Use Secure jobs in the security-projects group templates for analyzers.

Problem to solve

Currently analyzer.yml which is included in all Secure SAST and Dependency Scanning analyzers repository doesn't have any SAST and Container Scanning jobs (DAST and Dependency scanning don't apply, those are Golang applications).

Target audience

  • Sasha, Software Developer, https://design.gitlab.com/research/personas#persona-sasha

Further details

Benefits: dogfooding.

Proposal

Include SAST and container scanning jobs to the analyzer.yml file.

What does success look like, and how can we measure that?

SAST and container scanning is run on every push to the security-product analyzers projects.

Assignee Loading
Time tracking Loading