{"id":31153,"date":"2022-09-07T02:03:26","date_gmt":"2022-09-07T02:03:26","guid":{"rendered":"https:\/\/www.devopsschool.com\/blog\/?p=31153"},"modified":"2022-12-23T05:47:31","modified_gmt":"2022-12-23T05:47:31","slug":"gitlab-tutorials-running-sast-in-an-offline-environment-in-selfhosted","status":"publish","type":"post","link":"https:\/\/www.devopsschool.com\/blog\/gitlab-tutorials-running-sast-in-an-offline-environment-in-selfhosted\/","title":{"rendered":"GitLab Tutorials: Running SAST in an offline environment in Selfhosted"},"content":{"rendered":"\n<p>For self-managed GitLab instances in an environment with limited, restricted, or intermittent access to external resources through the internet, some adjustments are required for the SAST job to run successfully.<\/p>\n\n\n\n<p>It\u2019s possible to run most of the GitLab security scanners when not connected to the internet.<\/p>\n\n\n\n<p>This document describes how to operate Secure Categories (that is, scanner types) in an offline environment. These instructions also apply to self-managed installations that are secured, have security policies (for example, firewall policies), or are otherwise restricted from accessing the full internet. GitLab refers to these environments as offline environments.<\/p>\n\n\n\n<p>GitLab scanners usually connect to the internet to download the latest sets of signatures, rules, and patches. A few extra steps are necessary to configure the tools to function properly by using resources available on your local network.<\/p>\n\n\n\n<p>https:\/\/docs.gitlab.com\/ee\/user\/application_security\/offline_deployments\/index.html<br>https:\/\/docs.gitlab.com\/ee\/user\/application_security\/sast\/index.html#running-sast-in-an-offline-environment<\/p>\n","protected":false},"excerpt":{"rendered":"<p>For self-managed GitLab instances in an environment with limited, restricted, or intermittent access to external resources through the internet, some adjustments are required for the SAST job&#8230; <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_joinchat":[],"footnotes":""},"categories":[2],"tags":[],"class_list":["post-31153","post","type-post","status-publish","format-standard","hentry","category-uncategorised"],"_links":{"self":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/31153","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/comments?post=31153"}],"version-history":[{"count":1,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/31153\/revisions"}],"predecessor-version":[{"id":31154,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/31153\/revisions\/31154"}],"wp:attachment":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/media?parent=31153"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/categories?post=31153"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/tags?post=31153"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}