Merge branch 'set-secret-detection-config-1' into 'main'

在 `.gitlab-ci.yml` 中配置 Secret 检测,如果该文件不存在则创建此文件

See merge request crack/n8n!2
This commit is contained in:
2023-11-16 09:33:10 +00:00

View File

@@ -5,17 +5,11 @@
# Container Scanning customization: https://docs.gitlab.com/ee/user/application_security/container_scanning/#customizing-the-container-scanning-settings # Container Scanning customization: https://docs.gitlab.com/ee/user/application_security/container_scanning/#customizing-the-container-scanning-settings
# Note that environment variables can be set in several places # Note that environment variables can be set in several places
# See https://docs.gitlab.com/ee/ci/variables/#cicd-variable-precedence # See https://docs.gitlab.com/ee/ci/variables/#cicd-variable-precedence
# container_scanning:
# variables:
# DOCKER_IMAGE: ...
# DOCKER_USER: ...
# DOCKER_PASSWORD: ...
stages: stages:
- release - release
- test - test
variables: variables:
CI_APPLICATION_REPOSITORY: $CI_REGISTRY_IMAGE CI_APPLICATION_REPOSITORY: "$CI_REGISTRY_IMAGE"
CI_APPLICATION_TAG: ai-beta CI_APPLICATION_TAG: ai-beta
release-image: release-image:
image: docker:24.0.6 image: docker:24.0.6
@@ -31,10 +25,9 @@ release-image:
sed "s/latest/$CI_APPLICATION_TAG/g" Dockerfile > Dockerfile.tmp sed "s/latest/$CI_APPLICATION_TAG/g" Dockerfile > Dockerfile.tmp
docker build . --pull -f Dockerfile.tmp -t $IMAGE_TAG docker build . --pull -f Dockerfile.tmp -t $IMAGE_TAG
docker push $IMAGE_TAG docker push $IMAGE_TAG
container_scanning: container_scanning:
needs: needs:
- release-image - release-image
include: include:
- template: Jobs/Container-Scanning.gitlab-ci.yml - template: Jobs/Container-Scanning.gitlab-ci.yml
- template: Security/Secret-Detection.gitlab-ci.yml