Skip to content

Disable dependency review automation job

Nikhil George requested to merge ngeorge1-master-patch-10809 into master

What does this MR do and why?

This MR is to disable the dependency review automation job (which was enabled in !125420 (merged)) since duplicate comments are getting generated example !125735 (comment 1465565692). The job is disable by adding a new rule

- if: $ENABLE_DEPSCORE != 'true'
  when: never

ENABLE_DEPSCORE is a CI variable that is not set in the project gitlab-org/gitlab, I will create another issue to set this CI variable to true when this job needs to be re-enabled.

Related issue https://gitlab.com/gitlab-com/gl-security/appsec/tooling/depscore/-/issues/23

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Nikhil George

Merge request reports