SAST is failing on gitlab-ce project

Summary

sast job is failing on gitlab-ce and gitlab-ee projects with ESLint couldn't find the plugin "eslint-plugin-import" error.

Steps to reproduce

  • Run sast on gitlab-ce or gitlab-ee project

Example Project

https://gitlab.com/gitlab-org/gitlab-ce/-/jobs/160450932

What is the current bug behavior?

[...]
Status: Downloaded newer image for registry.gitlab.com/gitlab-org/security-products/analyzers/eslint:2
Found project in /tmp/app

Oops! Something went wrong! :(

ESLint: 5.12.1.
ESLint couldn't find the plugin "eslint-plugin-import". This can happen for a couple different reasons:

1. If ESLint is installed globally, then make sure eslint-plugin-import is also installed globally. A globally-installed ESLint cannot find a locally-installed plugin.

2. If ESLint is installed locally, then it's likely that the plugin isn't installed correctly. Try reinstalling by running the following:

    npm i eslint-plugin-import@latest --save-dev

Path to ESLint package: /usr/local/lib/node_modules/eslint

If you still can't figure out the problem, please stop by https://gitter.im/eslint/eslint to chat with the team.

An error occured while running eslint.
2019/02/12 22:02:26 exit status 2
2019/02/12 22:02:26 Container exited with non zero status code

What is the expected correct behavior?

sast job is generating a vulnerability report.

Relevant logs and/or screenshots

See https://gitlab.com/gitlab-org/gitlab-ce/-/jobs/160450932

Assignee Loading
Time tracking Loading