Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
G
gitlab-ce
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
1
Merge Requests
1
Analytics
Analytics
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
nexedi
gitlab-ce
Commits
d23b0bc8
Commit
d23b0bc8
authored
Apr 27, 2021
by
Daniel Paul Searles
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Add semgrep to SAST config UI
Changelog: added
parent
0a448da2
Changes
4
Hide whitespace changes
Inline
Side-by-side
Showing
4 changed files
with
14 additions
and
2 deletions
+14
-2
app/validators/json_schemas/security_ci_configuration_schemas/sast_ui_schema.json
...mas/security_ci_configuration_schemas/sast_ui_schema.json
+7
-0
changelogs/unreleased/328066-semgrep-config-ui.yml
changelogs/unreleased/328066-semgrep-config-ui.yml
+5
-0
lib/gitlab/ci/templates/Security/SAST.gitlab-ci.yml
lib/gitlab/ci/templates/Security/SAST.gitlab-ci.yml
+1
-1
lib/security/ci_configuration/sast_build_action.rb
lib/security/ci_configuration/sast_build_action.rb
+1
-1
No files found.
app/validators/json_schemas/security_ci_configuration_schemas/sast_ui_schema.json
View file @
d23b0bc8
...
...
@@ -160,6 +160,13 @@
"description"
:
".NET Core, .NET Framework"
,
"variables"
:
[]
},
{
"name"
:
"semgrep"
,
"label"
:
"Semgrep"
,
"enabled"
:
true
,
"description"
:
"Multi-language scanning"
,
"variables"
:
[]
},
{
"name"
:
"sobelow"
,
"label"
:
"Sobelow"
,
...
...
changelogs/unreleased/328066-semgrep-config-ui.yml
0 → 100644
View file @
d23b0bc8
---
title
:
Add semgrep to SAST config UI
merge_request
:
60460
author
:
type
:
added
lib/gitlab/ci/templates/Security/SAST.gitlab-ci.yml
View file @
d23b0bc8
...
...
@@ -292,7 +292,7 @@ semgrep-sast:
# SAST_ANALYZER_IMAGE is an undocumented variable used internally to allow QA to
# override the analyzer image with a custom value. This may be subject to change or
# breakage across GitLab releases.
SAST_ANALYZER_IMAGE
:
"
$SECURE_ANALYZERS_PREFIX/semgrep:
latest
"
SAST_ANALYZER_IMAGE
:
"
$SECURE_ANALYZERS_PREFIX/semgrep:
$SAST_ANALYZER_IMAGE_TAG
"
rules
:
-
if
:
$SAST_DISABLED
when
:
never
...
...
lib/security/ci_configuration/sast_build_action.rb
View file @
d23b0bc8
...
...
@@ -3,7 +3,7 @@
module
Security
module
CiConfiguration
class
SastBuildAction
<
BaseBuildAction
SAST_DEFAULT_ANALYZERS
=
'bandit, brakeman, eslint, flawfinder, gosec, kubesec, nodejs-scan, phpcs-security-audit, pmd-apex, security-code-scan, sobelow, spotbugs'
SAST_DEFAULT_ANALYZERS
=
'bandit, brakeman, eslint, flawfinder, gosec, kubesec, nodejs-scan, phpcs-security-audit, pmd-apex, security-code-scan, s
emgrep, s
obelow, spotbugs'
def
initialize
(
auto_devops_enabled
,
params
,
existing_gitlab_ci_content
)
super
(
auto_devops_enabled
,
existing_gitlab_ci_content
)
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment