Skip to content

GitLab

webapp
webapp

Run security sast and dependency_scanning in merge request pipelines 

Try and apply gitlab-org/gitlab!46950
to our pipelines

Discussion: gitlab-org/gitlab#217668 (comment 446826134)
11 jobs for !2046 with try-sast-dependency_scannin-in-mrs in 27 minutes and 1 second (queued for 1 second)
detached
3b95a5d4
1 related merge request: !2046 Draft: Run security sast and dependency_scanning in merge request pipelines
Status Job ID Name Coverage
  Build Unit Test
passed #848585553
gitlab-org
package

00:08:01

passed #848585550
gitlab-org
test

00:12:13

manual #848585551
internal allowed to fail manual
test_e2e
passed #848585549
gitlab-org
validate

00:04:32

 
  Pre Deploy
passed #848585554
gitlab-org
distribute_beta_staging

00:00:39

 
  Deploy
passed #848585555
gitlab-org-docker
containerize

00:07:40

manual #848585557
internal allowed to fail manual
deploy_beta_staging
 
  Security
passed #848585561
gitlab-org
container_scanning

00:01:14

passed #848585559
gitlab-org
dast

00:06:26

failed #848585558
gitlab-org
sast

00:00:47

passed #848585562
gitlab-org-docker
secret_detection

00:00:29

 
Name Stage Failure
failed
sast Security 
$ echo "$CI_JOB_NAME is used for configuration only, and its script should not be executed"
sast is used for configuration only, and its script should not be executed
$ exit 1
Uploading artifacts for failed job
Uploading artifacts...
WARNING: gl-sast-report.json: no matching files    
ERROR: No files to upload                          
Cleaning up file based variables
ERROR: Job failed: exit code 1