Apply feedback from initial version review

This commit is contained in:
Ahmed Hemdan 2023-06-16 15:20:35 +02:00
parent 66e7f4df74
commit b812ef31b1
No known key found for this signature in database
GPG key ID: 35C579218532E2FF

View file

@ -9,24 +9,20 @@ spec:
image_suffix: image_suffix:
default: "" default: ""
--- ---
variables:
SECRET_DETECTION_EXCLUDED_PATHS: ""
.secret-analyzer: secret_detection:
stage: $[[ inputs.stage ]] stage: $[[ inputs.stage ]]
image: "$[[ inputs.image_prefix ]]/secrets:$[[ inputs.image_tag ]]$[[ inputs.image_suffix ]]" image: "$[[ inputs.image_prefix ]]/secrets:$[[ inputs.image_tag ]]$[[ inputs.image_suffix ]]"
services: [] services: []
allow_failure: true allow_failure: true
variables: variables:
GIT_DEPTH: "50" GIT_DEPTH: "50"
SECRET_DETECTION_EXCLUDED_PATHS: ""
# `rules` must be overridden explicitly by each child job # `rules` must be overridden explicitly by each child job
# see https://gitlab.com/gitlab-org/gitlab/-/issues/218444 # see https://gitlab.com/gitlab-org/gitlab/-/issues/218444
artifacts: artifacts:
reports: reports:
secret_detection: gl-secret-detection-report.json secret_detection: gl-secret-detection-report.json
secret_detection:
extends: .secret-analyzer
rules: rules:
- if: $CI_COMMIT_BRANCH - if: $CI_COMMIT_BRANCH
script: script: