diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 0970588e010ce8764fd103f939fa26166dc3b402..c7d31f9ae734633a3fd959f718f537feddacb25a 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -32,6 +32,19 @@ unit_tests: - poetry run mypy . - poetry run python manage.py test +sast: + variables: + SAST_EXCLUDED_PATHS: tests, dev, definitions, docs + allow_failure: true + +dependency_scanning: + variables: + DS_EXCLUDED_PATHS: tests, dev, definitions, docs + allow_failure: true + +secret_detection: + allow_failure: false + create-image: image: docker:20.10.16 services: @@ -56,3 +69,10 @@ create-image: - docker push $IMAGE_TAG - docker push $IMAGE_LATEST +include: + - template: Security/SAST.gitlab-ci.yml + - template: Jobs/Dependency-Scanning.gitlab-ci.yml + - template: Jobs/Secret-Detection.gitlab-ci.yml + + +