Repository navigation
v1.8.0
TODO When updating
The DAST scans (OWASP ZAP) moved to the stack-agnostic Standard Security Gitlab Package
(see ADR). composer recipes:install smartbooster/standard-bundle --reset --force
does not remove the files copied by previous versions, so on a project that used them :
- Install standard-security to keep the
dast-*targets (see its README), then addinclude .standard-security/security.mkto the project'sMakefile - Delete the files copied by the previous recipe :
git rm make/security.mk dast_scan/build-plan.sh && git rm -r dast_scan/scripts - Keep
dast_scan/targets.jsonanddast_scan/alert-filters.json, their format is unchanged - On a project that did not use the DAST scans, just delete
make/security.mk,dast_scan/build-plan.shanddast_scan/scripts/
Removed
make/security.mk,dast_scan/build-plan.sh,dast_scan/scripts/anddocs/security.md, now shipped by Standard Security- recipe
smartbooster.standard-bundle.1.8.json: no longer copiesmake/security.mk,dast_scan/build-plan.shanddast_scan/scripts/
Added
adr/20260923-dast-extraction-to-standard-security.md
Contributed by @mathieu-ducrot