summaryrefslogtreecommitdiff
path: root/.gitlab/ci/static-analysis.gitlab-ci.yml
diff options
context:
space:
mode:
authorGitLab Bot <gitlab-bot@gitlab.com>2022-06-07 15:08:12 +0000
committerGitLab Bot <gitlab-bot@gitlab.com>2022-06-07 15:08:12 +0000
commit7bbc731c75d0b8bf7c74ba77d521266d2ed0a1fc (patch)
tree4cab2383639b839613ffc4ef457e2a594f61aaa3 /.gitlab/ci/static-analysis.gitlab-ci.yml
parentedb317e9fe43c62229805fae529c550467ee5dc5 (diff)
downloadgitlab-ce-7bbc731c75d0b8bf7c74ba77d521266d2ed0a1fc.tar.gz
Add latest changes from gitlab-org/gitlab@master
Diffstat (limited to '.gitlab/ci/static-analysis.gitlab-ci.yml')
-rw-r--r--.gitlab/ci/static-analysis.gitlab-ci.yml38
1 files changed, 0 insertions, 38 deletions
diff --git a/.gitlab/ci/static-analysis.gitlab-ci.yml b/.gitlab/ci/static-analysis.gitlab-ci.yml
index 95c0d93b2fc..e1257e778bd 100644
--- a/.gitlab/ci/static-analysis.gitlab-ci.yml
+++ b/.gitlab/ci/static-analysis.gitlab-ci.yml
@@ -152,41 +152,3 @@ feature-flags-usage:
when: always
paths:
- tmp/feature_flags/
-
-semgrep-appsec-custom-rules:
- stage: lint
- extends:
- - .static-analysis:rules:ee
- image: returntocorp/semgrep
- needs: []
- script:
- # Required to avoid a timeout https://github.com/returntocorp/semgrep/issues/5395
- - git fetch origin master
- # Include/exclude list isn't ideal https://github.com/returntocorp/semgrep/issues/5399
- - |
- semgrep ci --gitlab-sast --metrics off --config $CUSTOM_RULES_URL \
- --include app --include lib --include workhorse \
- --exclude '*_test.go' --exclude spec --exclude qa > gl-sast-report.json || true
- variables:
- CUSTOM_RULES_URL: https://gitlab.com/gitlab-com/gl-security/appsec/sast-custom-rules/-/raw/main/appsec-pings/rules.yml
- artifacts:
- paths:
- - gl-sast-report.json
- reports:
- sast: gl-sast-report.json
-
-ping-appsec-for-sast-findings:
- stage: lint
- image: alpine:latest
- variables:
- # Project Access Token bot ID for /gitlab-com/gl-security/appsec/sast-custom-rules
- BOT_USER_ID: 11727358
- needs:
- - semgrep-appsec-custom-rules
- rules:
- # Requiring $CUSTOM_SAST_RULES_BOT_PAT prevents the bot from running on forks or CE
- # Without it the script would fail too.
- - if: "$CI_MERGE_REQUEST_IID && $CUSTOM_SAST_RULES_BOT_PAT"
- script:
- - apk add jq curl
- - scripts/process_custom_semgrep_results.sh