Update SAST and GitLab Advanced SAST docs to explain GitLab Advanced SAST is enabled by default
Proposal
As part of Enable GitLab Advanced SAST by default (&15145) • Unassigned • Needs attention, we need to update the following docs to explain that GitLab Advanced SAST is now executed by default:
Implementation Plan
Use Draft: Document GLAS enabled by default (!182227 - closed) • Adam Cohen • 18.0 as a starting point.
Make the following docs changes:
-
Static Application Security Testing (SAST) -
Remove reference to GITLAB_ADVANCED_SAST_ENABLED from Analyzer Settings. -
Document differences between available commandline options for semgrepandgitlab-advanced-sast.For example,
semgrepsupports "--max-memory", "--max-target-bytes", "--timeout", whereasgitlab-advanced-sastsupports "--sca-output-path", "--max-memory". -
Explain language coverage between semgrepandGitLab Advanced SAST. For example,semgrephandles the languages thatGitLab Advanced SASTdoesn't yet support.
-
-
-
Remove references to GITLAB_ADVANCED_SAST_ENABLEDfrom Enable Advanced SAST scanning. -
Explain the increase in scan duration and potential out-of-memory errors, and how to troubleshoot them.
-