From 9829f6a06b942afe595dc4cbeba5c5309eaa01ff Mon Sep 17 00:00:00 2001 From: Viktor Kirichenko Date: Tue, 28 Apr 2026 07:40:37 +0000 Subject: [PATCH] Configure Secret Detection in `.gitlab-ci.yml`, creating this file if it does not already exist --- .gitlab-ci.yml | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 .gitlab-ci.yml diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml new file mode 100644 index 00000000..e99d5b4b --- /dev/null +++ b/.gitlab-ci.yml @@ -0,0 +1,16 @@ +# You can override the included template(s) by including variable overrides +# SAST customization: https://docs.gitlab.com/user/application_security/sast/#available-cicd-variables +# Secret Detection customization: https://docs.gitlab.com/user/application_security/secret_detection/pipeline/configure/ +# Dependency Scanning customization: https://docs.gitlab.com/user/application_security/dependency_scanning/dependency_scanning_sbom/#customizing-analyzer-behavior +# Container Scanning customization: https://docs.gitlab.com/user/application_security/container_scanning/#customizing-analyzer-behavior +# Note that environment variables can be set in several places +# See https://docs.gitlab.com/ci/variables/#cicd-variable-precedence +stages: +- test +- secret-detection +variables: + SECRET_DETECTION_ENABLED: 'true' +secret_detection: + stage: secret-detection +include: +- template: Security/Secret-Detection.gitlab-ci.yml