GitLab Advanced SAST rules

The GitLab Advanced SAST analyzer uses the following rules to detect vulnerabilities in source code.

If a rule reports a finding in code you know is safe, you can:

• Suppress findings on that line.
• Disable the rule.
• Dismiss the vulnerability.

If the finding is a real vulnerability, remediate it.

Coverage summary