search

OWASP / www-project-threat-dragon

OWASP Foundation Threat Dragon Project Web Repository
https://owasp.org/www-project-threat-dragon/
Apache License 2.0
73 stars 25 forks source link

Add guide for gitlab #91

Closed 4xpl0r3r closed 4 months ago

4xpl0r3r commented 4 months ago

Summary: Ref: https://github.com/OWASP/threat-dragon/pull/965 and https://github.com/OWASP/www-project-threat-dragon/issues/82

This is to add the guide of settting of GitLab access

closes #81

fdellwing commented 4 months ago

From my testing it is actually enough to just use the api scope because it contains all permissions.

jgadsden commented 4 months ago

If you can add these words to the .wordlist.txt file that will keep the spellchecker happy:

fdellwing commented 4 months ago

Are you saying that the scopes can be just api and do not have to be read_user read_repository write_repository profile read_api api

I was not able to get the integration to work with just read_user read_repository write_repository profile read_api, I needed to give api. And as api contains all other scopes, they can be omitted.