49 lines
1.8 KiB
YAML
49 lines
1.8 KiB
YAML
# You can override the included template(s) by including variable overrides
|
|
# SAST customization: https://docs.gitlab.com/ee/user/application_security/sast/#customizing-the-sast-settings
|
|
# Secret Detection customization: https://docs.gitlab.com/ee/user/application_security/secret_detection/#customizing-settings
|
|
# Dependency Scanning customization: https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#customizing-the-dependency-scanning-settings
|
|
# Container Scanning customization: https://docs.gitlab.com/ee/user/application_security/container_scanning/#customizing-the-container-scanning-settings
|
|
# Note that environment variables can be set in several places
|
|
# See https://docs.gitlab.com/ee/ci/variables/#cicd-variable-precedence
|
|
image: docker:git
|
|
services:
|
|
- docker:dind
|
|
variables:
|
|
DOCKER_HOST: tcp://docker:2376
|
|
DOCKER_TLS_CERTDIR: "/certs"
|
|
stages:
|
|
- commit
|
|
- build
|
|
- test
|
|
- deploy
|
|
build:
|
|
stage: build
|
|
before_script:
|
|
- docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
|
|
script:
|
|
- docker build --tag $CI_REGISTRY_IMAGE:job-$CI_PIPELINE_ID .
|
|
- docker push $CI_REGISTRY_IMAGE:job-$CI_PIPELINE_ID
|
|
test:
|
|
stage: test
|
|
image: "$CI_REGISTRY_IMAGE:job-$CI_PIPELINE_ID"
|
|
script:
|
|
- python --version
|
|
- nikola --version
|
|
- pip --version
|
|
- pip freeze
|
|
deploy:
|
|
stage: deploy
|
|
before_script:
|
|
- docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
|
|
script:
|
|
- docker pull $CI_REGISTRY_IMAGE:job-$CI_PIPELINE_ID
|
|
- docker tag $CI_REGISTRY_IMAGE:job-$CI_PIPELINE_ID $CI_REGISTRY_IMAGE:latest
|
|
- docker push $CI_REGISTRY_IMAGE:latest
|
|
include:
|
|
- template: Security/SAST.gitlab-ci.yml
|
|
- template: Security/Container-Scanning.gitlab-ci.yml
|
|
container_scanning:
|
|
variables:
|
|
CS_IMAGE: "$CI_REGISTRY_IMAGE:job-$CI_PIPELINE_ID"
|
|
sast:
|
|
stage: test
|