Skip to content

Exclude sobelow from running

rossfuhrman requested to merge rf-exclude-sobelow into master

What does this MR do and why?

Excludes sobelow from running

Adds sobelow to SAST_EXCLUDED_ANALYZERS so that it does not run for our pipelines.

An example where it is running unnecessarily: https://gitlab.com/gitlab-org/gitlab/-/jobs/4197565203

It is running because of the problem described here: Backend: Increase MAX_PATTERN_COMPARISON for ru... (#227632)

This change does not address the underlying problem, but we also have an issue to better document the current state: docs: Improve analyzer documentation around why... (#409127 - closed)

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Merge request reports