Configure SAST in

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 3bd74453b6319b76cf4da936777051a311a1ed43..639d773bb666c69e5c6405c5dc8037db1061082a 100644 (file)
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -5,6 +5,7 @@ image: python:3
 include:
   - local: .gitlab/gitlab-templates.yml
   - local: .gitlab/pylint.yml
+  - template: Security/SAST.gitlab-ci.yml
 
 variables:
   #XDG_CACHE_HOME: "$CI_PROJECT_DIR/.cache"
@@ -56,6 +57,12 @@ vinstall:
   artifacts:
     expire_in: 1 hour
 
+sast:
+  variables:
+    SAST_EXCLUDED_ANALYZERS: brakeman, eslint, flawfinder, gosec, kubesec, nodejs-scan,
+      phpcs-security-audit, pmd-apex, security-code-scan, semgrep, sobelow, spotbugs
+  stage: test
+
 tag_release:
   stage: build
   dependencies: