
• Upgrade ChromeDriver to version 112.0.5615.49 (!768)

Docker Images

• registry.gitlab.com/security-products/dast:3.0.71