Merge branch 'add-clangsa' into 'main'

Draft: Add clangsa analyzer

See merge request components/sast!29

templates/sast.yml

@@ -243,6 +243,10 @@ clangsa-sast:
   extends: .sast-analyzer
   image:
     name: "$CI_TEMPLATE_REGISTRY_HOST/gitlab-org/security-products/analyzers/clangsa:0"
+  script: |-
+    # until https://gitlab.com/gitlab-org/gitlab/-/issues/549837, prevent sast_fp_reduction
+    export GITLAB_FEATURES=$(echo "$GITLAB_FEATURES" | sed 's/\bsast_fp_reduction\b//g' | sed 's/,,/,/g' | sed 's/^,//g' | sed 's/,$//g')
+    /analyzer run
   rules:
     - if: '"$[[ inputs.excluded_analyzers ]]" =~ /clangsa/'
       when: never