added path excuded var

.gitlab-ci.yml

@@ -12,7 +12,7 @@ include:
 # - local: ci-configs/case-4-security/container_scan.yml
 
 - local: ci-configs/case-4-security/sast.yml
-- local: ci-configs/case-4-security/secret_detection.yml
+# - local: ci-configs/case-4-security/secret_detection.yml
 
 
 

ci-configs/case-4-security/sast.yml

@@ -3,13 +3,13 @@ include:
 
 variables:
   SAST_REPORT_FILE: "gl-sast-report.json"
-  ALLOWLIST_FILE: "allowlist.yml"
+  # ALLOWLIST_FILE: "allowlist.yml"
   # SECURE_LOG_LEVEL: "debug"
 
 sast:
   stage: code_quality
-  script:
-    - sast --allowlist $ALLOWLIST_FILE
+  variables:
+    SAST_EXCLUDED_PATHS: "_build/* _static/* test_*"
   artifacts:
     paths:
       - $SAST_REPORT_FILE

ci-configs/case-4-security/secret_detection.yml

@@ -3,13 +3,13 @@ include:
 
 variables:
   SECRET_DETECTION_REPORT_FILE: "gl-secret-detection-report.json"
-  ALLOWLIST_FILE: "allowlist.yml"
+  # ALLOWLIST_FILE: "allowlist.yml"
   # SECURE_LOG_LEVEL: "debug"
 
 secret_detection:
   stage: code_quality
-  script:
-    - secret-detect --allowlist $ALLOWLIST_FILE
+  # script:
+  #   - secret-detect --allowlist $ALLOWLIST_FILE
   artifacts:
     paths:
       - $SECRET_DETECTION_REPORT_FILE