Merge branch 'sast_no_dotenv' into 'master'

Prevent creation of .env file

See merge request gitlab-org/gitlab!21174

changelogs/unreleased/sast-no-env-file.yml

+---
+title: "Run SAST using awk to pass env variables directly to docker without creating .env file"
+merge_request: 21174
+author: Florian Gaultier
+type: fixed

lib/gitlab/ci/templates/Security/SAST.gitlab-ci.yml

@@ -36,9 +36,9 @@ sast:
           export DOCKER_HOST='tcp://localhost:2375'
         fi
       fi
-    - ENVS=`printenv | grep -vE '^(DOCKER_|CI|GITLAB_|FF_|HOME|PWD|OLDPWD|PATH|SHLVL|HOSTNAME)' | sed -n '/^[^\t]/s/=.*//p' | sed '/^$/d' | sed 's/^/-e /g' | tr '\n' ' '`
     - |
-      docker run $ENVS \
+      docker run \
+        $(awk 'BEGIN{for(v in ENVIRON) print v}' | grep -v -E '^(DOCKER_|CI|GITLAB_|FF_|HOME|PWD|OLDPWD|PATH|SHLVL|HOSTNAME)' | awk '{printf " -e %s", $0}') \
         --volume "$PWD:/code" \
         --volume /var/run/docker.sock:/var/run/docker.sock \
         "registry.gitlab.com/gitlab-org/security-products/sast:$SAST_VERSION" /app/bin/run /code