Skip to content

Upgrade SAST semgrep analyzer to v5 and Secrets to v6

Craig Smith requested to merge craigmsmith-bump-major-version-of-semgrep-sast-analyzer into master

What does this MR do and why?

  • Update SAST CI template to reference v5
  • Update SAST latest CI template to reference v5
  • Update SECURE_BINARIES_ANALYZER_VERSION CI var referring latest version of the analyzer in Secure Binaries template
    • Set v5 for Semgrep analyzer(semgrep)
    • Set v6 for Secret Detection analyzer(secrets)

Related issue: Bump SAST Analyzer major version for 17.0 and r... (#455489 - closed) • Craig Smith • 17.0

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Screenshots or screen recordings

Screenshots are required for UI changes, and strongly recommended for all other merge requests.

Before After

How to set up and validate locally

Numbered steps to set up and validate the change are strongly suggested.

Edited by Vishwa Bhat

Merge request reports