Getting started with XCA

All project code hosted on SHIP-HATS 2.0 GitLab are transparently onboarded to XCA.

XCA CI runs in two situations:

1. When a Merge Request is created: Scan changed files in the Merge Request.
2. When new code is committed to the default branch: Scan all files on the default branch.

To access XCA findings:

1. When a Merge Request is created: Wait for the job to complete and check the security scanning Merge Request widget.

   

   
   

2. When new code is committed to the default branch: Wait for the job to complete and check the project’s Security & Compliance > Vulnerability Report page. XCA findings are marked as “XCA” under the Identifier and Tool columns.

   

Last updated 06 March 2023