Issue #3606556 by dydave: Gitlab CI: Enabled automated security scans.

David Suissarequested to merge
issue/block_class-3606556:3606556-enable-gitlab-security-4.0.X into 4.0.x

https://www.drupal.org/project/block_class/issues/3606556

Ported from MR !84 (merged) on the 3.1.x branch.

Enabled Gitlab CI security scans:

  • Added code for composer audit, but commented out, since it does not seem really necessary in the project for now, since the module has no dependency other than Drupal core.
  • Added variable RUN_JOB_SECRET_DETECTION for secret detection.
  • Enabled GitLab Advanced SAST for comprehensive PHP/JS scanning of the module's source code.
  • Enabled semgrep-sast for additional language support (limited scope) of the module's source code.

Merge request reports