Add additional_ca_cert_bundle input for DS v2 template
What does this MR do and why?
Add additional_ca_cert_bundle input for DS v2 template. The feature already works when passing the CI/CD variable but we want a corresponding input for consistency.
- add specs to verify CI/C variables backward compatibility
- fix typo in
DS_ENABLE_VULNERABILITY_SCANfallback logic
Changelog: added EE: true
References
Screenshots or screen recordings
| Before | After |
|---|---|
How to set up and validate locally
You need to have your GDK configured with HTTPS support.
- configure the
MY_CUSTOM_CA_CERTvariable (e.g. in project's variables) with your custom CA root certificate. If you've used mkcert on MacOS that will be the content of therootCA.pemfile:cat ~/Library/Application\ Support/mkcert/rootCA.pem - create a project that includes the v2 DS template and speficies the input
include: - template: Jobs/Dependency-Scanning.v2.gitlab-ci.yml inputs: additional_ca_cert_bundle: $MY_CUSTOM_CA_CERT - verify in the job log output that the DS analyzer can reach the sbom scan API of the instance
MR acceptance checklist
Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Edited by Olivier Gonzalez