Commit 1c4ef979 authored by Andres Anaya Amariels's avatar Andres Anaya Amariels 🚀
Browse files

container_scanning_nginx

parent cd1061c0

capif/.gitlab-ci.yml

+26 −0
Original line number Diff line number Diff line
@@ -29,6 +29,9 @@ variables: 
  CI_DEBUG_TRACE: "true"

  PROJECT_ID: "294"

  SAST_EXCLUDED_ANALYZERS: "nodejs-scan"

  CI_REGISTRY_USER: $CI_REGISTRY_USER

  CI_REGISTRY: $CI_REGISTRY

  CAPIF_DOCKER_REGISTRY: $CAPIF_DOCKER_REGISTRY



.staging_common: &staging_common

  only:
@@ -91,6 +94,7 @@ dev_cancel_previous_action: 
include:

 - template: 'Jobs/SAST.gitlab-ci.yml'

 - template: 'Jobs/Dependency-Scanning.gitlab-ci.yml'

 - template: 'Jobs/Container-Scanning.gitlab-ci.yml'

 - project: 'ocf/pipeline-scripts'

   ref: cicd-capif

   file:
@@ -223,6 +227,28 @@ gemnasium-python-dependency_scanning: 
  tags:

    - docker-in-docker



container_scanning_nginx:

  stage: main_security

  before_script:

    - export TMP_PWD=$PWD

    - echo "TMP_PWD=$TMP_PWD"

#    - docker login --username $CI_REGISTRY_USER --password $CAPIF_DOCKER_REGISTRY $CI_REGISTRY

  variables:

#    CS_DEFAULT_BRANCH_IMAGE: $CI_REGISTRY_IMAGE/$CI_DEFAULT_BRANCH:$CI_COMMIT_SHA

    CI_IMAGE: $CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/nginx:$CI_COMMIT_REF_SLUG

    CS_REGISTRY_USER: $CI_REGISTRY_USER

    CS_REGISTRY_PASSWORD: $CAPIF_DOCKER_REGISTRY

    CS_DOCKERFILE_PATH: capif/services/nginx/

  allow_failure: true

  services:

    - docker:24.0.5-dind

  rules:

    - if: '$CI_COMMIT_REF_NAME == "OCF16-first-steps-on-ci-at-gitlab-repository"'

      when: always

    - when: never

  tags:

    - docker-in-docker



#ci_in_staging:

#  stage: ci_in_staging

#  script: