Commit 3e52451e authored by Dmitriy Safronov's avatar Dmitriy Safronov
Browse files

semgrep-sast 



Signed-off-by: default avatarDmitriy Safronov <zimniy@cyberbrain.pw>
parent c7e7ee8b

Release-Latest.gitlab-ci.yml

+21 −0
Original line number Diff line number Diff line
@@ -30,3 +30,24 @@ secret_detection: 
    - if: '$SECRET_DETECTION_DISABLED'

      when: never

    - if: '$CI_COMMIT_BRANCH != $CI_DEFAULT_BRANCH'



semgrep-sast:

  rules:

    - if: $SAST_DISABLED == 'true' || $SAST_DISABLED == '1'

      when: never

    - if: $SAST_EXCLUDED_ANALYZERS =~ /semgrep/

      when: never

    - if: $CI_COMMIT_BRANCH != $CI_DEFAULT_BRANCH

      exists:

        - '**/*.py'

        - '**/*.js'

        - '**/*.jsx'

        - '**/*.ts'

        - '**/*.tsx'

        - '**/*.c'

        - '**/*.go'

        - '**/*.java'

        - '**/*.cs'

        - '**/*.html'

        - '**/*.scala'

        - '**/*.sc'