From d346646802f02a06f5b48986b1a54849e6fb960a Mon Sep 17 00:00:00 2001 From: caydens <4884755-caydens@users.noreply.gitlab.com> Date: Sat, 31 Oct 2026 21:16:32 -0500 Subject: [PATCH 1/2] Configure SAST in `.gitlab-ci.yml`, creating this file if it does not already exist --- .gitlab-ci.yml | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 .gitlab-ci.yml diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml new file mode 100644 index 0000000..857bcdf --- /dev/null +++ b/.gitlab-ci.yml @@ -0,0 +1,13 @@ +# You can override the included template(s) by including variable overrides +# SAST customization: https://docs.gitlab.com/user/application_security/sast/#available-cicd-variables +# Secret Detection customization: https://docs.gitlab.com/user/application_security/secret_detection/pipeline/configure/ +# Dependency Scanning customization: https://docs.gitlab.com/user/application_security/dependency_scanning/dependency_scanning_sbom/#customizing-analyzer-behavior +# Container Scanning customization: https://docs.gitlab.com/user/application_security/container_scanning/#customizing-analyzer-behavior +# Note that environment variables can be set in several places +# See https://docs.gitlab.com/ci/variables/#cicd-variable-precedence +stages: +- test +sast: + stage: test +include: +- template: Security/SAST.gitlab-ci.yml From 57ebe3bc3209ffd682306991a4e9e91222baf019 Mon Sep 17 00:00:00 2001 From: caydens <4884755-caydens@users.noreply.gitlab.com> Date: Sat, 31 Oct 2026 21:16:33 -0500 Subject: [PATCH 2/2] Configure Secret Detection in `.gitlab-ci.yml`, creating this file if it does not already exist --- .gitlab-ci.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 857bcdf..f09ba48 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -7,7 +7,11 @@ # See https://docs.gitlab.com/ci/variables/#cicd-variable-precedence stages: - test +- secret-detection sast: stage: test include: - template: Security/SAST.gitlab-ci.yml +- template: Security/Secret-Detection.gitlab-ci.yml +secret_detection: + stage: secret-detection