diff --git a/CHANGELOG.md b/CHANGELOG.md index d712416eb8..a8802e816f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). ## Unreleased +- Fix #2094: Make Semgrep-based SAST analyzer available in tagged release - Feat #701: Code refactoring to separate upload status transitions and notifications to prepare for upload status overhaul - Security #1867: Update the gitlab static application security testing (SAST) job using the Semgrep-based analyzer diff --git a/ops/pipelines/gigadb-conformance-security-jobs.yml b/ops/pipelines/gigadb-conformance-security-jobs.yml index 6a25e9a7b6..09c01fabb9 100644 --- a/ops/pipelines/gigadb-conformance-security-jobs.yml +++ b/ops/pipelines/gigadb-conformance-security-jobs.yml @@ -70,6 +70,8 @@ check_PHPDoc: semgrep-sast: stage: conformance and security + rules: + - if: $CI_COMMIT_BRANCH || $CI_COMMIT_TAG variables: CS_ANALYZER_IMAGE: "$CI_TEMPLATE_REGISTRY_HOST/security-products/container-scanning:6"