diff options
author | GitLab Bot <gitlab-bot@gitlab.com> | 2020-03-13 12:09:23 +0300 |
---|---|---|
committer | GitLab Bot <gitlab-bot@gitlab.com> | 2020-03-13 12:09:23 +0300 |
commit | 4cb5e5011abfe8d50ac3a7ebd0018c563c6d7af4 (patch) | |
tree | 82591df15758864325897043f855b4e4dfcb6a56 /doc/user | |
parent | 0301a0cad0063d76b1607358dc6c711ea043fdda (diff) |
Add latest changes from gitlab-org/gitlab@master
Diffstat (limited to 'doc/user')
-rw-r--r-- | doc/user/analytics/value_stream_analytics.md | 10 | ||||
-rw-r--r-- | doc/user/application_security/index.md | 29 | ||||
-rw-r--r-- | doc/user/compliance/license_compliance/img/policies_maintainer_add_v12_9.png | bin | 0 -> 22423 bytes | |||
-rw-r--r-- | doc/user/compliance/license_compliance/img/policies_maintainer_edit_v12_9.png | bin | 0 -> 35281 bytes | |||
-rw-r--r-- | doc/user/compliance/license_compliance/img/policies_v12_9.png | bin | 0 -> 66698 bytes | |||
-rw-r--r-- | doc/user/compliance/license_compliance/index.md | 18 | ||||
-rw-r--r-- | doc/user/gitlab_com/index.md | 11 | ||||
-rw-r--r-- | doc/user/project/integrations/prometheus.md | 2 | ||||
-rw-r--r-- | doc/user/project/issues/design_management.md | 15 | ||||
-rw-r--r-- | doc/user/project/issues/img/design_drag_and_drop_uploads_v12_9.png | bin | 0 -> 402118 bytes | |||
-rw-r--r-- | doc/user/project/merge_requests/code_quality.md | 2 | ||||
-rw-r--r-- | doc/user/project/releases/img/release_with_milestone_v12_9.png | bin | 0 -> 27783 bytes | |||
-rw-r--r-- | doc/user/project/releases/img/releases_v12_9.png | bin | 0 -> 51974 bytes | |||
-rw-r--r-- | doc/user/project/releases/index.md | 9 |
14 files changed, 73 insertions, 23 deletions
diff --git a/doc/user/analytics/value_stream_analytics.md b/doc/user/analytics/value_stream_analytics.md index 71863b8b643..6bc629427aa 100644 --- a/doc/user/analytics/value_stream_analytics.md +++ b/doc/user/analytics/value_stream_analytics.md @@ -133,12 +133,12 @@ environments is configured. From the above example you can conclude the time it took each stage to complete as long as their total time: -- **Issue**: 2h (11:00 - 09:00) -- **Plan**: 1h (12:00 - 11:00) -- **Code**: 2h (14:00 - 12:00) -- **Test**: 5min +- **Issue**: 2h (11:00 - 09:00) +- **Plan**: 1h (12:00 - 11:00) +- **Code**: 2h (14:00 - 12:00) +- **Test**: 5min - **Review**: 5h (19:00 - 14:00) -- **Staging**: 30min (19:30 - 19:00) +- **Staging**: 30min (19:30 - 19:00) - **Total**: Since this stage measures the sum of median time of all previous stages, we cannot calculate it if we don't know the status of the stages before. In case this is the very first cycle that is run in the project, diff --git a/doc/user/application_security/index.md b/doc/user/application_security/index.md index 4382c69a9ac..da9cecf110c 100644 --- a/doc/user/application_security/index.md +++ b/doc/user/application_security/index.md @@ -13,6 +13,35 @@ information provided, you can immediately begin risk analysis and remediation. For an overview of application security with GitLab, see [Security Deep Dive](https://www.youtube.com/watch?v=k4vEJnGYy84). +## Quick start + +Get started quickly with Dependency Scanning, License Scanning, and Static Application Security +Testing (SAST) by adding the following to your `.gitlab-ci.yml`: + +```yaml +include: + - template: Dependency-Scanning.gitlab-ci.yml + - template: License-Scanning.gitlab-ci.yml + - template: SAST.gitlab-ci.yml +``` + +To add Dynamic Application Security Testing (DAST) scanning, add the following to your +`.gitlab-ci.yml` and replace `https://staging.example.com` with a staging server's web address: + +```yaml +include: + - template: DAST.gitlab-ci.yml + +variables: + DAST_WEBSITE: https://staging.example.com +``` + +To ensure the DAST scanner runs *after* deploying the application to the staging server, review the [DAST full documentation](dast/index.md). + +To add Container Scanning, follow the steps listed in the [Container Scanning documentation](container_scanning/index.md#requirements). + +To further configure any of the other scanners, refer to each scanner's documentation. + ## Security scanning tools GitLab uses the following tools to scan and report known vulnerabilities found in your project. diff --git a/doc/user/compliance/license_compliance/img/policies_maintainer_add_v12_9.png b/doc/user/compliance/license_compliance/img/policies_maintainer_add_v12_9.png Binary files differnew file mode 100644 index 00000000000..6dc7d3a0924 --- /dev/null +++ b/doc/user/compliance/license_compliance/img/policies_maintainer_add_v12_9.png diff --git a/doc/user/compliance/license_compliance/img/policies_maintainer_edit_v12_9.png b/doc/user/compliance/license_compliance/img/policies_maintainer_edit_v12_9.png Binary files differnew file mode 100644 index 00000000000..31abbcf2d44 --- /dev/null +++ b/doc/user/compliance/license_compliance/img/policies_maintainer_edit_v12_9.png diff --git a/doc/user/compliance/license_compliance/img/policies_v12_9.png b/doc/user/compliance/license_compliance/img/policies_v12_9.png Binary files differnew file mode 100644 index 00000000000..6c6247320dc --- /dev/null +++ b/doc/user/compliance/license_compliance/img/policies_v12_9.png diff --git a/doc/user/compliance/license_compliance/index.md b/doc/user/compliance/license_compliance/index.md index 03a7ffd195a..2679dc85f42 100644 --- a/doc/user/compliance/license_compliance/index.md +++ b/doc/user/compliance/license_compliance/index.md @@ -50,7 +50,7 @@ The following languages and package managers are supported. | Language | Package managers | Scan Tool | |------------|-------------------------------------------------------------------|----------------------------------------------------------| | JavaScript | [Bower](https://bower.io/), [npm](https://www.npmjs.com/), [yarn](https://yarnpkg.com/) ([experimental support](https://github.com/pivotal/LicenseFinder#experimental-project-types)) |[License Finder](https://github.com/pivotal/LicenseFinder)| -| Go | [Godep](https://github.com/tools/godep), go get ([experimental support](https://github.com/pivotal/LicenseFinder#experimental-project-types)), gvt ([experimental support](https://github.com/pivotal/LicenseFinder#experimental-project-types)), glide ([experimental support](https://github.com/pivotal/LicenseFinder#experimental-project-types)), dep ([experimental support](https://github.com/pivotal/LicenseFinder#experimental-project-types)), trash ([experimental support](https://github.com/pivotal/LicenseFinder#experimental-project-types)) and govendor ([experimental support](https://github.com/pivotal/LicenseFinder#experimental-project-types)), [go mod](https://github.com/golang/go/wiki/Modules) ([experimental support](https://github.com/pivotal/LicenseFinder#experimental-project-types)) |[License Finder](https://github.com/pivotal/LicenseFinder)| +| Go | [Godep](https://github.com/tools/godep), go get ([experimental support](https://github.com/pivotal/LicenseFinder#experimental-project-types)), gvt ([experimental support](https://github.com/pivotal/LicenseFinder#experimental-project-types)), glide ([experimental support](https://github.com/pivotal/LicenseFinder#experimental-project-types)), dep ([experimental support](https://github.com/pivotal/LicenseFinder#experimental-project-types)), trash ([experimental support](https://github.com/pivotal/LicenseFinder#experimental-project-types)) and govendor ([experimental support](https://github.com/pivotal/LicenseFinder#experimental-project-types)), [go mod](https://github.com/golang/go/wiki/Modules) ([experimental support](https://github.com/pivotal/LicenseFinder#experimental-project-types)) |[License Finder](https://github.com/pivotal/LicenseFinder)| | Java | [Gradle](https://gradle.org/), [Maven](https://maven.apache.org/) |[License Finder](https://github.com/pivotal/LicenseFinder)| | .NET | [Nuget](https://www.nuget.org/) (.NET Framework is supported via the [mono project](https://www.mono-project.com/). Windows specific dependencies are not supported at this time.) |[License Finder](https://github.com/pivotal/LicenseFinder)| | Python | [pip](https://pip.pypa.io/en/stable/) |[License Finder](https://github.com/pivotal/LicenseFinder)| @@ -324,3 +324,19 @@ in your project's sidebar, and you'll see the licenses displayed, where: - **Component:** The components which have this license. ![License List](img/license_list_v12_6.png) + +## Policies + +> [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/22465) in [GitLab Ultimate](https://about.gitlab.com/pricing/) 12.9. + +The **Policies** tab allows you to see your project's software license policies +and the associated classifications for each. + +Policies can be configured by maintainers of the project. + +![Edit Policy](img/policies_maintainer_edit_v12_9.png) +![Add Policy](img/policies_maintainer_add_v12_9.png) + +Developers of the project can view the policies configured in a project. + +![View Policies](img/policies_v12_9.png) diff --git a/doc/user/gitlab_com/index.md b/doc/user/gitlab_com/index.md index bb43cb9ed4a..8c6da131c6d 100644 --- a/doc/user/gitlab_com/index.md +++ b/doc/user/gitlab_com/index.md @@ -74,7 +74,7 @@ Below are the current settings regarding [GitLab CI/CD](../../ci/README.md). | ----------- | ----------------- | ------------- | | Artifacts maximum size (uncompressed) | 1G | 100M | | Artifacts [expiry time](../../ci/yaml/README.md#artifactsexpire_in) | kept forever | deleted after 30 days unless otherwise specified | -| Scheduled Pipeline Cron | `*/5 * * * *` | `*/19 * * * *` | +| Scheduled Pipeline Cron | `*/5 * * * *` | `19 * * * *` | | [Max jobs in active pipelines](../../administration/instance_limits.md#number-of-jobs-in-active-pipelines) | `500` for Free tier, unlimited otherwise | Unlimited ## Repository size limit @@ -372,15 +372,6 @@ NOTE: **Note:** The `SIDEKIQ_MEMORY_KILLER_MAX_RSS` setting is `16000000` on Sidekiq import nodes and Sidekiq export nodes. -## Cron jobs - -Periodically executed jobs by Sidekiq, to self-heal GitLab, do external -synchronizations, run scheduled pipelines, etc.: - -| Setting | GitLab.com | Default | -|-------- |------------- |------------- | -| `pipeline_schedule_worker` | `19 * * * *` | `19 * * * *` | - ## PostgreSQL GitLab.com being a fairly large installation of GitLab means we have changed diff --git a/doc/user/project/integrations/prometheus.md b/doc/user/project/integrations/prometheus.md index 51e687252a1..4976ca75bf7 100644 --- a/doc/user/project/integrations/prometheus.md +++ b/doc/user/project/integrations/prometheus.md @@ -170,7 +170,7 @@ Variables for Prometheus queries must be lowercase. There are 2 methods to specify a variable in a query or dashboard: 1. Variables can be specified using the [Liquid template format](https://help.shopify.com/en/themes/liquid/basics), for example `{{ci_environment_slug}}` ([added](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/20793) in GitLab 12.6). -1. You can also enclose it in quotation marks with curly braces with a leading percent, for example `"%{ci_environment_slug}"`. This method is deprecated though and support will be [removed in the next major release](https://gitlab.com/gitlab-org/gitlab/issues/37990). +1. You can also enclose it in quotation marks with curly braces with a leading percent, for example `"%{ci_environment_slug}"`. This method is deprecated though and support will be [removed in the next major release](https://gitlab.com/gitlab-org/gitlab/issues/37990). ### Defining custom dashboards per project diff --git a/doc/user/project/issues/design_management.md b/doc/user/project/issues/design_management.md index f7fa8c84d9e..79ad6efd150 100644 --- a/doc/user/project/issues/design_management.md +++ b/doc/user/project/issues/design_management.md @@ -46,10 +46,16 @@ If the requirements are not met, the **Designs** tab displays a message to the u Designs support short references in Markdown, but this needs to be enabled by setting the `:design_management_reference_filter_gfm_pipeline` feature flag. +## Supported files + +Files uploaded must have a file extension of either `png`, `jpg`, `jpeg`, +`gif`, `bmp`, `tiff` or `ico`. + +Support for [SVG files](https://gitlab.com/gitlab-org/gitlab/issues/12771) +and [PDFs](https://gitlab.com/gitlab-org/gitlab/issues/32811) is planned for a future release. + ## Limitations -- Files uploaded must have a file extension of either `png`, `jpg`, `jpeg`, `gif`, `bmp`, `tiff` or `ico`. - The [`svg` extension is not yet supported](https://gitlab.com/gitlab-org/gitlab/issues/12771). - Design uploads are limited to 10 files at a time. - Design Management data [isn't deleted when a project is destroyed](https://gitlab.com/gitlab-org/gitlab/issues/13429) yet. @@ -77,6 +83,11 @@ of the design, and will replace the previous version. Designs cannot be added if the issue has been moved, or its [discussion is locked](../../discussions/#lock-discussions). +[Introduced](https://gitlab.com/gitlab-org/gitlab/issues/34353) in [GitLab Premium](https://about.gitlab.com/pricing/) 12.9, +you can drag and drop designs onto the dedicated dropzone to upload them. + +![Drag and drop design uploads](img/design_drag_and_drop_uploads_v12_9.png) + ### Skipped designs Designs with the same filename as an existing uploaded design _and_ whose content has not changed will be skipped. diff --git a/doc/user/project/issues/img/design_drag_and_drop_uploads_v12_9.png b/doc/user/project/issues/img/design_drag_and_drop_uploads_v12_9.png Binary files differnew file mode 100644 index 00000000000..61ce3692808 --- /dev/null +++ b/doc/user/project/issues/img/design_drag_and_drop_uploads_v12_9.png diff --git a/doc/user/project/merge_requests/code_quality.md b/doc/user/project/merge_requests/code_quality.md index a4b7f0e5fb4..ddc9e427ac2 100644 --- a/doc/user/project/merge_requests/code_quality.md +++ b/doc/user/project/merge_requests/code_quality.md @@ -27,6 +27,8 @@ in the merge request widget area: ![Code Quality Widget](img/code_quality.png) +For more information, see the Code Climate list of [Supported Languages for Maintainability](https://docs.codeclimate.com/docs/supported-languages-for-maintainability). + ## Use cases For instance, consider the following workflow: diff --git a/doc/user/project/releases/img/release_with_milestone_v12_9.png b/doc/user/project/releases/img/release_with_milestone_v12_9.png Binary files differnew file mode 100644 index 00000000000..53100e33955 --- /dev/null +++ b/doc/user/project/releases/img/release_with_milestone_v12_9.png diff --git a/doc/user/project/releases/img/releases_v12_9.png b/doc/user/project/releases/img/releases_v12_9.png Binary files differnew file mode 100644 index 00000000000..bd23cf76651 --- /dev/null +++ b/doc/user/project/releases/img/releases_v12_9.png diff --git a/doc/user/project/releases/index.md b/doc/user/project/releases/index.md index f6e35ab03db..85da9d9be43 100644 --- a/doc/user/project/releases/index.md +++ b/doc/user/project/releases/index.md @@ -83,10 +83,11 @@ Releases can optionally be associated with one or more by including a `milestones` array in your requests to the [Releases API](../../../api/releases/index.md#create-a-release). -Releases display this association with the **Milestone** indicator near -the top of the Release block on the **Project overview > Releases** page. +Releases display this association with the **Milestone** indicator in the top +section of the Release block on the **Project overview > Releases** page, along +with some statistics about the issues in the milestone(s). -![A Release with one associated milestone](img/release_with_milestone_v12_5.png) +![A Release with one associated milestone](img/release_with_milestone_v12_9.png) Below is an example of milestones with no Releases, one Release, and two Releases, respectively. @@ -104,7 +105,7 @@ associated with a large number of Releases. Navigate to **Project > Releases** in order to see the list of releases for a given project. -![Releases list](img/releases.png) +![Releases list](img/releases_v12_9.png) ### Number of Releases |