Configure SAST in .gitlab-ci.yml, creating this file if it does not already exist

This commit is contained in:
Matthias Langhard
2021-11-03 15:04:57 +00:00
parent 306056b2f6
commit f1e0ab2450

View File

@@ -1,24 +1,32 @@
# You can override the included template(s) by including variable overrides
# SAST customization: https://docs.gitlab.com/ee/user/application_security/sast/#customizing-the-sast-settings
# Secret Detection customization: https://docs.gitlab.com/ee/user/application_security/secret_detection/#customizing-settings
# Dependency Scanning customization: https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#customizing-the-dependency-scanning-settings
# Note that environment variables can be set in several places
# See https://docs.gitlab.com/ee/ci/variables/#cicd-variable-precedence
stages: stages:
- test - test
- publish - publish
running tests for tag: running tests for tag:
only: only:
- /^\d*.\d*.\d*$/ # gets triggered if the commit tag is in the form n.n.n where n is any number - "/^\\d*.\\d*.\\d*$/"
tags: tags:
- shared - shared
image: mcr.microsoft.com/dotnet/core/sdk:3.1 image: mcr.microsoft.com/dotnet/core/sdk:3.1
stage: test stage: test
script: script:
- dotnet test ./tests - dotnet test ./tests
publish to nuget: publish to nuget:
tags: tags:
- shared - shared
only: only:
- /^\d*.\d*.\d*$/ # gets triggered if the commit tag is in the form n.n.n where n is any number - "/^\\d*.\\d*.\\d*$/"
image: mcr.microsoft.com/dotnet/core/sdk:3.1 image: mcr.microsoft.com/dotnet/core/sdk:3.1
stage: publish stage: publish
script: script:
- dotnet pack src -o ./packaged - dotnet pack src -o ./packaged
- dotnet nuget push ./packaged/*.nupkg -k $NUGET_API_KEY -s https://api.nuget.org/v3/index.json - dotnet nuget push ./packaged/*.nupkg -k $NUGET_API_KEY -s https://api.nuget.org/v3/index.json
sast:
stage: test
include:
- template: Security/SAST.gitlab-ci.yml