Problem Statement

• This story is a follow-up to the Jira card "Evaluate SAST Tools for Proactively Detecting CVEs in sdg_hub"
• Recap: The AI Innovation team will be responsible for remediating CVEs introduced in their sdg_hub repository such that Red Hat AI 3.0 products which ultimately consume some form of sdg_hub do not contain those CVEs. However, the AI Innovation Team needs the ability to proactively detect CVEs so that CVEs are detected as early on as possible in the release lifecycle to give themselves ample time handle those CVEs

Goals

• Install/integrate the SAST tools/integrations that were identified in Jira card "Evaluate SAST Tools for Proactively Detecting CVEs in sdg_hub"

Acceptance Criteria

• The identified tools/integrations are installed or connected

Out of Scope

• Investigative (spike) work is done in "Evaluate SAST Tools for Proactively Detecting CVEs in sdg_hub"