Skip to content

Read SAST template and .gitlab-ci.yml to know about different variables related to analyzers

In this work, we need to add the functionality to read different environment variables related to a particular analyzer. We need to parse SAST template and .gitlab-ci.yml files to gather information about different variables related to analyzers.

For the first iteration, we will only support the following variables (documentation)

  • SAST_BANDIT_EXCLUDED_PATHS
  • SAST_BRAKEMAN_LEVEL
  • SAST_FLAWFINDER_LEVEL
  • SAST_GOSEC_LEVEL

Note: We do not store a value for these variables in our SAST vendored template, but some of them do have defaults. These defaults will be stored in sast_ui_schema.json

Edited by rossfuhrman