Use SAST scan API endpoint in IDE extension
Problem to solve
To perform security scans, the extension will use a GitLab API REST endpoint.
Currently, the remote security scan feature in gitlab-vscode-extension and gitlab-lsp are configured with a serviceUrl for testing. That URL can be eliminated and instead, the GitlabAPIClient interface can be amended.
Proposal
-
add an instance of GitlabAPIClienttoDefaultSecurityDiagnosticsPublisher -
change the fetchinsecurity_diagnostics_publisher.tsto afetchFromApi-
reformat POST body as JSON instead of multipart-mime
-
-
remove serviceUrlconfiguration item-
from gitlab-lsp -
from gitlab-vscode-extension
-
-
update doc in gitlab-lsp
Edited by Jason Leasure