Merge branch 'revert-13ef0b05' into 'main'

Revert "Merge branch 'set-sast-config-1' into 'main'"

See merge request bacon/rss-proxy!5
This commit was merged in pull request #5.
This commit is contained in:
Slava
2025-03-06 08:39:22 +00:00

View File

@@ -1,74 +1,66 @@
# You can override the included template(s) by including variable overrides
# SAST customization: https://docs.gitlab.com/ee/user/application_security/sast/#customizing-the-sast-settings
# Secret Detection customization: https://docs.gitlab.com/ee/user/application_security/secret_detection/pipeline/#customization
# Dependency Scanning customization: https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#customizing-the-dependency-scanning-settings
# Container Scanning customization: https://docs.gitlab.com/ee/user/application_security/container_scanning/#customizing-the-container-scanning-settings
# Note that environment variables can be set in several places
# See https://docs.gitlab.com/ee/ci/variables/#cicd-variable-precedence
workflow: workflow:
rules: rules:
- changes: - changes:
- proxy/**/* - proxy/**/*
- Dockerfile - Dockerfile
- requirements.txt - requirements.txt
when: always when: always
- when: never - when: never
stages: stages:
- build # - test
- pre_push - build
- push - pre_push
- test - push
- deploy
- review # test:
- dast # stage: test
- staging # image: python:3.11-alpine
- canary # script:
- production # - pip install -q -r requirements.txt
- incremental rollout 10% # - pip install -q pytest~=8.3.5
- incremental rollout 25% # - python -m unittest discover tests
- incremental rollout 50%
- incremental rollout 100%
- performance
- cleanup
build: build:
# needs:
# - test
stage: build stage: build
script: script:
- docker build -t $CI_REGISTRY/$CI_PROJECT_PATH:$CI_COMMIT_REF_SLUG . - docker build -t $CI_REGISTRY/$CI_PROJECT_PATH:$CI_COMMIT_REF_SLUG .
- docker tag $CI_REGISTRY/$CI_PROJECT_PATH:$CI_COMMIT_REF_SLUG $CI_REGISTRY/$CI_PROJECT_PATH:$CI_COMMIT_SHORT_SHA - docker tag $CI_REGISTRY/$CI_PROJECT_PATH:$CI_COMMIT_REF_SLUG $CI_REGISTRY/$CI_PROJECT_PATH:$CI_COMMIT_SHORT_SHA
- docker tag $CI_REGISTRY/$CI_PROJECT_PATH:$CI_COMMIT_REF_SLUG $CI_REGISTRY/$CI_PROJECT_PATH:latest - docker tag $CI_REGISTRY/$CI_PROJECT_PATH:$CI_COMMIT_REF_SLUG $CI_REGISTRY/$CI_PROJECT_PATH:latest
pre_push: pre_push:
needs: needs:
- build - build
stage: pre_push stage: pre_push
before_script: before_script:
- apk add --no-cache curl - apk add --no-cache curl
script: script:
- echo "Running container to test image" - echo "Running container to test image"
- docker run -d --rm --name test_container $CI_REGISTRY/$CI_PROJECT_PATH:$CI_COMMIT_REF_SLUG - docker run -d --rm --name test_container $CI_REGISTRY/$CI_PROJECT_PATH:$CI_COMMIT_REF_SLUG
- CONTAINER_IP=$(docker inspect -f '{{range.NetworkSettings.Networks}}{{.IPAddress}}{{end}}' - CONTAINER_IP=$(docker inspect -f '{{range.NetworkSettings.Networks}}{{.IPAddress}}{{end}}' test_container)
test_container) - |
- | echo "Waiting for the application to start..."
echo "Waiting for the application to start..." sleep 10
sleep 10 if curl --fail http://$CONTAINER_IP:5050/health; then
if curl --fail http://$CONTAINER_IP:5050/health; then echo "Healthcheck passed"
echo "Healthcheck passed" else
else echo "Healthcheck failed, stopping push"
echo "Healthcheck failed, stopping push" exit 1
exit 1 fi
fi
after_script: after_script:
- docker rm -f test_container - docker rm -f test_container
push: push:
needs: needs:
- pre_push - pre_push
stage: push stage: push
script: script:
- echo "$CI_REGISTRY_PASSWORD" | docker login -u "$CI_REGISTRY_USER" --password-stdin - echo "$CI_REGISTRY_PASSWORD" | docker login -u "$CI_REGISTRY_USER" --password-stdin $CI_REGISTRY
$CI_REGISTRY - docker push $CI_REGISTRY/$CI_PROJECT_PATH:$CI_COMMIT_SHORT_SHA
- docker push $CI_REGISTRY/$CI_PROJECT_PATH:$CI_COMMIT_SHORT_SHA - docker push $CI_REGISTRY/$CI_PROJECT_PATH:$CI_COMMIT_REF_SLUG
- docker push $CI_REGISTRY/$CI_PROJECT_PATH:$CI_COMMIT_REF_SLUG - docker push $CI_REGISTRY/$CI_PROJECT_PATH:latest
- docker push $CI_REGISTRY/$CI_PROJECT_PATH:latest
sast:
stage: test
include:
- template: Auto-DevOps.gitlab-ci.yml