Skip to content

Draft: Remove analyze code

Craig Smith requested to merge craigmsmith-remove-analyzer-code into sast-ide

What does this MR do?

The SAST IDE project does not need to act as an analyzer and so removes all code required for that functionality.

This MR:

  • removes analyze.go and it's tests
  • Disables the CI job test-custom-ca-bundle since that only runs because this project happens to have the name semgrep
  • Removes the analyzer command from main.go
  • Remove plugin as it was only necessary for command
  • Removes cliarg.Parse since it's only used by analyze
  • Remove post analyzers from Dockerfile and Dockerfile.fips
  • Update Dockerfile and Dockerfile.fips to start the SAST IDE server by default

todo:

  • rebase against main
  • update of README and removal of SAST IDE documentation - !477 (0b679097)
  • simplify the generated report
  • removal of report, command, ruleset
  • removal of convert.go
  • Add a message on start-up
  • set exit handler !477 (comment 2073462335)

What are the relevant issue numbers?

Distill sast-ide branch down to include the bar... (gitlab-org/gitlab#478877 - closed) • Julian Thome • 17.4

Does this MR meet the acceptance criteria?

Edited by Craig Smith

Merge request reports

Loading