Skip to content
Snippets Groups Projects

Add container scanning

Merged Sébastien Heurtematte requested to merge feat/container_scanning into main
+ 5
21
@@ -2,21 +2,15 @@
# SPDX-License-Identifier: EPL-2.0
include:
# - template: Jobs/Code-Quality.gitlab-ci.yml # https://gitlab.com/gitlab-org/gitlab/blob/master/lib/gitlab/ci/templates/Jobs/Code-Quality.gitlab-ci.yml
# - template: Security/Container-Scanning.gitlab-ci.yml # https://gitlab.com/gitlab-org/gitlab/blob/master/lib/gitlab/ci/templates/Security/Container-Scanning.gitlab-ci.yml
- template: Jobs/SAST.gitlab-ci.yml # https://gitlab.com/gitlab-org/gitlab/-/blob/master/lib/gitlab/ci/templates/Jobs/SAST-IaC.gitlab-ci.yml
- template: Security/SAST-IaC.latest.gitlab-ci.yml # https://gitlab.com/gitlab-org/gitlab/-/blob/master/lib/gitlab/ci/templates/Jobs/SAST-IaC.gitlab-ci.yml
- template: Jobs/Secret-Detection.gitlab-ci.yml # https://gitlab.com/gitlab-org/gitlab/-/blob/master/lib/gitlab/ci/templates/Jobs/Secret-Detection.gitlab-ci.yml
#- template: Workflows/MergeRequest-Pipelines.gitlab-ci.yml #https://gitlab.com/gitlab-org/gitlab/-/blob/master/lib/gitlab/ci/templates/Workflows/MergeRequest-Pipelines.gitlab-ci.yml
- project: 'eclipsefdn/it/releng/gitlab-ci-templates'
file: '/pipeline.yml'
- project: 'eclipsefdn/it/releng/gitlab-ci-templates'
file: '/pipeline-full.yml'
variables:
CI_IMAGE_RUBY: ruby:2.7
CI_IMAGE_ALPINE: alpine:latest
CI_REGISTRY: docker.io
CI_REGISTRY_IMAGE: eclipsecbi
CI_REGISTRY_IMAGE: docker.io/eclipsecbi/grac
default:
image: $CI_IMAGE_ALPINE
tags:
@@ -33,8 +27,8 @@ workflow:
stages:
- compliance
- test
- build
- test
- triage
.rules-mr-fastdraft: &rules-mr-fastdraft
@@ -57,7 +51,6 @@ stages:
when: never
- when: always
nfs-storage-test:
<<: *rules-mr-notfastdraft
stage: test
@@ -79,15 +72,6 @@ nfs-storage-test-mr:
extends: nfs-storage-test
<<: *rules-mr-fastdraft
buildkit:
# variables:
# IMAGE_TAG: latest
# BUILD_ARG: "--opt build-arg:GITHUB_BOT_AUTH=$GITHUB_BOT_NAME:$GITHUB_BOT_TOKEN"
# only:
# variables:
# - $CI_COMMIT_BRANCH == "main"
needs: []
# triage:
# stage: triage
# image: $CI_IMAGE_RUBY
Loading