extern/workspaces-core-images
1
0
Fork 0
mirror of https://github.com/kasmtech/workspaces-core-images.git synced 2025-06-26 06:51:45 +02:00
Code Issues Packages Projects Releases Wiki Activity

add rules for when to scan

Browse Source
This commit is contained in:
Matthew McClaskey 2023-11-22 16:55:49 +00:00
parent c7847a59c1
commit 37c8fb5f40
2 changed files with 20 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
.gitlab-ci.yml
View File

@ -10,7 +10,6 @@ stages:
variables: variables:
KASM_RELEASE: "1.14.0" KASM_RELEASE: "1.14.0"
TEST_INSTALLER: "https://kasm-static-content.s3.amazonaws.com/kasm_release_1.14.0.7f3582.tar.gz" TEST_INSTALLER: "https://kasm-static-content.s3.amazonaws.com/kasm_release_1.14.0.7f3582.tar.gz"
RUN_VULNERABILITY_SCANS: "false"
before_script: before_script:
- export SANITIZED_BRANCH="$(echo $CI_COMMIT_REF_NAME | sed -r 's#^release/##' | sed 's/\//_/g')" - export SANITIZED_BRANCH="$(echo $CI_COMMIT_REF_NAME | sed -r 's#^release/##' | sed 's/\//_/g')"

34
ci-scripts/gitlab-ci.template
View File

@ -144,17 +144,19 @@ scan_{{ IMAGE.name1 }}_{{ IMAGE.name2 }}:
{% for FILE in files %}- {{ FILE }} {% for FILE in files %}- {{ FILE }}
{% endfor %}{% for FILE in IMAGE.changeFiles %}- {{ FILE }} {% endfor %}{% for FILE in IMAGE.changeFiles %}- {{ FILE }}
{% endfor %}{% endif %} {% endfor %}{% endif %}
except: rules:
variables: - if: $CI_PIPELINE_SOURCE == "merge_request_event"
- $README_USERNAME when: never
- $README_PASSWORD - if: $CI_COMMIT_BRANCH =~ /^release\/.*$/
- $DOCKERHUB_REVERT when: always
- $REVERT_IS_ROLLING - if: $CI_COMMIT_BRANCH == "develop"
when: always
- if: $CI_PIPELINE_SOURCE == "schedule"
when: always
- when: manual
needs: needs:
- build_{{ IMAGE.name1 }}_{{ IMAGE.name2 }} - build_{{ IMAGE.name1 }}_{{ IMAGE.name2 }}
when: on_success when: on_success
rules:
- if: ($RUN_VULNERABILITY_SCANS == "true" || $CI_COMMIT_BRANCH == "develop")
tags: tags:
- oci-fixed-amd - oci-fixed-amd
retry: 1 retry: 1
@ -180,12 +182,16 @@ scan_{{ IMAGE.name1 }}_{{ IMAGE.name2 }}:
{% for FILE in files %}- {{ FILE }} {% for FILE in files %}- {{ FILE }}
{% endfor %}{% for FILE in IMAGE.changeFiles %}- {{ FILE }} {% endfor %}{% for FILE in IMAGE.changeFiles %}- {{ FILE }}
{% endfor %}{% endif %} {% endfor %}{% endif %}
except: rules:
variables: - if: $CI_PIPELINE_SOURCE == "merge_request_event"
- $README_USERNAME when: never
- $README_PASSWORD - if: $CI_COMMIT_BRANCH =~ /^release\/.*$/
- $DOCKERHUB_REVERT when: always
- $REVERT_IS_ROLLING - if: $CI_COMMIT_BRANCH == "develop"
when: always
- if: $CI_PIPELINE_SOURCE == "schedule"
when: always
- when: manual
needs: needs:
- build_{{ IMAGE.name1 }}_{{ IMAGE.name2 }} - build_{{ IMAGE.name1 }}_{{ IMAGE.name2 }}
rules: rules: