GitLab Next

Bump Secrets modules from v2 to v3

See merge request !66

Namespace env var with secret detection

See merge request !64

What:

* Rename SAST_EXCLUDED_PATHS to SECRET_DETECTION_EXCLUDED_PATHS

Update CONTRIBUTING.md

See merge request !63

Use scanner instead of analyzer for scan.scanner

See merge request !62

Bump gitleaks version

See merge request !60

Merge branch 'master' of gitlab.com:gitlab-org/security-products/analyzers/secrets into gitleaks-v5.0.1

Update url regex

See merge request !61

Chore: specify QA expectations to downstream

See merge request !59

Moves QA expectations into analyzer and provides report fixture to
downstream to allow versioning alongside code changes

Add scan object to report

See merge request !56

Fix slack detection

See merge request !57

Remove trufflehog scanner from secrets analyzer

See merge request !52

Switch to the MIT Expat license

See merge request !54

Fix gitignore to ignore the correct report

See merge request !51

Standardize logging with logrus

See merge request !50

Why:

* There is a lack of control over logging and a lack of convention for
  our Security Analyzers. See
  gitlab-org/gitlab#10880 for more context.

This change addresses the need by:

* Upgrade version of common used.
* Set logrus formatter with common's logutil package.
* Replace log/fmt print calls with the appropriate logrus calls.
* Add info logs when executing large steps.
* Add debug log for exec output.

Ignore line extraction on historic scans

See merge request !48

Bump gitleaks to v4.3.1

See merge request !49