Skip to content
Snippets Groups Projects
Commit 97d55d28 authored by Balasankar 'Balu' C's avatar Balasankar 'Balu' C
Browse files

Run dependency scan on MR pipelines

Allow dependency scanning to run during merge request pipelines
to decrease time to discovery for vulnerabilities.

Closes https://gitlab.com/gitlab-org/distribution/team-tasks/-/issues/578



Signed-off-by: default avatarBalasankar "Balu" C <balasankar@gitlab.com>
parent ba1c7743
No related branches found
No related tags found
2 merge requests!102heptapod#1237: making 0.38 the new oldstable,!87Merged upstream 15.6.0+ce.0 with adaptations into heptapod branch
......@@ -660,7 +660,7 @@
dependency_scanning:
image: "registry.gitlab.com/gitlab-org/security-products/gitlab-depscan:2.3.2"
stage: package
stage: validate
variables:
REPORT_PATH: ./
NVD_DB_UPDATE: "true"
......@@ -669,6 +669,7 @@
- /gitlab-depscan.sh build_facts/version-manifest.json
rules:
- if: '$PIPELINE_TYPE == "DEPENDENCY_SCANNING_PIPELINE"'
- if: '$PIPELINE_TYPE == "GITLAB_MR_PIPELINE"'
allow_failure: true
needs:
- generate-facts
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment