File tree Expand file tree Collapse file tree 3 files changed +15
-8
lines changed
tests/resources/test_sast
test_sast_suppression_by_id_or_type Expand file tree Collapse file tree 3 files changed +15
-8
lines changed Original file line number Diff line number Diff line change @@ -42,6 +42,13 @@ Procedure:
42422 . Convert report
43433 . Upload converted report as junit report
4444
45+ ### Report input types:
46+ You can use following report types as inputs with ` ss2ju ` command. (f.e ` ss2ju sast .... ` )
47+ - [ ** sast** ] ( https://docs.gitlab.com/ee/user/application_security/sast/ )
48+ - [ ** secrets** ] ( https://docs.gitlab.com/ee/user/application_security/secret_detection/pipeline/ )
49+ - [ ** container_scanning** ] ( https://docs.gitlab.com/ee/user/application_security/container_scanning/ )
50+ - [ ** maven_dependency_check** ] ( https://github.com/jeremylong/DependencyCheck )
51+
4552### Example for Secret Scanning
4653This example can be used as is.
4754``` yaml
Original file line number Diff line number Diff line change 124124 "category" : " sast" ,
125125 "name" : " Found Spring endpoint" ,
126126 "message" : " Found Spring endpoint" ,
127- "description" : " pl.com.softnet. example.springbootsoftnetexample .FakeErrorController is a Spring endpoint (Controller)" ,
128- "cve" : " 8e968b3dea7c8b68b43c07ab9b37c120:SPRING_ENDPOINT:src/main/java/pl/com/softnet/ example/springbootsoftnetexample /FakeErrorController.java:11" ,
127+ "description" : " dev.logchange. example.springbootlogchangeexample .FakeErrorController is a Spring endpoint (Controller)" ,
128+ "cve" : " 8e968b3dea7c8b68b43c07ab9b37c120:SPRING_ENDPOINT:src/main/java/dev/logchange/ example/springbootlogchangeexample /FakeErrorController.java:11" ,
129129 "severity" : " Low" ,
130130 "confidence" : " Low" ,
131131 "scanner" : {
132132 "id" : " find_sec_bugs" ,
133133 "name" : " Find Security Bugs"
134134 },
135135 "location" : {
136- "file" : " src/main/java/pl/com/softnet/ example/springbootsoftnetexample /FakeErrorController.java" ,
136+ "file" : " src/main/java/dev/logchange/ example/springbootlogchangeexample /FakeErrorController.java" ,
137137 "start_line" : 11 ,
138- "class" : " pl.com.softnet. example.springbootsoftnetexample .FakeErrorController" ,
138+ "class" : " dev.logchange. example.springbootlogchangeexample .FakeErrorController" ,
139139 "method" : " getSomeFakeError"
140140 },
141141 "identifiers" : [
Original file line number Diff line number Diff line change 124124 "category" : " sast" ,
125125 "name" : " Found Spring endpoint" ,
126126 "message" : " Found Spring endpoint" ,
127- "description" : " pl.com.softnet. example.springbootsoftnetexample .FakeErrorController is a Spring endpoint (Controller)" ,
128- "cve" : " 8e968b3dea7c8b68b43c07ab9b37c120:SPRING_ENDPOINT:src/main/java/pl/com/softnet/ example/springbootsoftnetexample /FakeErrorController.java:11" ,
127+ "description" : " dev.logchange. example.springbootlogchangeexample .FakeErrorController is a Spring endpoint (Controller)" ,
128+ "cve" : " 8e968b3dea7c8b68b43c07ab9b37c120:SPRING_ENDPOINT:src/main/java/dev/logchange/ example/springbootlogchangeexample /FakeErrorController.java:11" ,
129129 "severity" : " Low" ,
130130 "confidence" : " Low" ,
131131 "scanner" : {
132132 "id" : " find_sec_bugs" ,
133133 "name" : " Find Security Bugs"
134134 },
135135 "location" : {
136- "file" : " src/main/java/pl/com/softnet/ example/springbootsoftnetexample /FakeErrorController.java" ,
136+ "file" : " src/main/java/dev/logchange/ example/springbootlogchangeexample /FakeErrorController.java" ,
137137 "start_line" : 11 ,
138- "class" : " pl.com.softnet. example.springbootsoftnetexample .FakeErrorController" ,
138+ "class" : " dev.logchange. example.springbootlogchangeexample .FakeErrorController" ,
139139 "method" : " getSomeFakeError"
140140 },
141141 "identifiers" : [
You can’t perform that action at this time.
0 commit comments