Enable Semgrep analyzer in Configuration UI
Release notes
Problem to solve
To ease basic customer configuration we created a Config UI for SAST analyzers. Part of that rollout involved giving customers the ability to turn on or off specific analyzers, but its feature set was limited to those which are Generally Available. We didn't have Semgrep as an option at the time of that feature's implementation. We will need Semgrep to be available through the Config UI for it to become GA.
Further, we are currently limited in versions that an analyzer can be. Until we remove SAST_ANALYZER_IMAGE_TAG
as a setting, Semgrep's version will also have to be brought up be major version 2
.
Proposal
-
Add semgrep to all places it's missing in the Config UI -
Update semgrep to version 2
while we're waiting forSAST_ANALZER_IMAGE_TAG
to be removed
Edited by Daniel Paul Searles