add security scanner

.gitlab-ci.yml

@@ -1,4 +1,4 @@
-image:  node:lts-buster
+image: node:lts-buster
 
 stages:
   - test
@@ -12,9 +12,9 @@ cache:
 
 default:
   before_script:
-  - apt update && apt -qqy install openjdk-11-jre-headless 
-  - npm install
-  - npm install -g --save-dev shadow-cljs
+    - apt update && apt -qqy install openjdk-11-jre-headless
+    - npm install
+    - npm install -g --save-dev shadow-cljs
 
 build:
   stage: test
@@ -27,7 +27,7 @@ package:
     - if: '$CI_COMMIT_BRANCH == "master"'
   artifacts:
     paths:
-    - target/
+      - target/
   script:
     - shadow-cljs compile app
     - chmod a+x target/mastodon-bot.js
@@ -52,7 +52,6 @@ upload-prerelease:
     - npm version --no-git-tag-version prerelease
     - npm publish ./target/npm-build/mastodon_bot --access public
 
-
 upload-release:
   stage: upload
   rules:
@@ -70,3 +69,12 @@ upload-release:
     - cp README.md target/npm-build/mastodon_bot/
     - npm version --no-git-tag-version $CI_COMMIT_TAG
     - npm publish ./target/npm-build/mastodon_bot --access public
+
+sast:
+  variables:
+    SAST_EXCLUDED_ANALYZERS:
+      bandit, brakeman, flawfinder, gosec, kubesec, phpcs-security-audit,
+      pmd-apex, security-code-scan, sobelow, spotbugs
+  stage: test
+include:
+  - template: Security/SAST.gitlab-ci.yml