reenable the branch binding for deployments

.gitlab-ci.yml

@@ -72,22 +72,22 @@ package:
       - target/mastodon-bot.js.sha256
       - target/mastodon-bot.js.sha512
 
-# sast:
+sast:
-#   variables:
+  variables:
-#     SAST_EXCLUDED_ANALYZERS:
+    SAST_EXCLUDED_ANALYZERS:
-#       bandit, brakeman, flawfinder, gosec, kubesec, phpcs-security-audit,
+      bandit, brakeman, flawfinder, gosec, kubesec, phpcs-security-audit,
-#       pmd-apex, security-code-scan, sobelow, spotbugs
+      pmd-apex, security-code-scan, sobelow, spotbugs
-#   stage: security
+  stage: security
-#   before_script:
+  before_script:
-#     - mkdir -p builds && cp -r target/ builds/
+    - mkdir -p builds && cp -r target/ builds/
-# include:
+include:
-#   - template: Security/SAST.gitlab-ci.yml
+  - template: Security/SAST.gitlab-ci.yml
 
 upload-cljs-prerelease:
   <<: *js-upload
   stage: upload
-  # rules:
+  rules:
-  #   - if: '$CI_COMMIT_BRANCH == "master" && $CI_COMMIT_TAG == null'
+    - if: '$CI_COMMIT_BRANCH == "master" && $CI_COMMIT_TAG == null'
   script:
     - cp package.json target/npm-build/
     - sed -i 's|SNAPSHOT|'$(date +"%Y%m%d%H%M%S")'|' ./target/npm-build/package.json
@@ -96,8 +96,8 @@ upload-cljs-prerelease:
 upload-clj-prerelease:
   <<: *clj
   stage: upload
-  # rules:
+  rules:
-  #   - if: '$CI_COMMIT_BRANCH == "master" && $CI_COMMIT_TAG == null'
+    - if: '$CI_COMMIT_BRANCH == "master" && $CI_COMMIT_TAG == null'
   script:
     - lein deploy clojars
 
@@ -113,7 +113,7 @@ upload-js-release:
 build:
   image: domaindrivenarchitecture/dda-devops-build:latest
   stage: image
-  # rules:
+  rules:
-  #   - if: '$CI_COMMIT_BRANCH == "master" && $CI_COMMIT_TAG != null'
+    - if: '$CI_COMMIT_BRANCH == "master" && $CI_COMMIT_TAG != null'
   script:
     - cd infrastructure/docker && pyb image test publish