Skip to content

Change depscore container image namespace

Nikhil George requested to merge ngeorge1-master-patch-a1d2 into master

What does this MR do?

Depscore project is migrated from https://gitlab.com/gitlab-com/gl-security/appsec/tooling/depscore to https://gitlab.com/gitlab-com/gl-security/product-security/appsec/tooling/depscore. As a result DEPENDENCY_REVIEW_BOT_CI_REG is updated so that container image from new name will be used in the ping-appsec-for-dependency-review: CI job.

Also, this ping-appsec-for-dependency-review: CI job depend on CI variable DEPENDENCY_REVIEW_PAT which had the project token of https://gitlab.com/gitlab-com/gl-security/appsec/tooling/depscore. This needs to be updated with the project token of https://gitlab.com/gitlab-com/gl-security/product-security/appsec/tooling/depscore which can be found at 1Password > GitLab-QA > Dependency Review Automation.

Related issues

https://gitlab.com/gitlab-com/gl-security/product-security/appsec/appsec-team/-/issues/618

Checklist

Pre-merge

Consider the effect of the changes in this merge request on the following:

If new jobs are added:

This will help keep track of expected cost increases to the GitLab project average pipeline cost per merge request RPI

Post-merge

Edited by Nikhil George

Merge request reports

Loading