ShiftLeftSecurity / sast-scan

Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and Git friendly.

Home Page:https://discord.gg/DCNxzaeUpd

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

.sastscanrc file is not read from the current directory when invoking from within the docker

prabhu opened this issue · comments

https://github.com/ShiftLeftSecurity/sast-scan/blob/master/lib/config.py#L1594

It is possibly expecting SAST_SCAN_SRC_DIR to be set which could default to "."

I think we should revisit this style of overriding config and see if there is a better approach out there.