Add variable to SAST vendored template to enable customer opt-in
Release notes
Problem to solve
IaC scanning in SAST needs a mechanism by which customers can opt in to using it.
Proposal
Introduce a new variable in the SAST template that can be used for all IaC scanners.
Proposed implementation plan
-
Introduce a new variable in the SAST vendored template: SAST_IAC. -
Extend kubesec detection rules to use the new variable. -
Deprecate SCAN_KUBERNETES_MANIFESTStemplate variable in the SAST vendored template. -
Update existing kubesec tests to utilize new SAST_IACvariable` -
Update SAST analyzer documentation.
Edited by Thomas Woodham