File tree Expand file tree Collapse file tree 1 file changed +5
-28
lines changed
Expand file tree Collapse file tree 1 file changed +5
-28
lines changed Original file line number Diff line number Diff line change 11stages :
2- - sbom
32 - security-scan
43
54# # -------------- Security Pipeline ---------------- ##
65
7- sbom-creation :
8- stage : sbom
6+ security-scan :
97 rules :
10- - if : $CI_PIPELINE_SOURCE == "web"
11- when : manual
12- - if : $CI_COMMIT_REF_NAME =~ $CI_DEFAULT_BRANCH
8+ - if : $CI_COMMIT_REF_NAME =~ /(develop)/
139 when : always
14- image :
15- name : ${DEFAULT_IMAGE}:develop
16- entrypoint : ['']
17- script :
18- - uv pip install cyclonedx-bom
19- - uv export --all-extras --no-dev --no-group test --no-group docs --link-mode=copy --format requirements.txt | cyclonedx-py requirements - > sbom.cyclonedx.json
20- artifacts :
21- paths :
22- - sbom.cyclonedx.json
23- expire_in : 1 days
24-
25- security-scan :
2610 stage : security-scan
27- needs :
28- - sbom-creation
2911 trigger :
3012 include :
31- - project : $SECURITY_PIPELINE_PROJECT
32- file : security_pipeline.yaml
33- ref : $SECURITY_PIPELINE_REF
13+ - project : ' devsecops3000Pro/public/pipelines/security-pipeline '
14+ file : ' security_pipeline.yaml'
15+ ref : ' master '
3416 forward :
3517 pipeline_variables : true
3618 yaml_variables : true
37- rules :
38- - if : $CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH
39- when : always
40- - if : $CI_PIPELINE_SOURCE == "web"
41- when : always
You can’t perform that action at this time.
0 commit comments