Adds a widget to GitLab merge request page showing vulnerabilities detected by Container Scanning.

Latest Version

Version
0.0.1
Update
October 22, 2024
Size
25.64KiB
Developer
Category
Users
9
Rating
5 ★
Manifest Version
3
Web Store Status
Languages Support
English (United States)
See more
Permissions
ActiveTab
Storage
See more

GitLab MR Vulnerability Widget Extension

This extension adds a widget in the Gitlab merge request page showing critical and high vulnerabilities of a container image generated in the associated pipeline.

A container scanning job must exist in the pipeline. This job must generate a container scanning report artifact. To add a container scanning job, follow the steps defined here: https://docs.gitlab.com/ee/user/application_security/container_scanning/

The free version of Gitlab supports container scanning but does not support decoration of the merge request with vulnerability details. This extension fills that gap by decorating the merge request with a vulnerability widget.

Note: The extension requires configuring a personal access token with \"read_api\" scope to allow fetching the pipeline artifacts. This token is saved in Chrome storage with encryption and never leaves your browser. To create a personal access token, follow the steps here: https://docs.gitlab.com/ee/user/profile/personal_access_tokens.html

Reference:
Container scanning job: https://docs.gitlab.com/ee/user/application_security/container_scanning/
Container scanning report artifact: https://docs.gitlab.com/ee/ci/yaml/artifacts_reports.html#artifactsreportscontainer_scanning
Personal access token: https://docs.gitlab.com/ee/user/profile/personal_access_tokens.html
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "manifest_version": 3, "name": "GitLab MR Vulnerability Widget", "version": "0.0.1", "description": "Adds a widget to GitLab merge request page showing vulnerabilities detected by Container Scanning.", "permissions": ["activeTab", "storage"], "host_permissions": [ "https://gitlab.com/*" ], "background": { "service_worker": "background.js" }, "content_scripts": [ { "matches": ["https://gitlab.com/*/merge_requests/*"], "js": ["content.js"] } ], "options_page": "options.html", "icons": { "128": "icons/icon-128.png" }}
Read more

How to download and manually install GitLab MR Vulnerability Widget extension for Chrome

Looking for a way to install GitLab MR Vulnerability Widget extensions for Chrome, you can search for them in the Chrome Web Store, clicking the "Add to Chrome" button, and following the straightforward process.

However, you may need to install GitLab MR Vulnerability Widget extensions manually, this article outlines two simple methods to effortlessly install GitLab MR Vulnerability Widget extensions, whether they come as unpacked folders in compressed formats like .zip or as .crx files.

Method 1: Download GitLab MR Vulnerability Widget extension and manually install through Drag &Drop

If you ever need to manually install a GitLab MR Vulnerability Widget extension for Chrome, don't worry, it's a simple process. Just follow these easy steps, and you will have your extension ready to use in no time.

Step 1: Download the GitLab MR Vulnerability Widget Extension by clicking the "Download CRX" button on the website.

Look for the GitLab MR Vulnerability Widget extension you wish to install. Go to the website and download the GitLab MR Vulnerability Widget extension package, which is usually a .CRX file and comes in a zipped file. Here ".crx" file is the format for GitLab MR Vulnerability Widget extension that contains all the data.

Step 2: Extract &Arrange Files

Once the file is downloaded, extract that file into its own folder. Similarly, give that extension files a permanent home. In other words, keep it in a folder that you don't accidentally delete it because these files will be needed to make that extension work.

Step 3: Go to the Chrome Extensions Page

Open Google Chrome and in the address bar, type chrome://extensions; it will open the Google Chrome extensions page. Make sure that "My extensions" is selected in the sidebar.

Step 4: Drag and Drop the Extension

Now, go to the folder where you extracted the GitLab MR Vulnerability Widget extension and drag &drop the extension file from there anywhere onto the extension page within Google Chrome.

Step 5: Complete the Installation

Once you drag and drop the extension file, follow the steps that Google Chrome takes you through. Similarly, if the extension file is of .crx file format, you will be required to review the permissions and then add the extension.

Now, you can manage that added extension as you would like to with any other Chrome extension that you added through Chrome Webstore. Its icon will also appear in the Google Chrome Menu on the right side of the address bar once you activate it.

Method 2: Download GitLab MR Vulnerability Widget extension for Chrome and install in Developer Mode

This is another method to install GitLab MR Vulnerability Widget extension manually, but the twist is that here, you install by enabling the developer mode option provided in Google Chrome. This mode is commonly used for testing extensions or running unpublished tools.

Step 1: Download the GitLab MR Vulnerability Widget extension file

Select and download the GitLab MR Vulnerability Widget extension by clicking the 'Download CRX' button on the website.

Step 2: Extract the downloaded contents

Convert the file to a ZIP file if it is in CRX format then extract the GitLab MR Vulnerability Widget extension zip file or folder that you downloaded. Make sure you extract it using the same folder name and keep it safely in another folder, so you don't delete it by mistake. The extracted folder will be needed to keep your GitLab MR Vulnerability Widget extension running.

Step 3: Open Chrome Extension Setting Page

In the address bar of Google Chrome, type chrome://extensions and open the Chrome Extension Page.

Step 4: Enable Developer Mode

After opening the Chrome Extension page, look at the top right side, and you will find the toggle option of "Developer mode."Simply enable that developer mode option.

Step 5: Load the Unpacked Extension

Once you enable the developer mode option, you will see the menu of Load Unpacked, Pack Extensions and Update. From that, select the option "Load unpacked."

Step 6: Select the Extension Folder

Once the pop-up opens upon clicking Load unpacked, select the GitLab MR Vulnerability Widget extension directory and click on the "Select Folder "button.

Step 7: Confirm and Install

After you select an extension folder of a Google Chrome extension you're installing manually, confirm its installation for the final time and let the installation complete.

Conclusion

Here we've made a step-by-step guide on How to manually install GitLab MR Vulnerability Widget extension in 2 ways. We hope this guide proves helpful.

Similar Extensions

icon

Google Apps Script GitHub Assistant Extension · Developer Tools 9 98 ★ 153KiB

icon

Tanuki Utilities Extension · Developer Tools 9 1 ★ 25.43KiB

icon

Atom Material Icons Extension · Productivity 9 23 ★ 2.18MiB

icon

DotGit Extension · Developer Tools 9 12 ★ 147KiB

icon

Codecode Review for GitLab Extension · Developer Tools 9 6 ★ 210KiB

icon

Token Devtools Inspector Extension · Developer Tools 9 1 ★ 91.73KiB

icon

Library Detector (Academic Tool) Extension · Developer Tools 9 8 ★ 608KiB

icon

GitKraken Extension · Developer Tools 9 14 ★ 1.63MiB

icon

LeetCode Tracker Extension · Developer Tools 9 2 ★ 1.33MiB

icon

Le Git Graph - Commits Graph for GitHub Extension · Productivity 9 29 ★ 814KiB

icon

Gitlab Enhancement Suite Extension · Developer Tools 9 1 ★ 95.15KiB

icon

Kamino Extension · Developer Tools 9 10 ★ 608KiB

icon

Git Notify Extension · Developer Tools 9 8 ★ 388KiB

icon

gRPC Web Devtools Extension · Developer Tools 9 5 ★ 999KiB

icon

UX Enhancer for GitLab Extension · Developer Tools 9 7 ★ 115KiB

icon

Lab Partner Extension · Developer Tools 9 8 ★ 469KiB

icon

GitHub Merge Guardian Extension · Developer Tools 9 0 ★ 306KiB

icon

GTLB CI logs viewer Extension · Developer Tools 9 0 ★ 207KiB

icon

GitLab Resolved Extension · Developer Tools 9 0 ★ 15.48KiB

icon

GitLab Diff Collapse All Extension · Developer Tools 9 2 ★ 42.38KiB

icon

CodeGenie for Github Extension · Developer Tools 9 2 ★ 410KiB

icon

GitLab Open in Editor Extension · Developer Tools 9 0 ★ 290KiB

icon

Github Package.json Enhancer Extension · Developer Tools 9 3 ★ 14.06KiB

icon

Github Whitespace Hider Extension · Developer Tools 9 2 ★ 3.52KiB