{match[5]});
} else if (match[6]) {
parts.push({match[7]});
} else if (match[8]) {
parts.push({match[9]});
}
lastIndex = match.index + match[0].length;
}
if (lastIndex < text.length) parts.push(text.slice(lastIndex));
if (parts.length === 0) return text;
const keyRef = {
current: keyIndex
};
return expandHtmlTags(parts, keyRef);
};
const processBadges = text => {
if (!text || typeof text !== 'string') return text;
if (YES_RE.test(text)) return ✓;
if (NO_RE.test(text)) return ✗;
if (LIMITED_RE.test(text)) return ◐;
if (NA_RE.test(text) || NA2_RE.test(text)) return Not applicable;
return processText(text);
};
const cellClassName = text => {
if (!text || typeof text !== 'string') return undefined;
if (NA_RE.test(text)) return 'yt-cell-na';
if (NA2_RE.test(text)) return 'yt-cell-na2';
return undefined;
};
const expandSimpleTags = (str, keyRef) => {
const result = [];
let last = 0;
SIMPLE_TAG_RE.lastIndex = 0;
let m;
while ((m = SIMPLE_TAG_RE.exec(str)) !== null) {
if (m.index > last) result.push(str.slice(last, m.index));
if (m[1]) {
result.push(); } else if (m[2]) { result.push(
,
); } else if (m[3]) { result.push(Note: ); } else if (m[4]) { result.push(Warning: ); } last = m.index + m[0].length; } if (last < str.length) result.push(str.slice(last)); return result; }; const expandHtmlTags = (chunks, keyRef) => { const out = []; for (const chunk of chunks) { if (typeof chunk === 'string') { out.push(...expandSimpleTags(chunk, keyRef)); } else { out.push(chunk); } } return out; }; const extractText = node => { if (node === null || node === undefined) return ''; if (typeof node === 'string') return node; if (typeof node === 'number') return String(node); if (typeof node === 'boolean') return ''; if (Array.isArray(node)) return node.map(extractText).join(''); if (node && typeof node === 'object' && node.type) { const props = node.props || ({}); if (typeof props.children === 'string') return props.children; if (props.children) return extractText(props.children); return ''; } return String(node || ''); }; const [mounted, setMounted] = useState(false); useEffect(() => { setMounted(true); }, []); const data = useMemo(() => { if (propData) return propData; if (content && typeof content === 'string') return parseYamlTableContent(content); if (!children) return []; if (typeof children === 'string') return parseYamlTableContent(children); const childrenArray = Array.isArray(children) ? children : [children]; return parseYamlTableContent(childrenArray.map(extractText).join('').trim()); }, [children, propData, content]); const columns = useMemo(() => { if (!data || data.length === 0) return []; const firstRow = data[0]; if (!firstRow || typeof firstRow !== 'object') return []; return Object.keys(firstRow); }, [data]); if (!mounted) return null; if (!data || data.length === 0) return null; const rowKey = row => columns.map(c => row[c] || '').join('|'); return
| {col.replaceAll('_', ' ')} | )}
|---|
| {processBadges(row[col])} | )}
5. Click **Add Custom Header** and enter the following values:
* Key: `X-Endor-Installation-ID`
* Value: The Custom Header Value from the Endor Labs user interface. It is the installation ID of the Endor Labs GitLab installation.
6. Select **Merge request events** under the **Trigger** section.
7. Ensure that **Enable SSL verification** is selected under the **SSL verification** section.
8. Click **Add Webhook** to save the changes.
You can create a webhook without SSL verification, but it is not recommended. Without SSL verification, the webhook is vulnerable to man-in-the-middle attacks.
https://gitlab.com). No trailing slash.
- Parameter: \`
5. Click **Add Custom Header** and enter the following values:
* Key: `X-Endor-Installation-ID`
* Value: The Custom Header Value from the Endor Labs user interface. It is the installation ID of the Endor Labs GitLab installation.
6. Select **Merge request events** under the **Trigger** section.
7. Ensure that **Enable SSL verification** is selected under the **SSL verification** section.
8. Click **Add Webhook** to save the changes.
You can create a webhook without SSL verification, but it is not recommended. Without SSL verification, the webhook is vulnerable to man-in-the-middle attacks.
https://gitlab.com). No trailing slash.
- Parameter: \`
5. Click **Add Custom Header** and enter the following values:
* Key: `X-Endor-Installation-ID`
* Value: The Custom Header Value from the Endor Labs user interface. It is the installation ID of the Endor Labs GitLab installation.
6. Select **Merge request events** under the **Trigger** section.
7. Ensure that **Enable SSL verification** is selected under the **SSL verification** section.
8. Click **Add Webhook** to save the changes.
You can create a webhook without SSL verification, but it is not recommended. Without SSL verification, the webhook is vulnerable to man-in-the-middle attacks.
### Configure the webhook using the cURL command
Ensure that you have the personal access token of the group owner with the `api` scope to configure the cURL command.
The following table lists the configuration options required to create the GitLab group webhook.
https://gitlab.com). No trailing slash.
- Parameter: \`
3. Update the template with the required changes.
4. Select **Propagate this template to all child namespaces** if you want to apply the template to all child namespaces.
You can expand and view the details of the finding.
Click **Link to Finding** to view the details of the finding in Endor Labs.
For secrets, Endor Labs also generates a comment with the line number where the secret is detected.
## View MR scan findings
When you create a new merge request, the Endor Labs GitLab App scans the merge request. Endor Labs generates findings based on the finding policy.
1. Select **Projects** from the left sidebar.
2. Select the project for which you want to view the MR scan findings.
3. Select **PR runs** to view the MR scan findings.
4. Select the MR for which you want to view the findings.
5. Click **View Findings** to view the findings on the MR.
See [View Findings](/inventory-insights/findings) for more information on Findings in Endor Labs.
## Update the webhook secret
You might want to update the webhook secret for rotation or because you have lost the secret.
### Update the webhook secret on the Endor Labs GitLab App
1. Select **User menu** > **Integrations** from the left sidebar.
2. Click **Manage** in **GitLab** under **Source Control Managers**.
3. Click the vertical three dots next to the GitLab installation that you want to update.
4. Select **Edit Integration**.
5. Select **Merge Request Settings**.
6. Enter the new **Secret Token** and click **Save MR Settings** to save the changes.
The secret token can be any random string.
### Update the webhook secret in GitLab
To update the webhook secret in GitLab UI, you need to log in with the group owner role.
1. Sign in to GitLab and select the group for which you want to update the webhook secret.
2. Select **Settings** > **Webhooks** from the left sidebar.
3. Click **Edit** next to the webhook that you want to update.
4. Enter the new **Secret token**, and click **Save changes** to save the changes.
Ensure that you use the same secret token that you used in Endor Labs.