Skip to content

Commit d99bc9d

Browse files
authored
Add Gitlab security scanners (#1185)
Add 4 scanners which will scan project for: - vulnerabilities - secrets - license - dependencies with vulns Add minor comments and remove not-needed dependency. Add fix fo ubuntu apt-get issues on Gitlab Actions CI. Relates-To: OLPEDGE-2506 Signed-off-by: Yaroslav Stefinko <[email protected]>
1 parent 8a1c58f commit d99bc9d

File tree

2 files changed

+11
-5
lines changed

2 files changed

+11
-5
lines changed

.github/workflows/ci.yml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -17,15 +17,14 @@ jobs:
1717
linux-gcc-psv-build-test-codecov:
1818
name: Linux Build using gcc & tests & code coverage
1919
runs-on: ubuntu-18.04
20-
2120
steps:
2221
- name: Check out repository
2322
uses: actions/checkout@v2
2423
- name: "C++ Lint checker script"
2524
run: ./scripts/misc/cpplint_ci.sh
2625
shell: bash
2726
- name: Install Ubuntu dependencies
28-
run: sudo apt-get install -y libboost-all-dev ccache libssl-dev libcurl4-openssl-dev --no-install-recommends
27+
run: sudo apt-get update && sudo apt-get install -y libboost-all-dev ccache libssl-dev libcurl4-openssl-dev --no-install-recommends
2928
shell: bash
3029
- name: Compile project with cmake and ccache
3130
run: gcc --version && ./scripts/linux/psv/build_psv.sh
@@ -34,15 +33,16 @@ jobs:
3433
run: ./scripts/linux/psv/test_psv.sh
3534
shell: bash
3635

37-
linux-gcc-psv-build-no-cache:
36+
linux-gcc-psv-build-relwithdebinfo-no-cache:
3837
name: Linux Build using gcc & tests & code coverage
3938
runs-on: ubuntu-18.04
39+
env:
40+
BUILD_TYPE: RelWithDebInfo
4041
steps:
41-
4242
- name: Check out repository
4343
uses: actions/checkout@v2
4444
- name: Install Ubuntu dependencies
45-
run: sudo apt-get install -y libboost-all-dev ccache libssl-dev libcurl4-openssl-dev --no-install-recommends
45+
run: sudo apt-get update && sudo apt-get install -y libboost-all-dev libssl-dev libcurl4-openssl-dev --no-install-recommends
4646
shell: bash
4747
- name: Compile project without cache
4848
run: ./scripts/linux/psv/build_psv_no_cache.sh

.gitlab-ci.yml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,11 @@
11
image: ${DOCKER_REGISTRY}/${DOCKER_IMAGE}:${DOCKER_IMAGE_VERSION}
22

3+
include:
4+
- template: Security/SAST.gitlab-ci.yml
5+
- template: Security/Secret-Detection.gitlab-ci.yml
6+
- template: Security/License-Scanning.gitlab-ci.yml
7+
- template: Security/Dependency-Scanning.gitlab-ci.yml
8+
39
variables:
410
LD_PRELOAD: "/lib/x86_64-linux-gnu/libSegFault.so"
511
SEGFAULT_SIGNALS: "all"

0 commit comments

Comments
 (0)