Fix Advanced SAST C/C++ support for offline environments

Hua Yanrequested to merge
sast-cpp-603083 into master

What does this MR do and why?

Fixes two gaps introduced when C/C++ support was added to GitLab Advanced SAST in 18.6:

  1. Adds gitlab-advanced-sast-cpp to Secure-Binaries.gitlab-ci.yml so offline deployments can mirror the clangsa analyzer image. The job overrides the script to push under the clangsa name (matching $SECURE_ANALYZERS_PREFIX/clangsa:1 used by SAST.gitlab-ci.yml in offline mode), since the default script derives the push target from CI_JOB_NAME.
  2. Adds an offline environment section to the Advanced SAST C/C++ documentation.

Testing

End-to-end offline deployment verified with two test MRs in https://gitlab.com/hyan3/test-ci-template:

Step MR Pipeline Result
Online: mirror clangsa to local registry !13 #2624568044 clangsa:1 pushed to registry.gitlab.com/hyan3/test-ci-template/clangsa:1
Offline: SAST pulls clangsa from local registry !14 #2624586878 gitlab-advanced-sast-cpp ran successfully using local registry image

Closes Advanced SAST C/C++ (`clangsa`) documentation a... (#603083 - closed) • Hua Yan • 19.2

Edited by Hua Yan

Merge request reports