From 5490955e397752f1a592fe803a0647f1dc6112dd Mon Sep 17 00:00:00 2001 From: Eran Turgeman Date: Tue, 2 Jun 2026 14:06:05 +0300 Subject: [PATCH 1/2] keep JF_SAST_DEFAULT_SCAN_MODE when sanitizing JF env --- utils/getconfiguration.go | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/utils/getconfiguration.go b/utils/getconfiguration.go index f9649dc9b..ba62cd165 100644 --- a/utils/getconfiguration.go +++ b/utils/getconfiguration.go @@ -482,7 +482,8 @@ func extractVcsProviderFromEnv() (vcsutils.VcsProvider, error) { func SanitizeEnv() error { for _, env := range os.Environ() { - if !strings.HasPrefix(env, "JF_") { + // We leave JF_SAST_DEFAULT_SCAN_MODE as this must be populated as env var to the Sast scanner + if !strings.HasPrefix(env, "JF_") || strings.Contains(env, "JF_SAST_DEFAULT_SCAN_MODE") { continue } envSplit := strings.Split(env, "=") From 041d7b25ab1f80469fe869e0d03132da5091e5fe Mon Sep 17 00:00:00 2001 From: Eran Turgeman Date: Thu, 4 Jun 2026 09:20:32 +0300 Subject: [PATCH 2/2] keep all JF_SAST* when sanitizing JF env --- utils/getconfiguration.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/utils/getconfiguration.go b/utils/getconfiguration.go index ba62cd165..429ff7ec3 100644 --- a/utils/getconfiguration.go +++ b/utils/getconfiguration.go @@ -483,7 +483,7 @@ func extractVcsProviderFromEnv() (vcsutils.VcsProvider, error) { func SanitizeEnv() error { for _, env := range os.Environ() { // We leave JF_SAST_DEFAULT_SCAN_MODE as this must be populated as env var to the Sast scanner - if !strings.HasPrefix(env, "JF_") || strings.Contains(env, "JF_SAST_DEFAULT_SCAN_MODE") { + if !strings.HasPrefix(env, "JF_") || strings.HasPrefix(env, "JF_SAST") { continue } envSplit := strings.Split(env, "=")