Skip to content

Enable Semgrep analyzer in Configuration UI

Release notes

Problem to solve

To ease basic customer configuration we created a Config UI for SAST analyzers. Part of that rollout involved giving customers the ability to turn on or off specific analyzers, but its feature set was limited to those which are Generally Available. We didn't have Semgrep as an option at the time of that feature's implementation. We will need Semgrep to be available through the Config UI for it to become GA.

Further, we are currently limited in versions that an analyzer can be. Until we remove SAST_ANALYZER_IMAGE_TAG as a setting, Semgrep's version will also have to be brought up be major version 2.

Proposal

  • Add semgrep to all places it's missing in the Config UI
  • Update semgrep to version 2 while we're waiting for SAST_ANALZER_IMAGE_TAG to be removed
Edited by Daniel Paul Searles