diff options
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/user/application_security/dast/index.md | 30 | ||||
| -rw-r--r-- | doc/user/application_security/license_compliance/index.md | 1 |
2 files changed, 31 insertions, 0 deletions
diff --git a/doc/user/application_security/dast/index.md b/doc/user/application_security/dast/index.md index 951c4b9dd73..d285b5ff585 100644 --- a/doc/user/application_security/dast/index.md +++ b/doc/user/application_security/dast/index.md @@ -339,3 +339,33 @@ questions that you know someone might ask. Each scenario can be a third-level heading, e.g. `### Getting error message X`. If you have none to add when creating a doc, leave this section in place but commented out to help encourage others to add to it in the future. --> + +## Troubleshooting + +### Running out of memory + +By default, ZAProxy, which DAST relies on, is allocated memory that sums to 25% +of the total memory on the host. +Since it keeps most of its information in memory during a scan, +it is possible for DAST to run out of memory while scanning large applications. +This results in the following error: + +``` +[zap.out] java.lang.OutOfMemoryError: Java heap space +``` + +Fortunately, it is straightforward to increase the amount of memory available +for DAST by overwriting the `script` key in the DAST template: + +```yaml +include: + template: DAST.gitlab-ci.yml + +dast: + script: + - export DAST_WEBSITE=${DAST_WEBSITE:-$(cat environment_url.txt)} + - /analyze -t $DAST_WEBSITE -z"-Xmx3072m" +``` + +Here, DAST is being allocated 3072 MB. +Change the number after `-Xmx` to the required memory amount. diff --git a/doc/user/application_security/license_compliance/index.md b/doc/user/application_security/license_compliance/index.md index c67e66dae5d..3cf8301adca 100644 --- a/doc/user/application_security/license_compliance/index.md +++ b/doc/user/application_security/license_compliance/index.md @@ -104,6 +104,7 @@ License Compliance can be configured using environment variables. | Environment variable | Required | Description | |-----------------------|----------|-------------| | `MAVEN_CLI_OPTS` | no | Additional arguments for the mvn executable. If not supplied, defaults to `-DskipTests`. | +| `LICENSE_FINDER_CLI_OPTS` | no | Additional arguments for the `license_finder` executable. For example, if your project has both Golang and Ruby code stored in different directories and you want to only scan the Ruby code, you can update your `.gitlab-ci-yml` template to specify which project directories to scan, like `LICENSE_FINDER_CLI_OPTS: '--debug --aggregate-paths=. ruby'`. | | `LM_JAVA_VERSION` | no | Version of Java. If set to `11`, Maven and Gradle use Java 11 instead of Java 8. | | `LM_PYTHON_VERSION` | no | Version of Python. If set to `3`, dependencies are installed using Python 3 instead of Python 2.7. | | `SETUP_CMD` | no | Custom setup for the dependency installation. (experimental) | |