diff --git a/templates/sast.yml b/templates/sast.yml index 6c4d6c6..79c713d 100644 --- a/templates/sast.yml +++ b/templates/sast.yml @@ -243,6 +243,10 @@ clangsa-sast: extends: .sast-analyzer image: name: "$CI_TEMPLATE_REGISTRY_HOST/gitlab-org/security-products/analyzers/clangsa:0" + script: |- + # until https://gitlab.com/gitlab-org/gitlab/-/issues/549837, prevent sast_fp_reduction + export GITLAB_FEATURES=$(echo "$GITLAB_FEATURES" | sed 's/\bsast_fp_reduction\b//g' | sed 's/,,/,/g' | sed 's/^,//g' | sed 's/,$//g') + /analyzer run rules: - if: '"$[[ inputs.excluded_analyzers ]]" =~ /clangsa/' when: never