diff --git a/docs/figures/SAST-report.png b/docs/figures/SAST-report.png new file mode 100644 index 0000000..8c90431 Binary files /dev/null and b/docs/figures/SAST-report.png differ diff --git a/docs/questions-part3.md b/docs/questions-part3.md index 644a8d7..b83f541 100644 --- a/docs/questions-part3.md +++ b/docs/questions-part3.md @@ -8,3 +8,12 @@ - **Q3.4**: Implement a DAST solution in your pipeline. Get some inspiration here https://docs.gitlab.com/ee/user/application_security/dast/ . Describe what you have integrated in your pipeline. *Note: you must ensure that your application is running while you are testing!* - **Q3.5 (optional)**: Normally, the provided code has some bugs, which are discovered by SAST solution. Describe the found bugs (in the original code, git tag `v3.0`) and provide solution to remediate the problems. Indicate which commit/tag contains the corrected code - **Q3.6 (optional)**: Describe the found bugs (in the original code, git tag `v3.0`) with DAST and provide solution to remediate the problems. Indicate which commit/tag contains the corrected code. Do corrections only in the provided code (no libraries) + + +# Answers - Part 3 + +## Q3.2 + +For some reasons, semgrep works locally, but not on GitLab. Here is the report when runned locally. + +![SAST-report](figures/SAST-report.png) \ No newline at end of file