vor/sast
1
0
Fork 0
mirror of https://gitlab.com/components/sast.git synced 2025-07-01 15:58:28 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Compare commits

base: vor:0cd55615a77db11c66c949046f4c21e469bdcfb7
Branches Tags
vor:main
vor:add-clangsa
vor:remove-inputs-from-readme
vor:514659-enable-gitlab-advanced-sast-by-default
vor:advanced-sast
vor:3.0.0
vor:2.1.0
vor:2.0.2
vor:2.0.1
vor:2.0.0
vor:1.1.2
vor:1.1.1
vor:1.1.0
vor:1.0.1
vor:1.0
vor:0.1
..
compare: vor:7ca5ca1f131e2013d76322152accc350038fc836
Branches Tags
vor:add-clangsa
vor:main
vor:remove-inputs-from-readme
vor:514659-enable-gitlab-advanced-sast-by-default
vor:advanced-sast
vor:3.0.0
vor:2.1.0
vor:2.0.2
vor:2.0.1
vor:2.0.0
vor:1.1.2
vor:1.1.1
vor:1.1.0
vor:1.0.1
vor:1.0
vor:0.1

2 commits
0cd55615a7 ... 7ca5ca1f13

Author SHA1 Message Date
Jason Leasure
7ca5ca1f13 Merge branch 'add-clangsa' into 'main' 
Draft: Add clangsa analyzer

See merge request components/sast!29
 2025-06-17 08:55:07 -04:00
Jason Leasure
4c73c42d91 Add clangsa analyzer 2025-06-16 15:10:19 -04:00
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
templates/sast.yml
View file

@ -243,6 +243,10 @@ clangsa-sast:
extends: .sast-analyzer extends: .sast-analyzer
image: image:
name: "$CI_TEMPLATE_REGISTRY_HOST/gitlab-org/security-products/analyzers/clangsa:0" name: "$CI_TEMPLATE_REGISTRY_HOST/gitlab-org/security-products/analyzers/clangsa:0"
script: |-
# until https://gitlab.com/gitlab-org/gitlab/-/issues/549837, prevent sast_fp_reduction
export GITLAB_FEATURES=$(echo "$GITLAB_FEATURES" | sed 's/\bsast_fp_reduction\b//g' | sed 's/,,/,/g' | sed 's/^,//g' | sed 's/,$//g')
/analyzer run
rules: rules:
- if: '"$[[ inputs.excluded_analyzers ]]" =~ /clangsa/' - if: '"$[[ inputs.excluded_analyzers ]]" =~ /clangsa/'
when: never when: never