Skip to content

Dedupe vulnerabilities in bandit and semgrep

Saikat Sarkar requested to merge dedupe_identifiers into main

What does this MR do?

In this MR, we are trying to add a bandit identifier to semgrep vulnerability. This will help us dedupe vulnerability_findings on the rails side.

Examples of ruleID taken as input:

  • rules.bandit.B502.B503
  • rules.bandit.B502
  • rules.bandit.B502-2

What are the relevant issue numbers?

Issue: gitlab-org/gitlab#321293 (closed)

Does this MR meet the acceptance criteria?

Edited by Lucas Charles

Merge request reports