Add Gitlab SAST Reporter

[shane-davidson]

Add Gitlab SAST reporter

Created a PR for a Gitlab SAST reporter I made and use on our private Gitlab instance. Can't promise I'll have time to fix it up or anything but thought you guys might like to take what I've done so far and run with it :)

[echoix]

I don't have CI experience with GitLab, so can't review if it is the right thing that is done.

For your comments questioning if we should extract SARIF functionality in another file/class, I agree that it can be a good idea if it's possible, but I don't have it as a strong requirement for this specific PR, it can be in another one or this one.

[echoix]

And thanks for sharing this, more people will benefit from it, that's the goal of Megalinter, to combine the efforts of setting up many linters and using them all easily in CI, without every project having to reinvent the wheel to make it usable.

[echoix]

I don't know how to continue with this one, it's not my skillset

[echoix]

@TommyE123 since you seem to be using GitLab casually, would you mind giving your opinion on this, and if it is correct to merge as is? It's been waiting a bit

[echoix]

@TommyE123 what does the thumbs up reaction to my comment mean? That you will do, or it is an approval/review, that it is a solution adapted for this environment?

[TommyE123]

@TommyE123 what does the thumbs up reaction to my comment mean? That you will do, or it is an approval/review, that it is a solution adapted for this environment?

Means I can have a look 🙂

[nvuillam]

Sorry I'm late :)

This PR is great and i'd love to merge it, but there are additional updates to complete :)

• documentation: Create a GitlabSastReporter like this one https://github.com/oxsecurity/megalinter/blob/main/docs/reporters/GitlabCommentReporter.md :)
• code factorization: there is already code generating SARIF, so let's call it instead of copy-pasting it ^^
• JSON Schema must contain GITLAB_SAST_REPORTER related variables -> https://github.com/oxsecurity/megalinter/blob/main/megalinter/descriptors/schemas/megalinter-configuration.jsonschema.json

[github-actions]

This pull request has been automatically marked as stale because it has not had recent activity.
It will be closed in 14 days if no further activity occurs.
Thank you for your contributions.

If you think this pull request should stay open, please remove the O: stale 🤖 label or comment on the pull request.

[nvuillam]

Anyone wanting to complete this nice PR to apply my comments ? 😋

[github-actions]

This pull request has been automatically marked as stale because it has not had recent activity.
It will be closed in 14 days if no further activity occurs.
Thank you for your contributions.

If you think this pull request should stay open, please remove the O: stale 🤖 label or comment on the pull request.

[github-actions]

This pull request has been automatically marked as stale because it has not had recent activity.
It will be closed in 14 days if no further activity occurs.
Thank you for your contributions.

If you think this pull request should stay open, please remove the O: stale 🤖 label or comment on the pull request.