Update SAST Analyzers' Default MR description to include labels
Proposal
Some analyzers (secrets) have default labels assigned when opening an MR, other do not (spotbugs, gosec, etc). Let's go through and assign default labels to alleviate the hassle of manually assigning labels having to find a similar issue and using /copy_metadata. Labels that can be confidently assigned as defaults: group, devops, Category
Implementation
Updated Analyzers Default MR description by appending
/label ~"group::static analysis" ~"devops:secure" ~"Category:SAST"
the the bottom of General->Settings->Merge Request->Default Descriptions
-
gosec -
nodejs-scan -
secrets -
pmd-apex -
spotbugs -
sobelow -
security-code-scan -
brakeman -
bandit -
flawfinder -
phpcs-security-audit -
eslint -
mobsf -
semgrep
Edited by Connor Gilbert