| `BRU_IMAGE` | The Docker image used to run Bruno. | `registry.hub.docker.com/usebruno:latest` |
| `BRU_IMAGE` | The Docker image used to run Bruno. | `registry.hub.docker.com/bruno:latest` |
| `BRU_PROJECT_DIR` | The Bruno project directory (containing test scripts) | `.` |
| `BRU_EXTRA_ARGS` | Bruno extra [run options](link-to-cli-options-ref) | _none_ |
| `REVIEW_ENABLED` | Set to `true` to enable Bruno tests on review environments (dynamic environments instantiated on development branches) | _none_ (disabled) |
@@ -29,7 +30,7 @@ In addition to a textual report in the console, this job produces the following
@@ -7,7 +7,7 @@ Security fixes and updates are only applied to the latest released version. So a
## Reporting a Vulnerability
In order to minimize risks of attack while investigating and fixing the issue, any vulnerability shall be reported by
opening a [**confidential** issue on gitlab.com](https://gitlab.com/to-be-continuous/usebruno/-/issues/new?issue[confidential]=true&issue[description]=%28type+in+the+vulnerability+details+here%29%0A%0A%2Flabel%20~%22kind%3A%3Avulnerability%22).
opening a [**confidential** issue on gitlab.com](https://gitlab.com/to-be-continuous/bruno/-/issues/new?issue[confidential]=true&issue[description]=%28type+in+the+vulnerability+details+here%29%0A%0A%2Flabel%20~%22kind%3A%3Avulnerability%22).
Follow-up and fixing will be made on a _best effort_ basis.