diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 8479291..c11b5fe 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -1,6 +1,7 @@ include: - template: Jobs/Code-Quality.gitlab-ci.yml - template: Jobs/Secret-Detection.gitlab-ci.yml + - template: Jobs/SAST.gitlab-ci.yml cache: key: one-key-to-rule-them-all @@ -197,6 +198,13 @@ secret_detection: - if: $CI_PIPELINE_SOURCE == "merge_request_event" - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH +semgrep-sast: + rules: + - if: $SAST_DISABLED + when: never + - if: $CI_PIPELINE_SOURCE == "merge_request_event" + - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH + test_coverage: extends: test allow_failure: true