Skip to content

Remove nodejs-scan scanning gitlab-org/gitlab

Joern Schneeweisz requested to merge js/remove-nodejs-scan into master

What does this MR do and why?

Describe in detail what your merge request does and why.

This removes nodejs-scan from our configured SAST scanners we use to scan gitlab-org/gitlab. The change is made due to we're not dealing with nodejs code in our codebase. Having the scanner enabled results in false positives like https://gitlab.com/gitlab-org/gitlab/-/security/vulnerabilities/18889549

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Merge request reports