Commit b33cee29 authored by Russell Dickenson's avatar Russell Dickenson

Merge branch 'docs-sast-pinned-scanner-examples' into 'master'

Update SAST pinned scanner examples

See merge request gitlab-org/gitlab!77198
parents 1ce11f73 d43fa53f
...@@ -269,7 +269,7 @@ versions are pulled, there are certain cases where it can be beneficial to pin ...@@ -269,7 +269,7 @@ versions are pulled, there are certain cases where it can be beneficial to pin
an analyzer to a specific release. To do so, override the `SAST_ANALYZER_IMAGE_TAG` CI/CD variable an analyzer to a specific release. To do so, override the `SAST_ANALYZER_IMAGE_TAG` CI/CD variable
in the job template directly. in the job template directly.
In the example below, we pin to a specific patch version of the `spotbugs` analyzer and minor version of the `semgrep` analyzer: In the example below, we pin to a minor version of the `semgrep` analyzer and a specific patch version of the `brakeman` analyzer:
```yaml ```yaml
include: include:
...@@ -277,11 +277,11 @@ include: ...@@ -277,11 +277,11 @@ include:
semgrep-sast: semgrep-sast:
variables: variables:
SAST_ANALYZER_IMAGE_TAG: "2.12" SAST_ANALYZER_IMAGE_TAG: "2.16"
spotbugs-sast: brakeman-sast:
variables: variables:
SAST_ANALYZER_IMAGE_TAG: "2.28.1" SAST_ANALYZER_IMAGE_TAG: "2.21.1"
``` ```
### Customize rulesets **(ULTIMATE)** ### Customize rulesets **(ULTIMATE)**
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment