GeezerVison

Adds GitLab Security Dashboard integration with Dependency Scanning report output.
Socket CLI can now generate GitLab-compatible security reports that display
vulnerability findings directly in GitLab's native Security Dashboard and merge
request security widgets.

Why?

This feature enables Socket users to leverage GitLab's built-in Security Dashboard
for centralized vulnerability tracking and compliance reporting. Key benefits:

• Native GitLab Integration: Security findings appear directly in GitLab's
  Security Dashboard, merge request security tabs, and vulnerability reports without
  requiring external tools
• Compliance & Audit: Standardized Dependency Scanning reports (schema v15.0.0)
  support security audits and compliance requirements
• Centralized Visibility: Teams already using GitLab for security management can
  view Socket findings alongside other security scanners
• Policy Enforcement: Integrates with GitLab's security policies and approval
  rules for merge requests
• Complementary to Socket GitLab App: Works alongside the existing Socket GitLab
  App - the App provides real-time PR comments and blocking, while Security
  Dashboard reports provide centralized tracking and historical analysis

The implementation includes:

• New --enable-gitlab-security flag to generate reports
• Customizable output path via --gitlab-security-file (default:
  gl-dependency-scanning-report.json)
• Support for multiple simultaneous output formats (JSON, SARIF, GitLab)
• Intelligent alert filtering (includes only actionable error/warn level alerts)
• Complete vulnerability data including CVEs, severity levels, dependency chains,
  and remediation suggestions
• Comprehensive test suite and documentation

Public Changelog

New Feature: GitLab Security Dashboard Integration

Socket CLI now supports generating GitLab-compatible Dependency Scanning reports
that integrate with GitLab's Security Dashboard. Enable with
--enable-gitlab-security to display Socket vulnerability findings directly in
GitLab merge requests and security dashboards.

Features:

• Native GitLab Security Dashboard integration with Dependency Scanning schema
  v15.0.0
• Automatic vulnerability report generation in GitLab CI/CD pipelines
• Display Socket findings alongside other security scanners in GitLab's unified
  interface
• Support for multiple simultaneous output formats (JSON, SARIF, GitLab)
• Intelligent filtering of actionable security alerts (error/warn level)
• Complete vulnerability metadata including CVEs, severity levels, and remediation
  guidance

Usage:
socketcli --enable-gitlab-security --repo owner/repo

See documentation for GitLab CI/CD integration examples and configuration options.