Skip to content

Add native GitLab SAST report format output #115

@fabwamb

Description

@fabwamb

Currently, to use mobsfscan results in GitLab's Vulnerability Dashboard, users must export to SARIF and then use an external converter (like sarif-converter). This adds complexity to CI/CD pipelines and often results in lost metadata or poor mapping of vulnerability titles.
Proposed Change:
Add a new output flag --gitlab-sast (e.g., mobsfscan . --gitlab-sast -o gl-sast-report.json) that generates a JSON file conforming to the GitLab SAST Report Format.
Benefits:
• Streamlines GitLab CI/CD integration.
• Ensures all MobSF-specific metadata (CWE, OWASP Mobile, MASVS) is correctly mapped to GitLab fields.
• Removes dependency on third-party Go/Python converters.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions