Skip to content

Bring SAST to Core - secrets

Full requirements listing in &2098 (closed)

Scope of this issue specifically

Secret Detection security plugin scanning, when Docker-in-Docker is disabled - SAST_DISABLED_DIND = true

Plan

Implementation Plan

  1. Update SAST vendored template
    • Remove check for /sast/ in features for the brakeman analyzers for the DIND-free version.
  2. Update license for the repository from EE License to MIT Expat Minor Version Bump

Test Plan

  1. Test analyzers as a core user
  2. Test analyzers as an ultimate user
Edited by Zach Rice