Commit 6ac5f731 authored by Andres Anaya Amariels's avatar Andres Anaya Amariels 🚀
Browse files

sast

parent 88b52ea0

capif/.gitlab-ci.yml

+1 −24
Original line number Diff line number Diff line 
stages:

  - test  # to Security and Compliance gitLab

  - main_build

  - main_security

  - sast

  - merge_request_staging_into_main
@@ -30,7 +29,6 @@ variables: 
  CI_DEBUG_TRACE: "true"

  PROJECT_ID: "294"

  SAST_DEFAULT_ANALYZERS: "bandit" # to sast

  COMPILE: "false"   # to sast



.staging_common: &staging_common

  only:
@@ -91,7 +89,7 @@ dev_cancel_previous_action: 
  <<: *dev_common



include:

 - template: Security/SAST.gitlab-ci.yml

 - template: 'Jobs/SAST.gitlab-ci.yml'

 - project: 'ocf/pipeline-scripts'

   ref: cicd-capif

   file:
@@ -123,25 +121,8 @@ merge_request_staging_into_main: 
  only:

    - staging



main_build_pip:

  stage: main_build

  tags:

    - shell

  script:

    - |

      pip install -r services/TS29222_CAPIF_Access_Control_Policy_API/requirements.txt 

  rules:

    - if: '$CI_COMMIT_REF_NAME == "OCF16-first-steps-on-ci-at-gitlab-repository"'

      when: always

    - when: never

  artifacts:

    paths:

      - ./



sast:

  stage: main_security

  needs:

    - main_build_pip

  rules:

    - if: '$CI_COMMIT_REF_NAME == "OCF16-first-steps-on-ci-at-gitlab-repository"'

      when: always
@@ -149,10 +130,6 @@ sast: 
  script:

    - |

      echo "This is the SAST stage for your Python project."

      ls -lrta

  artifacts:

    reports:

      sast: gl-sast-report.json

  tags:

    - docker