-
-
Notifications
You must be signed in to change notification settings - Fork 121
Open
Description
Currently, to use mobsfscan results in GitLab's Vulnerability Dashboard, users must export to SARIF and then use an external converter (like sarif-converter). This adds complexity to CI/CD pipelines and often results in lost metadata or poor mapping of vulnerability titles.
Proposed Change:
Add a new output flag --gitlab-sast (e.g., mobsfscan . --gitlab-sast -o gl-sast-report.json) that generates a JSON file conforming to the GitLab SAST Report Format.
Benefits:
• Streamlines GitLab CI/CD integration.
• Ensures all MobSF-specific metadata (CWE, OWASP Mobile, MASVS) is correctly mapped to GitLab fields.
• Removes dependency on third-party Go/Python converters.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels