From 34eb62b9aa8090a62f44d6b98721996b92f25a78 Mon Sep 17 00:00:00 2001 From: "mark.mastrangelo" Date: Wed, 25 Oct 2023 17:27:17 -0500 Subject: [PATCH] [RB-2667] Add .gitlab-ci.yml for security scan --- .gitlab-ci.yml | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 .gitlab-ci.yml diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml new file mode 100644 index 0000000..78f1556 --- /dev/null +++ b/.gitlab-ci.yml @@ -0,0 +1,20 @@ +# You can override the included template(s) by including variable overrides +# SAST customization: https://docs.gitlab.com/ee/user/application_security/sast/#customizing-the-sast-settings +# Secret Detection customization: https://docs.gitlab.com/ee/user/application_security/secret_detection/#customizing-settings +# Dependency Scanning customization: https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#customizing-the-dependency-scanning-settings +# Container Scanning customization: https://docs.gitlab.com/ee/user/application_security/container_scanning/#customizing-the-container-scanning-settings +# Note that environment variables can be set in several places +# See https://docs.gitlab.com/ee/ci/variables/#cicd-variable-precedence +default: + tags: + - general_ubuntu_runner + - test +stages: +- test +sast: + stage: test +include: +- template: Security/SAST.gitlab-ci.yml +- template: Security/Dependency-Scanning.gitlab-ci.yml +- template: Security/Secret-Detection.gitlab-ci.yml +- template: Jobs/Container-Scanning.gitlab-ci.yml