Integrate external security scanners into your DevSecOps workflow

This post details how to integrate external security scanners (specifically Snyk for dependency scanning and SAST) into GitLab's DevSecOps workflow. It provides concrete examples of CI/CD pipeline configurations and Python scripts to parse Snyk's JSON output into GitLab's expected `gl-dependency-scanning-report.json` format. It also demonstrates using a community-maintained SARIF converter to process Snyk's SARIF output into a `sast.json` artifact for SAST results. The goal is to display external scanner findings directly in the GitLab merge request widget and vulnerability report.