Skip to content

Add Ruby semgrep post-processing script

Ameya Darshan requested to merge ameyadarshan-master-patch-49200 into master

What does this MR do and why?

This MR replaces the current semgrep result processing script with a Ruby script, which also allows the bot to create inline comments on MR using the discussions API.

How to set up and validate locally

  1. Fork this branch.
  2. Add vulnerable code from one of the classes at https://gitlab.com/gitlab-com/gl-security/appsec/sast-custom-rules/-/tree/main/secure-coding-guidelines.
  3. Verify that the bot creates inline MR comments with the message.
  4. Verify that the bot doesn't create more than 1 comment per finding when pipelines are run again on updating the code.
Edited by Ameya Darshan

Merge request reports