Skip to content

Analyzer consolidation in SAST CI template

Vishwa Bhat requested to merge vbhat161-master-patch-78808 into master

What does this MR do and why?

  • Following changes are made only in the stable SAST CI template (SAST.gitlab-ci.yml):
    • Replaces eslint, bandit and gosec analyzers in favor of semgrep analyzer
    • Defaults .go,.py,.java,.html and .js file support to semgrep analyzer
    • Removes support for Java-based projects from spotbugs analyzer in favor of semgrep analyzer
  • Updated spec file(sast_gitlab_ci_yaml_spec.rb) to pass the tests supporting above changes.

Relevant issue numbers

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Vishwa Bhat

Merge request reports