Skip to content
Snippets Groups Projects

Resolve "Integrate dependency-check container with Sonarqube"

1 file
+ 4
1
Compare changes
  • Side-by-side
  • Inline
+ 9
63
@@ -2,69 +2,15 @@ stages:
- verify
- build
- test
- test_dependency_check_npm_install
- test_dependency_check_dependency_check
- test_dependency_check_sonar_scanner
- publish
- security
Check Makefile:
stage: verify
tags:
- linux, dockerd
script:
- docker run --rm -v "${PWD}:/work" -w /work mandrean/checkmake ./Makefile
Lint and Validate dockerfiles:
stage: verify
tags:
- linux, dockerd
script:
- make test
Make All Images:
stage: build
image: projectatomic/dockerfile-lint
tags:
- linux, dockerd
script:
- make
Test Sonar Scanner:
stage: test
tags:
- dockerd
script:
- docker run --rm its-registry.unl.edu/unl-its/docker-ci/static-code-analysis sonar-scanner -v
- docker run --rm -v "${PWD}:/work" -w /work its-registry.unl.edu/unl-its/docker-ci/detect-secrets -s
- docker run --rm -v "${PWD}:/work" -w /work its-registry.unl.edu/unl-its/docker-ci/dependency-check -v
Test PHP Lint:
stage: test
tags:
- linux, dockerd
script:
- t/php-lint/tests.sh
Test PHP Lint:
stage: test
tags:
- linux, dockerd
script:
- t/php-lint/tests.sh
Push to Container Registry:
after_script:
- rm -f /var/lib/gitlab-runner/.docker/config.json
stage: publish
tags:
- linux, dockerd
script:
- make publish
.Scan with Tenable:
stage: security
tags:
- linux, dockerd
script:
- make security
include:
- local: .gitlab/ci/verify.yml
- local: .gitlab/ci/build.yml
- local: .gitlab/ci/test.yml
- local: .gitlab/ci/test.dependency_check.yml
- local: .gitlab/ci/publish.yml
Loading