From 71d82306b5dc39fce1a4e002a5cfaa723e0d94d5 Mon Sep 17 00:00:00 2001
From: Marc 'risson' Schmitt <risson@cri.epita.fr>
Date: Sat, 22 Jan 2022 18:58:01 +0100
Subject: [PATCH] ci: replace checkov with GitLab SAST-IaC
Signed-off-by: Marc 'risson' Schmitt <risson@cri.epita.fr>
---
.gitlab-ci.yml | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index d450593..3a6fefc 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -4,11 +4,13 @@ default:
image: registry.cri.epita.fr/cri/iac/infrastructure
include:
+ - template: Security/SAST-IaC.latest.gitlab-ci.yml
- project: cri/iac/infrastructure
file: .gitlab/ci/templates.yml
stages:
- build
+ - test
- lint
- qa
- publish
@@ -32,8 +34,8 @@ ansible:
black:
extends: .black
-checkov:
- extends: .checkov
+kics-iac-sast:
+ needs: []
yamllint:
extends: .yamllint
--
GitLab