added back the .semgrepignore

.semgrepignore

+# Common large paths
+node_modules/
+build/
+dist/
+vendor/
+.env/
+.venv/
+.tox/
+*.min.js
+.npm/
+.yarn/
+
+# in our case
+./case-5-docs/docs/_build/*
+./case-5-docs/docs/source/_static/* 
+test_*
+
+# Common test paths
+test/
+tests/
+testsuite/
+*_test.go

ci-configs/case-4-security/sast.yml

@@ -7,8 +7,6 @@ variables:
 
 sast:
   stage: code_quality
-  variables:
-    SAST_EXCLUDED_PATHS: "./case-5-docs/docs/_build/* ./case-5-docs/docs/source/_static/* "
   artifacts:
     paths:
       - $SAST_REPORT_FILE

ci-configs/case-4-security/secret_detection.yml

@@ -3,13 +3,10 @@ include:
 
 variables:
   SECRET_DETECTION_REPORT_FILE: "gl-secret-detection-report.json"
-  # ALLOWLIST_FILE: "allowlist.yml"
   # SECURE_LOG_LEVEL: "debug"
 
 secret_detection:
   stage: code_quality
-  # script:
-  #   - secret-detect --allowlist $ALLOWLIST_FILE
   artifacts:
     paths:
       - $SECRET_DETECTION_REPORT_FILE