Fix syntax used to exclude brakeman and flawfinder analyzers

This commit is contained in:
Ahmed Hemdan 2023-06-09 16:00:48 +02:00
parent 511d312b12
commit 182fa761d5
No known key found for this signature in database
GPG key ID: 35C579218532E2FF

View file

@ -3,7 +3,7 @@ spec:
stage: stage:
default: test default: test
image_prefix: image_prefix:
default: "$CI_TEMPLATE_REGISTRY_HOST/security-products" default: "$CI_TEMPLATE_REGISTRY_HOST/security-products"
image_tag: image_tag:
default: '3' default: '3'
image_suffix: image_suffix:
@ -39,7 +39,7 @@ brakeman-sast:
image: image:
name: "$[[ inputs.image_prefix ]]/brakeman:$[[ inputs.image_tag ]]" name: "$[[ inputs.image_prefix ]]/brakeman:$[[ inputs.image_tag ]]"
rules: rules:
- if: '"$[ inputs.excluded_analyzers ]" =~ /brakeman/' - if: '"$[[ inputs.excluded_analyzers ]]" =~ /brakeman/'
when: never when: never
- if: $CI_COMMIT_BRANCH - if: $CI_COMMIT_BRANCH
exists: exists:
@ -51,7 +51,7 @@ flawfinder-sast:
image: image:
name: "$[[ inputs.image_prefix ]]/flawfinder:$[[ inputs.image_tag ]]" name: "$[[ inputs.image_prefix ]]/flawfinder:$[[ inputs.image_tag ]]"
rules: rules:
- if: '"$[ inputs.excluded_analyzes ]" =~ /flawfinder/' - if: '"$[[ inputs.excluded_analyzers ]]" =~ /flawfinder/'
when: never when: never
- if: $CI_COMMIT_BRANCH - if: $CI_COMMIT_BRANCH
exists: exists: