fager/deployment-helper
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge branch 'set-sast-config-1' into 'main'

Browse source 
Configure SAST in `.gitlab-ci.yml`, creating this file if it does not already exist

See merge request fager/deployment-helper!3
This commit is contained in:
Frank Agerholm 2023-08-08 13:10:56 +00:00
commit 9cb60ea79f
1 changed files with 14 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

33
.gitlab-ci.yml
View file

@ -1,23 +1,21 @@
# You can override the included template(s) by including variable overrides # You can override the included template(s) by including variable overrides
# SAST customization: https://docs.gitlab.com/ee/user/application_security/sast/#customizing-the-sast-settings # SAST customization: https://docs.gitlab.com/ee/user/application_security/sast/#customizing-the-sast-settings
# Secret Detection customization: https://docs.gitlab.com/ee/user/application_security/secret_detection/#customizing-settings # Secret Detection customization: https://docs.gitlab.com/ee/user/application_security/secret_detection/#customizing-settings
# Dependency Scanning customization: https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#customizing-the-dependency-scanning-settings
# Container Scanning customization: https://docs.gitlab.com/ee/user/application_security/container_scanning/#customizing-the-container-scanning-settings
# Note that environment variables can be set in several places # Note that environment variables can be set in several places
# See https://docs.gitlab.com/ee/ci/variables/#cicd-variable-precedence # See https://docs.gitlab.com/ee/ci/variables/#cicd-variable-precedence
#image: docker:19.03
image: docker:git image: docker:git
services: services:
#- docker:19.03-dind
- docker:dind - docker:dind
variables: variables:
DOCKER_HOST: tcp://docker:2376 DOCKER_HOST: tcp://docker:2376
DOCKER_TLS_CERTDIR: "/certs" DOCKER_TLS_CERTDIR: "/certs"
stages: stages:
- commit - commit
- build - build
- test - test
- deploy - deploy
build: build:
stage: build stage: build
before_script: before_script:
@ -25,30 +23,27 @@ build:
script: script:
- docker build --tag $CI_REGISTRY_IMAGE:job-$CI_PIPELINE_ID . - docker build --tag $CI_REGISTRY_IMAGE:job-$CI_PIPELINE_ID .
- docker push $CI_REGISTRY_IMAGE:job-$CI_PIPELINE_ID - docker push $CI_REGISTRY_IMAGE:job-$CI_PIPELINE_ID
test: test:
stage: test stage: test
image: $CI_REGISTRY_IMAGE:job-$CI_PIPELINE_ID image: "$CI_REGISTRY_IMAGE:job-$CI_PIPELINE_ID"
script: script:
- python --version - python --version
- nikola --version - nikola --version
- pip --version - pip --version
- pip freeze - pip freeze
deploy: deploy:
stage: deploy stage: deploy
before_script: before_script:
- docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY - docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
script: script:
- docker pull $CI_REGISTRY_IMAGE:job-$CI_PIPELINE_ID - docker pull $CI_REGISTRY_IMAGE:job-$CI_PIPELINE_ID
- docker tag $CI_REGISTRY_IMAGE:job-$CI_PIPELINE_ID $CI_REGISTRY_IMAGE:latest - docker tag $CI_REGISTRY_IMAGE:job-$CI_PIPELINE_ID $CI_REGISTRY_IMAGE:latest
- docker push $CI_REGISTRY_IMAGE:latest - docker push $CI_REGISTRY_IMAGE:latest
include: include:
- template: Security/SAST.gitlab-ci.yml - template: Security/SAST.gitlab-ci.yml
- template: Security/Container-Scanning.gitlab-ci.yml - template: Security/Container-Scanning.gitlab-ci.yml
container_scanning: container_scanning:
variables: variables:
CS_IMAGE: $CI_REGISTRY_IMAGE:job-$CI_PIPELINE_ID CS_IMAGE: "$CI_REGISTRY_IMAGE:job-$CI_PIPELINE_ID"
sast:
stage: test