Bump sast-rules to version 2.8.2 that includes rules with additional language support
Problem to solve
Integrate the latest sast-rules release v2.8.2 in the semgrep analyzer.
Implementation Plan
Since v2.8.2 adds support for new file types .yml and .properties, we have to apply the following changes:
-
Upgrade sast-rules used in the semgrep analyzer to version 2.8.2: Bump sast-rules to version 2.8.2 (gitlab-org/security-products/analyzers/semgrep!552 - merged) • Julian Thome • 17.10 -
Updating the documentation to include the newly supported file types: Include YAML and Java properties as supported l... (!183325 - merged) • Julian Thome • 17.10 -
Update SAST components template to support the new file types: Add newly supported file extensions yml, .prope... (components/sast!19 - merged) • Julian Thome -
Updating the sast templates to support new file types: Adding extensions (yml, yaml, properties) to SA... (!180712 - merged) • Julian Thome • 17.10 -
Refine exists patterns in components template (components/sast!20 - merged) • Julian Thome -
Refine SAST template patterns (!184795 - merged) • Julian Thome • 17.11 -
Add footnote for yaml file support (!184866 - merged) • Adam Cohen • 17.11
Edited by Julian Thome