WIP: Switch qa templates to rules (round 2)
What does this MR do?
Round 2 of !117 (merged), which was reverted in !119 (merged)
Switches all QA templates to rules
syntax. Simplify inheritance of only/except
conditions by centralizing rules into inheritor jobs. Limit update-qa jobs to branches
only.
- Category:SAST test:
- ~"Category:Dependency Scanning" test:
- ~"Category:License Compliance" test:
- Category:Container Scanning test:
!117 (merged)
Key Changes from- include
workflow:rules
limiting executions tobranches
. this more accurately reflects the former only/except execution mode - set
when: manual
in all cases forupdate-qa-**
jobs**
This changes what I believe to be the root cause of the previous issue. In the last attempt, we used a rule condition meant to set the job for manual execution in the presence of EDIT: This is incorrect, see !122 (comment 357593588) for true reason$CI_COMMIT_BRANCH
. The expectation was that this would always be true, however the action of opening an MR triggers a Merge Request pipeline, for which this was not true, causing the when
condition to be set to on_success
instead of manual
.
What are the relevant issue numbers?
Does this MR meet the acceptance criteria?
Edited by Lucas Charles