feat: Add SCA latest template supporting MR pipelines
What does this MR do and why?
- Adds
*.latest.gitlab-ci.yml
templates for all groupcomposition analysis categories - Adds support for Merge Request Pipelines to each of
latest
templates
This is split across multiple commits to hopefully improve readability but each file can be individually diff'd b/w the stable and latest templates to compare, as well.
For Category:SAST see previous work such as:
- feat: Add SAST.latest and Secret-Detection.late... (!81847 - merged)
- Add Jobs/SAST-IaC.latest.gitlab-ci.yml vendored... (!73074 - merged)
- feat: Update SAST-IaC.latest template to suppor... (!94429 - merged)
See main issue #217668 (closed) for list of remaining templates
How to set up and validate locally
include:
- template: 'Security/Container-Scanning.latest.gitlab-ci.yml'
- template: 'Jobs/Dependency-Scanning.latest.gitlab-ci.yml'
- template: 'Jobs/License-Scanning.latest.gitlab-ci.yml'
- Add template to project
- Push to branch, wait for pipeline to complete
- Open MR to ensure new pipeline is linked to MR event
- Check pipeline to ensure it's proper
Note that ~"Category:Dependency Scanning" requires a corresponding file change so a file matching the relevant rules:exist
block must be included
MR acceptance checklist
This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.
-
I have evaluated the MR acceptance checklist for this MR.
Edited by Lucas Charles