Commit 1946a989 authored by Russell Dickenson's avatar Russell Dickenson

Merge branch 'secure-scanner-integration-recommend-debug-messages-for-cli' into 'master'

Recommend debug messages for CLIs scanners run

See merge request gitlab-org/gitlab!46210
parents a4b0fa69 9794ee4d
......@@ -248,6 +248,11 @@ It is recommended to use the `debug` level for verbose logging that could be
useful when debugging. The default value for `SECURE_LOG_LEVEL` should be set
to `info`.
When executing command lines, scanners should use the `debug` level to log the command line and its output.
For instance, the [bundler-audit](https://gitlab.com/gitlab-org/security-products/analyzers/bundler-audit) scanner
uses the `debug` level to log the command line `bundle audit check --quiet`,
and what `bundle audit` writes to the standard output.
#### common logutil package
If you are using [go](https://golang.org/) and
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment