summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMatt Penna <mpenna@gitlab.com>2019-08-30 16:26:16 +0000
committerMatt Penna <mpenna@gitlab.com>2019-08-30 16:26:16 +0000
commit7639e4ea4a3dbf0ee30eacb0ec5ff37d84c77fbf (patch)
treee82fe7fe7e62ae1b322a6e190a4c1ebc2c1fb060
parentb150874a5d45b79d3752b2d92f435d1dfb5b1dd4 (diff)
downloadgitlab-ce-docs-maven-repo-cli-credentials.tar.gz
Apply suggestion to doc/user/application_security/sast/index.mddocs-maven-repo-cli-credentials
-rw-r--r--doc/user/application_security/sast/index.md21
1 files changed, 12 insertions, 9 deletions
diff --git a/doc/user/application_security/sast/index.md b/doc/user/application_security/sast/index.md
index 3b344ee6182..e50e4a3d0ac 100644
--- a/doc/user/application_security/sast/index.md
+++ b/doc/user/application_security/sast/index.md
@@ -127,15 +127,18 @@ the pipeline configuration, the last mention of the variable will take precedenc
#### Using a variable to pass username and password to a private Maven repository
-If you have a private Apache Maven repository that requires login credentials, you can use the `MAVEN_CLI_OPTS` [environment variable](#available-variables) to pass a username and password. If the username is `myuser` and the password is `verysecret` then you can set:
-
-```yaml
-include:
- template: SAST.gitlab-ci.yml
-
-variables:
- MAVEN_CLI_OPTS: "-Drepository.password=verysecret -Drepository.user=myuser"
-```
+If you have a private Apache Maven repository that requires login credentials,
+you can use the `MAVEN_CLI_OPTS` [environment variable](#available-variables)
+to pass a username and password. You can set it under your project's settings
+so that your credentials aren't exposed in `.gitlab-ci.yml`.
+
+If the username is `myuser` and the password is `verysecret` then you would
+set the following [variable](../../../ci/variables/README.md#via-the-ui)
+under your project's settings:
+
+| Type | Key | Value |
+| ---- | --- | ----- |
+| Variable | `MAVEN_CLI_OPTS` | `-Drepository.password=verysecret -Drepository.user=myuser` |
### Overriding the SAST template