ShiftLeftSecurity / sast-scan

Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and Git friendly.
https://discord.gg/DCNxzaeUpd
Apache License 2.0
788 stars 112 forks source link

Scan always finish with exit code 1 #384

Closed guidorapisarda closed 1 year ago

guidorapisarda commented 1 year ago

I'm using the docker run --rm -e "WORKSPACE=${PWD}" -v $PWD:/app shiftleft/sast-scan scan command to execute scans on my repo (it has python and terraform code). The exit code is always 1 (error) and no log is printed on the console. Error

I tried removing all the types of scan one by one, just to find that whatever scan type I'm using, it always ends with exit code 1. Can i enable some log tracing?

prabhu commented 1 year ago

@guidorapisarda automatic build breaker is a feature and is based on critical and high vulnerabilities found. You can pass the argument --no-error to disable this

guidorapisarda commented 1 year ago

Okey, thanks for the info and for your very fast response. I couldn't find that option on my own 🤣

prabhu commented 1 year ago

Not an issue. Happy to help!