Compare commits

..

1 commit

Author SHA1 Message Date
Rob Jackson
4972573d13 Merge branch 'iac-kics-sast' into 'main'
Added KICS IaC Scanner to Readme and YAML

See merge request components/sast!23
2025-05-06 11:56:32 -04:00

View file

@ -8,13 +8,15 @@ spec:
excluded_paths: excluded_paths:
default: "spec, test, tests, tmp" default: "spec, test, tests, tmp"
excluded_analyzers: excluded_analyzers:
default: "" default ""
analyzer_image: image_prefix:
default: "$CI_TEMPLATE_REGISTRY_HOST/security-products" default: "$CI_TEMPLATE_REGISTRY_HOST/security-products"
image_suffix:
default: ""
search_max_depth: search_max_depth:
default: 4 default: 4
image_tag: image_tag:
default: 6 default: 5
--- ---
iac-sast: iac-sast:
@ -36,7 +38,7 @@ iac-sast:
kics-iac-sast: kics-iac-sast:
extends: iac-sast extends: iac-sast
image: image:
name: "$[[ inputs.analyzer_image ]]/kics:$[[ inputs.image_tag ]]" name: "$[[ inputs.image_prefix ]]/kics:$[[ inputs.image_tag ]]$[[ inputs.image_suffix ]]"
rules: rules:
- if: $SAST_DISABLED == 'true' || $SAST_DISABLED == '1' - if: $SAST_DISABLED == 'true' || $SAST_DISABLED == '1'
when: never when: never