Issue #3609437 by dydave: Gitlab CI: Enabled automated security scans.

David Suissarequested to merge
issue/admin_toolbar-3609437:3609437-enable-gitlab-security into 3.x

https://www.drupal.org/project/admin_toolbar/issues/3609437

Enabled Gitlab CI security scans:

  • Added code for composer audit, but commented out, since it does not seem really necessary in the project for now, since the module has no dependency other than Drupal core.
  • Added variable RUN_JOB_SECRET_DETECTION for secret detection.
  • Enabled GitLab Advanced SAST for comprehensive PHP/JS scanning of the module's source code.
  • Enabled semgrep-sast for additional language support (limited scope) of the module's source code.
  • Disabled testing for next major, since 3.x will not support D12.

Merge request reports