diff --git a/templates/sast.yml b/templates/sast.yml index ccb3eec..a169ccb 100644 --- a/templates/sast.yml +++ b/templates/sast.yml @@ -53,6 +53,7 @@ gitlab-advanced-sast: image: name: "$[[ inputs.image_prefix ]]/gitlab-advanced-sast:${SAST_ANALYZER_IMAGE_TAG}$[[ inputs.image_suffix ]]" variables: + FF_GLAS_ENABLE_PHP_SUPPORT: 'true' SAST_ANALYZER_IMAGE_TAG: 2 SEARCH_MAX_DEPTH: 20 cache: @@ -81,6 +82,7 @@ gitlab-advanced-sast: - '**/*.mjs' - '**/*.cs' - '**/*.rb' + - '**/*.php' brakeman-sast: extends: .deprecated-16.8 @@ -144,7 +146,7 @@ semgrep-sast: "$[[ inputs.excluded_analyzers ]]" !~ /gitlab-advanced-sast/ && "$[[ inputs.run_advanced_sast ]]" == "true"' variables: - SAST_EXCLUDED_PATHS: "$DEFAULT_SAST_EXCLUDED_PATHS, **/*.py, **/*.go, **/*.java, **/*.js, **/*.jsx, **/*.ts, **/*.tsx, **/*.cjs, **/*.mjs, **/*.cs, **/*.rb" + SAST_EXCLUDED_PATHS: "$DEFAULT_SAST_EXCLUDED_PATHS, **/*.py, **/*.go, **/*.java, **/*.js, **/*.jsx, **/*.ts, **/*.tsx, **/*.cjs, **/*.mjs, **/*.cs, **/*.rb, **/*.php" exists: - '**/*.c' - '**/*.cc' @@ -203,7 +205,7 @@ semgrep-sast: - '**/bootstrap*.yml' - '**/application*.yaml' - '**/bootstrap*.yaml' - + sobelow-sast: extends: .sast-analyzer image: