DevOps Intelligence supports your use of GitLab SAST. This page describes the configuration requirements for this tool.
If you’re using GitLab CI/CD, you can use Static Application Security Testing (SAST) to check your source code for known vulnerabilities. You can run SAST analyzers in any GitLab tier. The analyzers produce JSON-formatted reports as job artifacts. Use the following procedure to configure GitLab SAST:
Navigate to the Tools Configuration page (Devops Intelligence --> Settings and Utilities --> Tools Configuration).