Skip to content

Import find_sec_bugs and security_code_scan from SAST Rules

What does this MR do?

This MR removes the local find_sec_bugs and security_code_scan rules and imports them from sast-rules, which is the SSoT.

Changes in this MR:

  • Delete local ruleset security_code_scan.yaml, find_sec_bugs.yaml
  • Upgrade sast-rules to version 1.3.14
  • Import security_code_scan.yaml from sast-rules
  • Import find_sec_bugs.yaml from sast-rules

What are the relevant issue numbers?

gitlab-org/gitlab#390908 (closed)

Does this MR meet the acceptance criteria?

Edited by Lucas Charles

Merge request reports