.gitlab/ci/reports.gitlab-ci.yml


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

include:
  - template: Code-Quality.gitlab-ci.yml
  - template: Security/SAST.gitlab-ci.yml
  - template: Security/Dependency-Scanning.gitlab-ci.yml
  - template: Security/DAST.gitlab-ci.yml

code_quality:
  extends: .dedicated-no-docs
  # gitlab-org runners set `privileged: false` but we need to have it set to true
  # since we're using Docker in Docker
  tags: []
  before_script: []
  cache: {}

sast:
  extends: .dedicated-no-docs
  tags: []
  before_script: []
  cache: {}
  variables:
    SAST_BRAKEMAN_LEVEL: 2
    SAST_EXCLUDED_PATHS: qa,spec,doc

dependency_scanning:
  extends: .dedicated-no-docs
  tags: []
  before_script: []
  cache: {}

dast:
  extends:
    - .dedicated-runner
    - .review-only
  stage: qa
  dependencies:
    - review-deploy
  before_script:
    - export DAST_WEBSITE="$(cat review_app_url.txt)"
  cache: {}