GitLab Protect Stage, 12 Dec 2022

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: License Scan Policy Demo December 12

Description

No description was provided for this meeting.
If this is YOUR meeting, an easy way to fix this is to add a description to your video, wherever mtngs.io found it (probably YouTube).

A

So I'll be giving a quick walk through of the new license scan result policy UI. So this is behind the feature flag. um So you will not see this unless the feature flag is enabled the Mr uh merge request. Has these steps to enable that flag? So when we click, select polish or create policy, if you're familiar with the screen, what has changed is that we have this drop down, which will allow you to select between security scan, which will show what we had before for everything after this section.

A

This all behaves um like before, and the prior Mr that landed had verification steps, so that's already in master behind the feature flag. So what we're looking at here for this Mr? We actually add the contents for license scan and what we have for each field here. This is doing again based off the mods is that we allow for matching or accept, which is true false over here.

A

License type is actually a combination of a search drop down and multi-select, so we can type in search criteria here and you can select more than one you'll see here, because there are many selections, we've kind of shortened it to just the license count. This will update in real time. If you remove them you'll see the license is added and removed here on the right.

A

This one is a multi-select, so you can do select all which will show all license States newly select, newly detected or pre-existing, um and then this uh brand selection works the same way. It's actually the same exact component that is used in the security scan, so we'll see here that it will create a rule for license finding.

A

If we add additional rules, we can mix and match um with security scan again, which is existing functionality and we can add additional license scan rules, for example, if you wanted to that to match and this to um matronic to exclude certain licenses, we can then just uh specify that behavior and that's pretty much it.