Update secrets analyzer in support of move to separate vendored template
In support of Move secret detection into its own vendored template, we will need to update the secrets analyzer.
At a minimum, we will need to update what gets output to the json report. It currently outputs a gl-sast-report.json
file, but the name of that will likely need to change as well.
In order to best provide backwards compatibility, we should consider releasing this change as version 3.0.0
of the analyzer so that self-hosted customers on previous versions will continue to be able to run the 2.x
versions of secrets
.
This will also require changes to the following repositories:
-
common - gitlab-org/security-products/analyzers/common!92 (merged) -
security-reports-schema - https://gitlab.com/gitlab-org/security-products/security-report-schemas /-/merge_requests/27
Edited by Zach Rice