Skip to content

Skip generating cs report

Aditya Tiwari requested to merge skip-security-report into master

What does this MR do?

Skip generating cs report when scan is triggered from registry.

This is done to prevent ingesting vulnerabilities identified by security report in database on rails monolith side. When the env variable REGISTRY_TRIGGERED is set, we will only generate and ingest SBOM report from CS. This is a temporary change and we will remove this once gitlab-org/gitlab#459966 is resolved. Currently, we set REGISTRY_TRIGGERED when the CS job is triggered on registry push event.

What are the relevant issue numbers?

gitlab-org/gitlab#460855 (closed)

Steps to test

Run cs job with REGISTRY_TRIGGERED=true. Only sbom report should be generated.

Does this MR meet the acceptance criteria?

Edited by Aditya Tiwari

Merge request reports