Commit cd1061c0 authored by Andres Anaya Amariels's avatar Andres Anaya Amariels 🚀
Browse files

gemnasium-python-dependency_scanning

parent 1ca8694a

capif/.gitlab-ci.yml

+16 −4
Original line number Diff line number Diff line
@@ -28,6 +28,7 @@ variables: 
  CI_JOB_TOKEN: $CI_JOB_TOKEN

  CI_DEBUG_TRACE: "true"

  PROJECT_ID: "294"

  SAST_EXCLUDED_ANALYZERS: "nodejs-scan"



.staging_common: &staging_common

  only:
@@ -89,6 +90,7 @@ dev_cancel_previous_action: 


include:

 - template: 'Jobs/SAST.gitlab-ci.yml'

 - template: 'Jobs/Dependency-Scanning.gitlab-ci.yml'

 - project: 'ocf/pipeline-scripts'

   ref: cicd-capif

   file:
@@ -174,15 +176,12 @@ merge_request_staging_into_main: 
#  tags:

#    - docker-in-docker



.nodejs-scan-sast: {}



semgrep-sast:

  stage: main_security

  variables:

#    DOCKER_DRIVER: overlay2

    DOCKER_HOST: tcp://docker:2375

#    SAST_EXCLUDED_ANALYZERS: "nodejs-scan-sast"

    SAST_EXCLUDED_ANALYZERS: "nodejs-scan"

    SAST_DEFAULT_ANALYZERS: bandit

  allow_failure: true

  services:
@@ -199,7 +198,6 @@ kubesec-sast: 
  variables:

#    DOCKER_DRIVER: overlay2

    DOCKER_HOST: tcp://docker:2375

    SAST_EXCLUDED_ANALYZERS: "nodejs-scan"

    SCAN_KUBERNETES_MANIFESTS: "true"

  allow_failure: true

  services:
@@ -211,6 +209,20 @@ kubesec-sast: 
  tags:

    - docker-in-docker



gemnasium-python-dependency_scanning:

  stage: main_security

  variables:

    DS_ANALYZER_NAME: "gemnasium-python"

  allow_failure: true

  services:

    - docker:24.0.5-dind

  rules:

    - if: '$CI_COMMIT_REF_NAME == "OCF16-first-steps-on-ci-at-gitlab-repository"'

      when: always

    - when: never

  tags:

    - docker-in-docker



#ci_in_staging:

#  stage: ci_in_staging

#  script: