Use analyzers from templates instead of custom ones
With !11 (merged) we introduced using Pipelines for merge requests but some analyzers were not running because of the missing integration. We tried to override the job configuration to run them on all merge requests, however, rules
and except/only
cannot be used together.
To enable these jobs again, we copied the relevant part of the job inside .gitlab/ci/
while all of the Auto DevOps jobs are using rules.
We need to remove the custom copy of those analyzers once gitlab#213336 (closed) is closed. Alternatively, we can override the rules if this issue gitlab#215662 (closed) is closed first.
The following discussion from !11 (merged) should be addressed:
-
@steveazz started a discussion: (+1 comment) It seems like this change, our security pipelines aren't running anymore.
To fix this we can override external template values so we make sure those run in merge request context. The templates can be found in the ci templates