Skip to content

Add SAST analyzer for Typescript

Lucas Charles requested to merge add-tslint-analyzer into master

What does this MR do?

Adds the initial version of the tslint analyzer for running SAST scans on typescript projects. This uses the TSLint security plugin to test typescript code against 16 different security rules.

Huge thanks to @groulot for inspiration on analyzers/eslint, I was able to adapt the vast majority of his code to make this one straightforward.

What are the relevant issue numbers?

https://gitlab.com/gitlab-org/gitlab-ee/issues/7158

Does this MR meet the acceptance criteria?

Edited by Lucas Charles

Merge request reports