Skip to content

Exclude suppressions reported by semgrep in the artifact

Vishwa Bhat requested to merge include-suppressions into main

What does this MR do?

  • Includes suppressions property during .sarif file serialization.
  • Skips to include the finding in the artifact if a sarif result has suppressions array property. However, if one of the array elements in the supressions has status property value as underReview or rejected, the finding will be included in the artifact.

What are the relevant issue numbers?

gitlab-org/gitlab#344616 (closed)

Does this MR meet the acceptance criteria?

Edited by Vishwa Bhat

Merge request reports