Issue #3606556 by dydave: Gitlab CI: Enabled automated security scans.

David Suissarequested to merge
issue/block_class-3606556:3606556-enable-gitlab-security into 3.1.x

https://www.drupal.org/project/block_class/issues/3606556

Enabled Gitlab CI security scans:

  • Added code for composer audit, but commented out, since it does not seem really necessary in the project for now, since the module has no dependency other than Drupal core.
  • Added variable RUN_JOB_SECRET_DETECTION for secret detection.
  • Enabled GitLab Advanced SAST for comprehensive PHP/JS scanning of the module's source code.
  • Enabled semgrep-sast for additional language support (limited scope) of the module's source code.
  • Revamped phpstan (previous major) rules to remove the Attributes causing the validation errors, before running phpstan's analysis.

Merge request reports