Commit 74eba925 authored by Andres Anaya Amariels's avatar Andres Anaya Amariels 🚀
Browse files

test

parent 1a0cb235

capif/.gitlab-ci.yml

+39 −22
Original line number Diff line number Diff line
@@ -136,7 +136,45 @@ merge_request_staging_into_main: 
#    - docker





main_sast:

#sast:

#  stage: main_security

#  variables:

##    DOCKER_DRIVER: overlay2

#    DOCKER_HOST: tcp://docker:2375

#    SAST_EXCLUDED_ANALYZERS: "nodejs-scan-sast"

#    SAST_DEFAULT_ANALYZERS: bandit

#  allow_failure: true

#  services:

#    - docker:24.0.5-dind

#  rules:

#    - if: '$CI_COMMIT_REF_NAME == "OCF16-first-steps-on-ci-at-gitlab-repository"'

#      when: always

#    - when: never

#  script:

#    - export SAST_VERSION=${SP_VERSION:-$(echo \"$CI_SERVER_VERSION\" | sed 's/^\\([0-9]*\\)\\.\\([0-9]*\\).*/\\1-\\2-stable/')}

#    - |

#      docker run \

#        --env SAST_ANALYZER_IMAGES \

#        --env SAST_ANALYZER_IMAGE_PREFIX \

#        --env SAST_ANALYZER_IMAGE_TAG \

#        --env SAST_DEFAULT_ANALYZERS \

#        --env SAST_BRAKEMAN_LEVEL \

#        --env SAST_GOSEC_LEVEL \

#        --env SAST_FLAWFINDER_LEVEL \

#        --env SAST_DOCKER_CLIENT_NEGOTIATION_TIMEOUT \

#        --env SAST_PULL_ANALYZER_IMAGE_TIMEOUT \

#        --env SAST_RUN_ANALYZER_TIMEOUT \

#        --volume \"$PWD:/code\" \

#        --volume /var/run/docker.sock:/var/run/docker.sock \

#        \"registry.gitlab.com/gitlab-org/security-products/sast:$SAST_VERSION\" /app/bin/run capif/services/register/register_service

#  dependencies: []

#  artifacts:

#    reports:

#      sast: gl-sast-report.json

#  tags:

#    - docker-in-docker



semgrep-sast:

  stage: main_security

  variables:

#    DOCKER_DRIVER: overlay2
@@ -150,27 +188,6 @@ main_sast: 
    - if: '$CI_COMMIT_REF_NAME == "OCF16-first-steps-on-ci-at-gitlab-repository"'

      when: always

    - when: never

  script:

    - export SAST_VERSION=${SP_VERSION:-$(echo \"$CI_SERVER_VERSION\" | sed 's/^\\([0-9]*\\)\\.\\([0-9]*\\).*/\\1-\\2-stable/')}

    - |

      docker run \

        --env SAST_ANALYZER_IMAGES \

        --env SAST_ANALYZER_IMAGE_PREFIX \

        --env SAST_ANALYZER_IMAGE_TAG \

        --env SAST_DEFAULT_ANALYZERS \

        --env SAST_BRAKEMAN_LEVEL \

        --env SAST_GOSEC_LEVEL \

        --env SAST_FLAWFINDER_LEVEL \

        --env SAST_DOCKER_CLIENT_NEGOTIATION_TIMEOUT \

        --env SAST_PULL_ANALYZER_IMAGE_TIMEOUT \

        --env SAST_RUN_ANALYZER_TIMEOUT \

        --volume \"$PWD:/code\" \

        --volume /var/run/docker.sock:/var/run/docker.sock \

        \"registry.gitlab.com/gitlab-org/security-products/sast:$SAST_VERSION\" /app/bin/run capif/services/register/register_service

  dependencies: []

  artifacts:

    reports:

      sast: gl-sast-report.json

  tags:

    - docker-in-docker