Add Datadog.configuration.appsec.rasp_enabled

[y9v]

What does this PR do?
It adds DD_APPSEC_RASP_ENABLED setting to AppSec for disabling RASP.

Motivation:
This RFC

Change log entry
Yes. AppSec: Add setting to disable RASP checks

Additional Notes:
None.

How to test the change?
CI is enough

[github-actions]

Thank you for updating Change log entry section 👏

^{Visited at: 2025-01-22 15:41:49 UTC}

[datadog-datadog-prod-us1]

Datadog Report

Branch report: appsec-add-rasp-enabled-config
Commit report: c0da9a0
Test service: dd-trace-rb

✅ 0 Failed, 22099 Passed, 1476 Skipped, 6m 24.74s Total Time

[codecov-commenter]

Codecov Report

Attention: Patch coverage is 98.88889% with 1 line in your changes missing coverage. Please review.

Project coverage is 97.72%. Comparing base (a49a11c) to head (65e8bfb).

Files with missing lines	Patch %	Lines
...c/contrib/active_record/postgresql_adapter_spec.rb	96.15%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #4311      +/-   ##
==========================================
+ Coverage   97.71%   97.72%   +0.01%     
==========================================
  Files        1365     1365              
  Lines       82726    82780      +54     
  Branches     4205     4206       +1     
==========================================
+ Hits        80833    80895      +62     
+ Misses       1893     1885       -8     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[pr-commenter]

Benchmarks

Benchmark execution time: 2025-01-24 09:10:03

Comparing candidate commit 65e8bfb in PR branch appsec-add-rasp-enabled-config with baseline commit a49a11c in branch master.

Found 0 performance improvements and 0 performance regressions! Performance is the same for 31 metrics, 2 unstable metrics.

[Strech]

Agree to put it inside the instrumentation level until we find a better way to not assemble data if RASP is disabled.

It's tempting to move it into the Context.run_rasp method, but performance wise, it means we will assemble data for WAF without a need and it might be costly

[marcotc]

One question: what is rasp? I can't documentation for it in our source code. If one doesn't exist, can we add a short blurb explaining what is it? (anywhere is fine)

[Strech]

@marcotc RASP is a new term used in AppSec and it means Runtime Application Self-Protection

[y9v]

@marcotc I added an explanation in a comment in appsec/configuration/settings.rb: c0da9a0

[datadog-datadog-prod-us1]

Datadog Report

Branch report: appsec-add-rasp-enabled-config
Commit report: 65e8bfb
Test service: dd-trace-rb

✅ 0 Failed, 22094 Passed, 1477 Skipped, 5m 34.56s Total Time