How to use GitLab security features to detect log4j vulnerabilities

1 · · Dec. 15, 2021, 10:44 p.m.
Note: Out of an abundance of caution, we encourage users who are using older version of GitLab SAST and Dependency Scanning to update to the latest versions. You can find more information and recommended actions in this blog post. Any customer leveraging the recommended includes for GitLab SAST has automatically received the new patched versions released Dec 13, 2021. In light of the recently discovered log4j vulnerabilities, we would like to demonstrate how GitLab can be used to assess and reme...