Commit 39cc01b2 authored by Andres Anaya Amariels's avatar Andres Anaya Amariels 🚀
Browse files

main_security

parent 8bd94c46

capif/.gitlab-ci.yml

+8 −8
Original line number Diff line number Diff line 
stages:

#  - test  # to Security and Compliance gitLab

  - main_sast

  - main_security

  - main_container_scanning

  - sast

  - merge_request_staging_into_main
@@ -163,7 +163,7 @@ merge_request_staging_into_main: 
#  variables:

#      SAST_DEFAULT_ANALYZERS: "bandit" # to sast

#      CI_DEBUG_TRACE: "true"

#  stage: main_sast

#  stage: main_security

#  rules:

#    - if: '$CI_COMMIT_REF_NAME == "OCF16-first-steps-on-ci-at-gitlab-repository"'

#      when: always
@@ -176,7 +176,7 @@ merge_request_staging_into_main: 




#sast:

#  stage: main_sast

#  stage: main_security

#  variables:

##    DOCKER_DRIVER: overlay2

#    DOCKER_HOST: tcp://docker:2375
@@ -214,7 +214,7 @@ merge_request_staging_into_main: 
#    - docker-in-docker



#semgrep-sast:

#  stage: main_sast

#  stage: main_security

#  variables:

##    DOCKER_DRIVER: overlay2

#    DOCKER_HOST: tcp://docker:2375
@@ -231,7 +231,7 @@ merge_request_staging_into_main: 
#    - docker-in-docker



main_semgrep_sast:

  stage: main_sast

  stage: main_security

  extends: semgrep-sast

  variables:

#    DOCKER_DRIVER: overlay2
@@ -249,7 +249,7 @@ main_semgrep_sast: 
    - docker-in-docker



main_kubesec_sast:

  stage: main_sast

  stage: main_security

  extends: kubesec-sast

  before_script:

   - export TMP_PWD=$PWD
@@ -272,7 +272,7 @@ main_kubesec_sast: 
    - docker-in-docker



main_gemnasium_python_dependency_scanning:

  stage: main_sast

  stage: main_security

  extends: gemnasium-python-dependency_scanning

  variables:

    DS_ANALYZER_NAME: "gemnasium-python"
@@ -287,7 +287,7 @@ main_gemnasium_python_dependency_scanning: 
    - docker-in-docker



main_serect_detection:

  stage: main_sast

  stage: main_security

  extends: secret_detection

  variables:

    SECRET_DETECTION_HISTORIC_SCAN: "true"