Configure SAST in .gitlab-ci.yml, creating this file if it does not already exist

This commit is contained in:
Slava
2024-03-08 12:19:47 +00:00
parent 22ac4bdff0
commit c960157afb

View File

@@ -1,28 +1,29 @@
# You can override the included template(s) by including variable overrides
# SAST customization: https://docs.gitlab.com/ee/user/application_security/sast/#customizing-the-sast-settings
# Secret Detection customization: https://docs.gitlab.com/ee/user/application_security/secret_detection/#customizing-settings
# Dependency Scanning customization: https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#customizing-the-dependency-scanning-settings
# Container Scanning customization: https://docs.gitlab.com/ee/user/application_security/container_scanning/#customizing-the-container-scanning-settings
# Note that environment variables can be set in several places
# See https://docs.gitlab.com/ee/ci/variables/#cicd-variable-precedence
qodana: qodana:
only: only:
- master - master
- merge_requests - merge_requests
image: image:
name: jetbrains/qodana-python-community name: jetbrains/qodana-python-community
entrypoint: [""] entrypoint:
- ''
variables: variables:
QODANA_TOKEN: $qodana_token QODANA_TOKEN: "$qodana_token"
script: script:
- qodana --save-report --results-dir=$CI_PROJECT_DIR/.qodana/results - qodana --save-report --results-dir=$CI_PROJECT_DIR/.qodana/results --cache-dir=$CI_PROJECT_DIR/.qodana/cache
--cache-dir=$CI_PROJECT_DIR/.qodana/cache
artifacts: artifacts:
expose_as: 'qodana_report' expose_as: qodana_report
paths: [ '.qodana/results/' ] paths:
- ".qodana/results/"
# codacy: stages:
# only: - test
# - master sast:
# - merge_request stage: test
# image: include:
# name: alpine - template: Security/SAST.gitlab-ci.yml
# variables:
# CODACY_PROJECT_TOKEN: $CODACY_PROJECT_TOKEN
# script:
# - apk add bash curl
# - bash <(curl -Ls https://coverage.codacy.com/get.sh)