diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index cf7ef5fee350230fb7b9b1e13aaae4b4dc4664da..91de1c73a94a7c92922526d060fcfb83df37aad3 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -13,6 +13,8 @@ variables:
 include:
 - 'https://git.dbogatov.org/templates/ci-snippets/raw/master/simple-website/before-script.yml'
 
+# - 'https://git.dbogatov.org/templates/ci-snippets/raw/master/code-quality.yml'
+
 - 'https://git.dbogatov.org/templates/ci-snippets/raw/master/simple-website/tidy.yml'
 - 'https://git.dbogatov.org/templates/ci-snippets/raw/master/simple-website/blc.yml'
 
@@ -23,24 +25,16 @@ include:
 - 'https://git.dbogatov.org/templates/ci-snippets/raw/master/simple-website/dockerify.yml'
 - 'https://git.dbogatov.org/templates/ci-snippets/raw/master/simple-website/pages.yml'
 
-code-quality:
-  stage: test
-  # image: docker:stable
-  # variables:
-  #   DOCKER_DRIVER: overlay2
+sast:
   allow_failure: true
-  # services:
-  #   - docker:stable-dind
   script:
     - export SP_VERSION=$(echo "$CI_SERVER_VERSION" | sed 's/^\([0-9]*\)\.\([0-9]*\).*/\1-\2-stable/')
     - |
       docker run \
-        --env SOURCE_CODE="$PWD" \
-        --volume "$PWD":/code \
+        --env SAST_CONFIDENCE_LEVEL="${SAST_CONFIDENCE_LEVEL:-3}" \
+        --volume "$PWD:/code" \
         --volume /var/run/docker.sock:/var/run/docker.sock \
-        "registry.gitlab.com/gitlab-org/security-products/codequality:$SP_VERSION" /code
+        "registry.gitlab.com/gitlab-org/security-products/sast:$SP_VERSION" /app/bin/run /code
   artifacts:
     reports:
-      codequality: gl-code-quality-report.json
-  tags:
-  - shell
+      sast: gl-sast-report.json