Merge branch 'da/ignore-tests-in-security-reports' into 'master'

Dont run SAST on tests

See merge request gitlab-org/gitlab-ce!32011

.gitlab/ci/reports.gitlab-ci.yml

@@ -19,6 +19,7 @@ sast:
   cache: {}
   variables:
     SAST_BRAKEMAN_LEVEL: 2
+    SAST_EXCLUDED_PATHS: qa,spec,doc
 
 dependency_scanning:
   extends: .dedicated-no-docs