Skip to content

Prevent CS SBOM to be parsed as ready for License Scanning rules

Alan (Maciej) Paruszewski requested to merge alan-prevent-container-scanning-sbom-to-be-treated-as-source-for-license-scanning-rules into master

What does this MR do and why?

This MR adds logic to prevent Container Scanning SBOM to be parsed and used for License Scanning Merge Request Approval Policies.

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Screenshots or screen recordings

Before After
image image

How to set up and validate locally

  1. Create new project
  2. Add .gitlab-ci.yml file:
include:
  - template: Jobs/Container-Scanning.gitlab-ci.yml

variables:
  SECURE_LOG_LEVEL: 'debug'
  CS_IMAGE: 'ubuntu:latest'
  1. Run pipeline, go to Pipeline -> Licenses and see that there are no licenses mentioned in that tab.
Edited by Alan (Maciej) Paruszewski

Merge request reports