Allow artifacts from Application Security Testing template to be downloaded
What does this MR do and why?
Allow artifacts from devopsapplication security testing templates to be downloaded. This is also a workaround for release evidence requirements.
This is already the case with certain templates such as container scanning, and dependency scanning.
This MR adds artifacts:paths to all AST templates that don't already have it.
References
Include Artifacts:Path in SAST Template for Rel... (#544923 - closed)
Screenshots or screen recordings
| Before | After |
|---|---|
![]() |
![]() |
How to set up and validate locally
- Run a pipeline using any of the modified templates.
- Current template: https://gitlab.com/gitlab-org/secure/tests/thiagocsf-secure-tests/juice-shop/-/jobs/10146942485
- New template: https://gitlab.com/gitlab-org/secure/tests/thiagocsf-secure-tests/juice-shop/-/jobs/10146961633
- CI config: gitlab-org/secure/tests/thiagocsf-secure-tests/juice-shop@a92e0f75
- Verify that:
- Job log shows artifact upload as
archivein addition to the report type (e.g.sast):Uploading artifacts as "archive" - Job artifacts show the
Keep/Download/Browsebuttons for the artifact uploaded.
- Job log shows artifact upload as
- (optional) Create a release, then verify that the evidence includes the artifact(s) above
MR acceptance checklist
Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Related to #544923 (closed)
Edited by Thiago Figueiró

