SASTBot: Monthly dependency updates for 15.8

See merge request !132



Merged-by: Zach Rice <zrice@gitlab.com>
Approved-by: Vishwa Bhat <vbhat@gitlab.com>
Approved-by: Zach Rice <zrice@gitlab.com>
Co-authored-by: rossfuhrman <rfuhrman@gitlab.com>

SASTBot: Monthly dependency updates for 15.7

See merge request !129



Merged-by: Lucas Charles <me@lucascharles.me>
Approved-by: Lucas Charles <me@lucascharles.me>
Reviewed-by: rossfuhrman <rfuhrman@gitlab.com>
Co-authored-by: Ross Fuhrman <rfuhrman@gitlab.com>

Add Integration test

See merge request !130



Merged-by: rossfuhrman <rfuhrman@gitlab.com>
Approved-by: rossfuhrman <rfuhrman@gitlab.com>
Reviewed-by: rossfuhrman <rfuhrman@gitlab.com>
Co-authored-by: Zach Rice <zrice@gitlab.com>

Always filter out unsupported projects

See merge request !131



Merged-by: rossfuhrman <rfuhrman@gitlab.com>
Approved-by: Zach Rice <zrice@gitlab.com>
Approved-by: rossfuhrman <rfuhrman@gitlab.com>
Co-authored-by: James Liu <jliu@gitlab.com>

Extracts the logic to filter out unsupported projects (those not
ending in `.csproj` or `.vbproj`) into a helper function that's
called under both code paths the analyser can take:

1. When a solution (.sln) file is found, and we use the
   `dotnet sln list` command to get the projects within the
   solution.
2. When a .sln doesn't exist, and we manually walk the project
   directory structure to find supported projects.

SASTBot: Monthly dependency updates for 15.6

See merge request !127



Merged-by: Zach Rice <zrice@gitlab.com>
Approved-by: James Liu <jliu@gitlab.com>
Approved-by: Zach Rice <zrice@gitlab.com>
Co-authored-by: rossfuhrman <rfuhrman@gitlab.com>

SASTBot: Monthly dependency updates for %15.5

See merge request !126



Merged-by: Zach Rice <zrice@gitlab.com>
Approved-by: James Liu <jliu@gitlab.com>
Approved-by: Zach Rice <zrice@gitlab.com>
Co-authored-by: James Liu <jliu@gitlab.com>
Co-authored-by: Ross Fuhrman <rfuhrman@gitlab.com>
Co-authored-by: Vishwa Bhat (automated) <vbhat@gitlab.com>

Update common to v3.2.1 to fix gotestsum cmd

See merge request !125



Merged-by: Lucas Charles <me@lucascharles.me>
Approved-by: Lucas Charles <me@lucascharles.me>
Co-authored-by: Adam Cohen <acohen@gitlab.com>

Manual Monthly dependency updates for %15.4

See merge request !124



Merged-by: Lucas Charles <me@lucascharles.me>
Approved-by: Lucas Charles <me@lucascharles.me>
Co-authored-by: Ross Fuhrman <rfuhrman@gitlab.com>

Update to use "SecurityCodeScan.VS2019"  package instead of deprecated package. (Fixes gitlab-org/gitlab#364736)

See merge request !122



Merged-by: James Liu <jliu@gitlab.com>
Approved-by: James Liu <jliu@gitlab.com>
Co-authored-by: Nathan Miller <nathan_miller@mentor.com>

Nathan Miller authored Sep 15, 2022 and James Liu committed Sep 15, 2022

Update to use "SecurityCodeScan.VS2019"  package instead of deprecated package. (Fixes gitlab-org/gitlab#364736)

SASTBot: Monthly dependency updates for %15.3

See merge request !121

Fix MR number in CHANGELOG

See merge request !120

Fix golangci-lint prealloc lint errors

See merge request !118

bump command

See merge request !119

[Bulk Update] Bump core deps

See merge request !117

Newer versions of the `report` package have added an additional
`analyzer` object to the Secure JSON schema. This commit modifies
the configuration of the analyser so this object is correctly
populated in the report, and tidies the setup in main() to align
with newer analysers like Semgrep.

Increase log level when `dotnet add` fails

See merge request !116

chore: fix group reference in CODEOWNERS

See merge request !114

Update dependencies

See merge request !112

Run QA Downstream tests against v3

See merge request !110

Add ruleset override support

See merge request !105