diff --git a/templates/sast.yml b/templates/sast.yml index 75b2b04..cafc8f1 100644 --- a/templates/sast.yml +++ b/templates/sast.yml @@ -51,12 +51,23 @@ spec: gitlab-advanced-sast: extends: .sast-analyzer image: - name: "registry.gitlab.com/gitlab-org/security-products/analyzers/gitlab-advanced-sast:hyan-multicore" + name: "$[[ inputs.image_prefix ]]/gitlab-advanced-sast:${SAST_ANALYZER_IMAGE_TAG}$[[ inputs.image_suffix ]]" variables: SAST_ANALYZER_IMAGE_TAG: 1 SEARCH_MAX_DEPTH: 20 + SCAN_METRICS_FILE: scan_metrics.csv + cache: + key: "$CI_COMMIT_REF_SLUG-scan-metrics" + paths: + - "$SCAN_METRICS_FILE" rules: - - exists: + - if: '"$[[ inputs.excluded_analyzers ]]" =~ /gitlab-advanced-sast/' + when: never + - if: '"$[[ inputs.run_advanced_sast ]]" != "true"' + when: never + - if: $CI_COMMIT_BRANCH && + $GITLAB_FEATURES =~ /\bsast_advanced\b/ + exists: - '**/*.py' - '**/*.go' - '**/*.java'