summaryrefslogtreecommitdiff
path: root/.gitlab/ci/reports.gitlab-ci.yml
diff options
context:
space:
mode:
Diffstat (limited to '.gitlab/ci/reports.gitlab-ci.yml')
-rw-r--r--.gitlab/ci/reports.gitlab-ci.yml33
1 files changed, 18 insertions, 15 deletions
diff --git a/.gitlab/ci/reports.gitlab-ci.yml b/.gitlab/ci/reports.gitlab-ci.yml
index 89b5ae38072..2197f916484 100644
--- a/.gitlab/ci/reports.gitlab-ci.yml
+++ b/.gitlab/ci/reports.gitlab-ci.yml
@@ -2,25 +2,28 @@ include:
- template: Code-Quality.gitlab-ci.yml
- template: Security/SAST.gitlab-ci.yml
- template: Security/Dependency-Scanning.gitlab-ci.yml
+ - template: Security/DAST.gitlab-ci.yml
+
+.reports:
+ extends:
+ - .default-retry
+ - .except-docs
code_quality:
- extends: .dedicated-no-docs
- # gitlab-org runners set `privileged: false` but we need to have it set to true
- # since we're using Docker in Docker
- tags: []
- before_script: []
- cache: {}
- dependencies: []
+ extends: .reports
sast:
- extends: .dedicated-no-docs
- before_script: []
- tags: []
+ extends: .reports
variables:
- SAST_CONFIDENCE_LEVEL: 2
- DOCKER_DRIVER: overlay2
+ SAST_BRAKEMAN_LEVEL: 2
+ SAST_EXCLUDED_PATHS: qa,spec,doc
dependency_scanning:
- before_script: []
- tags: []
- extends: .dedicated-no-docs
+ extends: .reports
+
+dast:
+ extends: .reports
+ stage: qa
+ dependencies: ["review-deploy"]
+ before_script:
+ - export DAST_WEBSITE="$(cat review_app_url.txt)"