Skip to content

No path consistency with the `latest` Secure templates

Summary

Since version 15.5 of GitLab, we can allow Secure templates to run in Merge Request pipelines (#217668 (closed)); we need to use latest templates (for example SAST.latest.gitlab-ci.yml). According to the documentation, the latest templates are located in /Jobs (https://gitlab.com/gitlab-org/gitlab/-/tree/master/lib/gitlab/ci/templates/Jobs).

It's not the case for Container-Scanning.latest.gitlab-ci.yml, which is located in /Security

Steps to reproduce

🔴 The pipeline will fail: Included file Jobs/Container-Scanning.latest.gitlab-ci.yml is empty or does not exist!

include:
  - template: Jobs/SAST.latest.gitlab-ci.yml
  - template: Jobs/Dependency-Scanning.latest.gitlab-ci.yml
  - template: Jobs/Container-Scanning.latest.gitlab-ci.yml

🟢 The pipeline will succeed

include:
  - template: Jobs/SAST.latest.gitlab-ci.yml
  - template: Jobs/Dependency-Scanning.latest.gitlab-ci.yml
  - template: Security/Container-Scanning.latest.gitlab-ci.yml

What is the current bug behavior?

See the previous section.

What is the expected correct behavior?

Can get the latest templates in the same place.