Commit edff5749 authored by Russell Dickenson's avatar Russell Dickenson

Merge branch 'patch-253' into 'master'

Update analyzers.md

See merge request gitlab-org/gitlab!45749
parents 4a7cc998 1529e09c
...@@ -33,7 +33,7 @@ SAST supports the following official analyzers: ...@@ -33,7 +33,7 @@ SAST supports the following official analyzers:
- [`sobelow`](https://gitlab.com/gitlab-org/security-products/analyzers/sobelow) (Sobelow (Elixir Phoenix)) - [`sobelow`](https://gitlab.com/gitlab-org/security-products/analyzers/sobelow) (Sobelow (Elixir Phoenix))
- [`spotbugs`](https://gitlab.com/gitlab-org/security-products/analyzers/spotbugs) (SpotBugs with the Find Sec Bugs plugin (Ant, Gradle and wrapper, Grails, Maven and wrapper, SBT)) - [`spotbugs`](https://gitlab.com/gitlab-org/security-products/analyzers/spotbugs) (SpotBugs with the Find Sec Bugs plugin (Ant, Gradle and wrapper, Grails, Maven and wrapper, SBT))
The analyzers are published as Docker images that SAST will use to launch The analyzers are published as Docker images that SAST uses to launch
dedicated containers for each analysis. dedicated containers for each analysis.
SAST is pre-configured with a set of **default images** that are maintained by SAST is pre-configured with a set of **default images** that are maintained by
...@@ -77,12 +77,12 @@ variables: ...@@ -77,12 +77,12 @@ variables:
SAST_DEFAULT_ANALYZERS: "bandit,flawfinder" SAST_DEFAULT_ANALYZERS: "bandit,flawfinder"
``` ```
`bandit` runs first. When merging the reports, SAST will `bandit` runs first. When merging the reports, SAST
remove the duplicates and will keep the `bandit` entries. removes the duplicates and keeps the `bandit` entries.
### Disabling default analyzers ### Disabling default analyzers
Setting `SAST_DEFAULT_ANALYZERS` to an empty string will disable all the official Setting `SAST_DEFAULT_ANALYZERS` to an empty string disables all the official
default analyzers. In `.gitlab-ci.yml` define: default analyzers. In `.gitlab-ci.yml` define:
```yaml ```yaml
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment