Apply 1 suggestion(s) to 1 file(s)

Co-authored-by: Adam Cohen <acohen@gitlab.com>
This commit is contained in:
Rob Jackson 2025-05-20 22:04:22 -04:00
parent 2a492122e2
commit cf87e0da38

View file

@ -17,26 +17,19 @@ spec:
default: 6 default: 6
--- ---
iac-sast: kics-iac-sast:
stage: $[[ inputs.stage ]] stage: $[[ inputs.stage ]]
image:
name: "$[[ inputs.image_prefix ]]/kics:$[[ inputs.image_tag ]]$[[ inputs.image_suffix ]]"
variables:
SEARCH_MAX_DEPTH: $[[ inputs.search_max_depth ]]
script:
- /analyzer run
artifacts: artifacts:
access: 'developer' access: 'developer'
reports: reports:
sast: gl-sast-report.json sast: gl-sast-report.json
rules:
- when: never
# `rules` must be overridden explicitly by each child job
# see https://gitlab.com/gitlab-org/gitlab/-/issues/218444
variables:
SEARCH_MAX_DEPTH: $[[ inputs.search_max_depth ]]
allow_failure: true allow_failure: true
script:
- /analyzer run
kics-iac-sast:
extends: iac-sast
image:
name: "$[[ inputs.analyzer_image ]]/kics:$[[ inputs.image_tag ]]"
rules: rules:
- if: $SAST_DISABLED == 'true' || $SAST_DISABLED == '1' - if: $SAST_DISABLED == 'true' || $SAST_DISABLED == '1'
when: never when: never