Update AppSec SAST comment to be more helpful
From
Perhaps we should consider adding some labels so that developers can more easily give feedback? I.e.
appsec-sast::commented
(we add automatically when we add a comment) then the developer can change it to eitherappsec-sast::unhelpful
andappsec-sast::helpful
. If they don't change it, we can also assume it was so unhelpful / noisy that they didn't even read the comment😅 🤷
Proposal
-
Add new labels to gitlab-org
-
Update the SAST comments to give developers instructions on using them - Add to
scripts/process_custom_semgrep_results.rb
after gitlab-org/gitlab!149132 (merged) is merged - Add labels for assessing appsec sast quality (gitlab-org/gitlab!153031 - merged)
- Add to
-
Update the README
Edited by Nick Malcolm