Skip to content

Exclude useless SAST analyzers

Philippe Lafoucrière requested to merge disable-some-sast-analyzers into master

What does this MR do?

Because we override the rules defined in the SAST template, the file detection doesn't occur anymore, and all the analyzers get scheduled. Most of them fail silently, not finding the files they look for. While not blocking, it's using a lot of CI time and bandwidth for nothing.
This MR disables the jobs we don't want to see running, and removes the non-used variable SAST_DISABLE_BABEL (https://gitlab.slack.com/archives/CLA54H7PY/p1623694826349700).
Reminder: The spotbugs image is 814.29 MiB!

Screenshots (strongly suggested)

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

Does this MR contain changes to processing or storing of credentials or tokens, authorization and authentication methods or other items described in the security review guidelines? If not, then delete this Security section.

  • [-] Label as security and @ mention @gitlab-com/gl-security/appsec
  • [-] The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • [-] Security reports checked/validated by a reviewer from the AppSec team
Edited by Philippe Lafoucrière

Merge request reports