Available CI/CD variables
| CI/CD variable | Description |
|---|---|
SECURE_ANALYZERS_PREFIX |
Specify the Docker registry base address from which to download the analyzer. |
FUZZAPI_VERSION |
Specify API Fuzzing container version. Defaults to 2. |
FUZZAPI_IMAGE_SUFFIX |
Specify a container image suffix. Defaults to none. |
FUZZAPI_API_PORT |
Specify the communication port number used by API Fuzzing engine. Defaults to 5500. Introduced in GitLab 15.5. |
FUZZAPI_TARGET_URL |
Base URL of API testing target. |
FUZZAPI_CONFIG |
Deprecated in GitLab 13.12, replaced with default .gitlab/gitlab-api-fuzzing-config.yml. API Fuzzing configuration file. |
FUZZAPI_PROFILE |
Configuration profile to use during testing. Defaults to Quick-10. |
FUZZAPI_EXCLUDE_PATHS |
Exclude API URL paths from testing. |
FUZZAPI_EXCLUDE_URLS |
Exclude API URL from testing. Introduced in GitLab 14.10. |
FUZZAPI_EXCLUDE_PARAMETER_ENV |
JSON string containing excluded parameters. Introduced in GitLab 14.10. |
FUZZAPI_EXCLUDE_PARAMETER_FILE |
Path to a JSON file containing excluded parameters. Introduced in GitLab 14.10. |
FUZZAPI_OPENAPI |
OpenAPI Specification file or URL. |
FUZZAPI_OPENAPI_RELAXED_VALIDATION |
Relax document validation. Default is disabled. Introduced in GitLab 14.7. GitLab team members can view more information in this confidential issue: https://gitlab.com/gitlab-org/gitlab/-/issues/345950. |
FUZZAPI_OPENAPI_ALL_MEDIA_TYPES |
Use all supported media types instead of one when generating requests. Causes test duration to be longer. Default is disabled. Introduced in GitLab 14.10. |
FUZZAPI_OPENAPI_MEDIA_TYPES |
Colon (:) separated media types accepted for testing. Default is disabled. Introduced in GitLab 14.10. |
FUZZAPI_HAR |
HTTP Archive (HAR) file. |
FUZZAPI_GRAPHQL |
Path to GraphQL endpoint, for example /api/graphql. Introduced in GitLab 15.4. |
FUZZAPI_GRAPHQL_SCHEMA |
A URL or filename for a GraphQL schema in JSON format. Introduced in GitLab 15.4. |
FUZZAPI_POSTMAN_COLLECTION |
Postman Collection file. |
FUZZAPI_POSTMAN_COLLECTION_VARIABLES |
Path to a JSON file to extract Postman variable values. The support for comma-separated (,) files was introduced in GitLab 15.1. |
FUZZAPI_OVERRIDES_FILE |
Path to a JSON file containing overrides. |
FUZZAPI_OVERRIDES_ENV |
JSON string containing headers to override. |
FUZZAPI_OVERRIDES_CMD |
Overrides command. |
FUZZAPI_OVERRIDES_CMD_VERBOSE |
When set to any value. It shows overrides command output as part of the job output. Introduced in GitLab 14.8. |
FUZZAPI_PRE_SCRIPT |
Run user command or script before scan session starts. |
FUZZAPI_POST_SCRIPT |
Run user command or script after scan session has finished. |
FUZZAPI_OVERRIDES_INTERVAL |
How often to run overrides command in seconds. Defaults to 0 (once). |
FUZZAPI_HTTP_USERNAME |
Username for HTTP authentication. |
FUZZAPI_HTTP_PASSWORD |
Password for HTTP authentication. |
FUZZAPI_HTTP_PASSWORD_BASE64 |
Password for HTTP authentication, Base64-encoded. Introduced in GitLab 15.4. |