diff options
author | GitLab Bot <gitlab-bot@gitlab.com> | 2020-03-25 12:08:19 +0000 |
---|---|---|
committer | GitLab Bot <gitlab-bot@gitlab.com> | 2020-03-25 12:08:19 +0000 |
commit | e6baeabaa9651d90b03bb64ffce75a2c3cb89aab (patch) | |
tree | 85f3cbd6e437b17be59505cf3ac4794c1838609e /doc/development/integrations/secure.md | |
parent | 5064bf8c5647d4c4430cbb4d097cf1592416de29 (diff) | |
download | gitlab-ce-e6baeabaa9651d90b03bb64ffce75a2c3cb89aab.tar.gz |
Add latest changes from gitlab-org/gitlab@master
Diffstat (limited to 'doc/development/integrations/secure.md')
-rw-r--r-- | doc/development/integrations/secure.md | 10 |
1 files changed, 4 insertions, 6 deletions
diff --git a/doc/development/integrations/secure.md b/doc/development/integrations/secure.md index 5792ce303e1..e5392af1c2e 100644 --- a/doc/development/integrations/secure.md +++ b/doc/development/integrations/secure.md @@ -70,7 +70,7 @@ mysec_dependency_scanning: `gl-sast-report.json` is an example file path. See [the Output file section](#output-file) for more details. It is processed as a SAST report because it is declared as such in the job definition. -### Rules +### Policies Scanning jobs should be skipped unless the corresponding feature is listed in the `GITLAB_FEATURES` variable (comma-separated list of values). @@ -103,11 +103,9 @@ mysec_dependency_scanning: $CI_PROJECT_REPOSITORY_LANGUAGES =~ /\bjava\b/ ``` -The [`only/except`](../../ci/yaml/README.md#onlyexcept-basic) keywords -as well as the new [`rules`](../../ci/yaml/README.md#rules) keyword -make possible to trigger the job depending on the branch, or when some particular file changes. -Such rules should be defined by users based on their needs, -and should not be predefined in the job definition of the scanner. +Any additional job policy should only be configured by users based on their needs. +For instance, predefined policies should not trigger the scanning job +for a particular branch or when a particular set of files changes. ## Docker image |