forked from oscar.krause/fastapi-dls
added SAST
This commit is contained in:
parent
1b9ebb48b1
commit
938fc6bd60
@ -1,6 +1,7 @@
|
|||||||
include:
|
include:
|
||||||
- template: Jobs/Code-Quality.gitlab-ci.yml
|
- template: Jobs/Code-Quality.gitlab-ci.yml
|
||||||
- template: Jobs/Secret-Detection.gitlab-ci.yml
|
- template: Jobs/Secret-Detection.gitlab-ci.yml
|
||||||
|
- template: Jobs/SAST.gitlab-ci.yml
|
||||||
|
|
||||||
cache:
|
cache:
|
||||||
key: one-key-to-rule-them-all
|
key: one-key-to-rule-them-all
|
||||||
@ -197,6 +198,13 @@ secret_detection:
|
|||||||
- if: $CI_PIPELINE_SOURCE == "merge_request_event"
|
- if: $CI_PIPELINE_SOURCE == "merge_request_event"
|
||||||
- if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
|
- if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
|
||||||
|
|
||||||
|
semgrep-sast:
|
||||||
|
rules:
|
||||||
|
- if: $SAST_DISABLED
|
||||||
|
when: never
|
||||||
|
- if: $CI_PIPELINE_SOURCE == "merge_request_event"
|
||||||
|
- if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
|
||||||
|
|
||||||
test_coverage:
|
test_coverage:
|
||||||
extends: test
|
extends: test
|
||||||
allow_failure: true
|
allow_failure: true
|
||||||
|
Loading…
Reference in New Issue
Block a user