Skip to content

Prevent creation of .env file

Florian requested to merge agixid/gitlab:sast_no_dotenv into master

What does this MR do?

To propagate environment variable from host to sast container, .env file is created.

Then, this .env file is analyzed by sast and may trigger TruffleHog for example.

Passing -e VARNAME to docker without definition allow to propagate environment variables without need to create the .env file.

Related Issue

Please see #209333 (closed)

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

It behaves the same.

Edited by rossfuhrman

Merge request reports