From b903a20a58a66714b3840e3ced14321d442ba10e Mon Sep 17 00:00:00 2001 From: Andrea Toska Date: Mon, 28 Apr 2025 11:54:18 +0200 Subject: [PATCH 1/2] attempt to run SAST --- .gitlab-ci.yml | 19 ++++++++++++++++++- 1 file changed, 18 insertions(+), 1 deletion(-) diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 3098a7f..e1dfe06 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -12,7 +12,7 @@ stages: - initialize-submodules - build - push - + - test # for SAST + Dependency Scanning build: stage: build @@ -31,3 +31,20 @@ push: only: - main +sast: + stage: test + allow_failure: true + artifacts: + reports: + sast: gl-sast-report.json + rules: + - if: $CI_COMMIT_BRANCH + +dependency_scanning: + stage: test + allow_failure: true + artifacts: + reports: + dependency_scanning: gl-dependency-scanning-report.json + rules: + - if: $CI_COMMIT_BRANCH From 9cc643814f558da322d03fbfa29467c922f8eedc Mon Sep 17 00:00:00 2001 From: andrea <1-ssdrive@users.noreply.git.perditum.com> Date: Mon, 28 Apr 2025 09:56:56 +0000 Subject: [PATCH 2/2] Update .gitlab-ci.yml file --- .gitlab-ci.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index e1dfe06..8ae1303 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -34,6 +34,7 @@ push: sast: stage: test allow_failure: true + script: ['echo "Running SAST scan"'] artifacts: reports: sast: gl-sast-report.json @@ -43,6 +44,7 @@ sast: dependency_scanning: stage: test allow_failure: true + script: ['echo "Running dep scan"'] artifacts: reports: dependency_scanning: gl-dependency-scanning-report.json