Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
G
gitlab-ce
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
1
Merge Requests
1
Analytics
Analytics
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
nexedi
gitlab-ce
Commits
c79f2060
Commit
c79f2060
authored
Apr 07, 2020
by
Nick Gaskill
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
New gitleaks environment variables for SAST
parent
c45f9a20
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
3 additions
and
0 deletions
+3
-0
doc/user/application_security/sast/index.md
doc/user/application_security/sast/index.md
+3
-0
No files found.
doc/user/application_security/sast/index.md
View file @
c79f2060
...
...
@@ -298,6 +298,9 @@ Some analyzers make it possible to filter out vulnerabilities under a given thre
|
`SAST_FLAWFINDER_LEVEL`
| 1 | Ignore Flawfinder vulnerabilities under given risk level. Integer, 0=No risk, 5=High risk. |
|
`SAST_GITLEAKS_ENTROPY_LEVEL`
| 8.0 | Minimum entropy for secret detection. Float, 0.0 = low, 8.0 = high. |
|
`SAST_GOSEC_LEVEL`
| 0 | Ignore gosec vulnerabilities under given confidence level. Integer, 0=Undefined, 1=Low, 2=Medium, 3=High. |
|
`SAST_GITLEAKS_COMMIT_FROM`
| - | The commit a gitleaks scan starts at. |
|
`SAST_GITLEAKS_COMMIT_TO`
| - | The commit a gitleaks scan ends at. |
|
`SAST_GITLEAKS_HISTORIC_SCAN`
| false | Flag to enable a historic gitleaks scan. |
#### Timeouts
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment