From 915062054ff0289a938770e9f15fe6417c694c8d Mon Sep 17 00:00:00 2001
From: jurgenhaas <juergen@paragon-es.de>
Date: Mon, 14 Mar 2022 14:53:52 +0100
Subject: [PATCH] Handle new gitlab SAST test for spotbugs
---
lakedrops.yml | 1 +
tests/gitlab.yml | 10 ++++++++++
2 files changed, 11 insertions(+)
diff --git a/lakedrops.yml b/lakedrops.yml
index 2f52df3..457caec 100644
--- a/lakedrops.yml
+++ b/lakedrops.yml
@@ -14,6 +14,7 @@ variables:
DISABLE_GITLAB_CI_TEST_SAST_NODEJS_SCAN: 1
DISABLE_GITLAB_CI_TEST_SAST_PHPCS_SECURITY_AUDIT: 1
DISABLE_GITLAB_CI_TEST_SAST_SEMGREP: 1
+ DISABLE_GITLAB_CI_TEST_SAST_SPOTBUGS: 1
DISABLE_GITLAB_CI_TEST_SECRET_DETECTION: 1
ENVIRONMENT_NAME: ${PROJECT_NAME}/$CI_COMMIT_REF_NAME
ENVIRONMENT_URL: https://www.example.com/$SITE_NAME
diff --git a/tests/gitlab.yml b/tests/gitlab.yml
index 3b2c18c..e241b04 100644
--- a/tests/gitlab.yml
+++ b/tests/gitlab.yml
@@ -96,6 +96,16 @@ semgrep-sast:
rules:
- if: '$DISABLE_GITLAB_CI_TEST_SAST_SEMGREP != "1"'
+spotbugs-sast:
+ <<: *test_gitlab_default
+ artifacts:
+ name: spotbugs-sast
+ paths: ['gl-sast-report.json']
+ reports:
+ sast: gl-sast-report.json
+ rules:
+ - if: '$DISABLE_GITLAB_CI_TEST_SAST_SPOTBUGS != "1"'
+
# ==================================== Secret Detection
secret_detection:
<<: *test_gitlab_default
--
GitLab