13.11 Analyzer Updates
THIS ISSUE DUPLICATES A PRIVATE INTERNAL RELEASE ISSUE PURELY FOR PUBLIC VISIBLITY https://gitlab.com/gitlab-org/security-products/release/-/issues/109
Prepare
SAST
- Check the analyzers list and make sure it includes the analyzers/languages recently added.
Dependency Scanning
- Check the analyzers list and make sure it includes the analyzers/languages recently added.
Check upstream updates
Static Analysis Analyzers
Please scrutinize the following dependencies according to our the guidance listed in the handbook.
- [-] brakeman - brakeman is on the latest version at 5.0.0
- [-] phpcs-security-audit - phpcs-security-audit is on the latest version at 2.0.1
- security-code-scan - Needs to be updated version 5.0.0. Deferred to %13.12
- bandit - bandit is on the latest version 1.7.0
- eslint: gitlab-org/security-products/analyzers/eslint!75 (merged)
- mobSF: gitlab-org/security-products/analyzers/mobsf!21 (merged)
- SAST template for MobSF version: !58594 (merged)
- [-] flawfinder no updated needed as v0.11.1 is the latest release
- [-] gosec no update needed as v2.7.0 is the latest release
- [-] sobelow no update needed as v2.0.15 is the latest release
- [-] kubesec No updated needed as v2.11.0 is the latest release
- nodejs-scan | gitlab-org/security-products/analyzers/nodejs-scan!96 (merged)
- secrets | gitlab-org/security-products/analyzers/secrets!109 (merged)
- pmd-apex gitlab-org/security-products/analyzers/pmd-apex!57 (merged)
- spotbugs gitlab-org/security-products/analyzers/spotbugs!96 (merged)
Container Scanning Analyzers
For each upstream scanner having an available update, please open a dedicated issue with ./script/update_scanner_issue.rb template.
For each upstream scanner having an available update, please open a dedicated issue with ./script/update_scanner_issue.rb template.
License Compliance
Dependency Scanning Analyzers
Post release
QA
- Check latest QA Orchestrator pipeline and ensure all pipelines are successful.
Edited by Taylor McCaslin