meissa
/
mastodon-bot
Archived
7
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

add security scanner

Browse Source
master
jem 3 years ago
parent b03e2456ee
commit 5ad6114423
1 changed files with 18 additions and 10 deletions
Show Stats Download Patch File Download Diff File

28
.gitlab-ci.yml
Unescape Escape View File

@ -1,4 +1,4 @@
image: node:lts-buster image: node:lts-buster
stages: stages:
- test - test
@ -12,13 +12,13 @@ cache:
default: default:
before_script: before_script:
- apt update && apt -qqy install openjdk-11-jre-headless - apt update && apt -qqy install openjdk-11-jre-headless
- npm install - npm install
- npm install -g --save-dev shadow-cljs - npm install -g --save-dev shadow-cljs
build: build:
stage: test stage: test
script: script:
- shadow-cljs compile test - shadow-cljs compile test
package: package:
@ -27,8 +27,8 @@ package:
- if: '$CI_COMMIT_BRANCH == "master"' - if: '$CI_COMMIT_BRANCH == "master"'
artifacts: artifacts:
paths: paths:
- target/ - target/
script: script:
- shadow-cljs compile app - shadow-cljs compile app
- chmod a+x target/mastodon-bot.js - chmod a+x target/mastodon-bot.js
- sha256sum target/mastodon-bot.js > target/mastodon-bot.js.sha256 - sha256sum target/mastodon-bot.js > target/mastodon-bot.js.sha256
@ -42,7 +42,7 @@ upload-prerelease:
- echo _auth=$NPM_PUBLSH_KEY >> .npmrc - echo _auth=$NPM_PUBLSH_KEY >> .npmrc
- echo email=$NPM_PUBLSH_MAIL >> .npmrc - echo email=$NPM_PUBLSH_MAIL >> .npmrc
- echo always-auth=true >> .npmrc - echo always-auth=true >> .npmrc
script: script:
- mkdir -p target/npm-build/mastodon_bot - mkdir -p target/npm-build/mastodon_bot
- cp target/mastodon-bot.js target/npm-build/mastodon_bot/ - cp target/mastodon-bot.js target/npm-build/mastodon_bot/
- cp target/mastodon-bot.js.sha256 target/npm-build/mastodon_bot/ - cp target/mastodon-bot.js.sha256 target/npm-build/mastodon_bot/
@ -52,7 +52,6 @@ upload-prerelease:
- npm version --no-git-tag-version prerelease - npm version --no-git-tag-version prerelease
- npm publish ./target/npm-build/mastodon_bot --access public - npm publish ./target/npm-build/mastodon_bot --access public
upload-release: upload-release:
stage: upload stage: upload
rules: rules:
@ -61,7 +60,7 @@ upload-release:
- echo _auth=$NPM_PUBLSH_KEY >> .npmrc - echo _auth=$NPM_PUBLSH_KEY >> .npmrc
- echo email=$NPM_PUBLSH_MAIL >> .npmrc - echo email=$NPM_PUBLSH_MAIL >> .npmrc
- echo always-auth=true >> .npmrc - echo always-auth=true >> .npmrc
script: script:
- mkdir -p target/npm-build/mastodon_bot - mkdir -p target/npm-build/mastodon_bot
- cp target/mastodon-bot.js target/npm-build/mastodon_bot/ - cp target/mastodon-bot.js target/npm-build/mastodon_bot/
- cp target/mastodon-bot.js.sha256 target/npm-build/mastodon_bot/ - cp target/mastodon-bot.js.sha256 target/npm-build/mastodon_bot/
@ -70,3 +69,12 @@ upload-release:
- cp README.md target/npm-build/mastodon_bot/ - cp README.md target/npm-build/mastodon_bot/
- npm version --no-git-tag-version $CI_COMMIT_TAG - npm version --no-git-tag-version $CI_COMMIT_TAG
- npm publish ./target/npm-build/mastodon_bot --access public - npm publish ./target/npm-build/mastodon_bot --access public
sast:
variables:
SAST_EXCLUDED_ANALYZERS:
bandit, brakeman, flawfinder, gosec, kubesec, phpcs-security-audit,
pmd-apex, security-code-scan, sobelow, spotbugs
stage: test
include:
- template: Security/SAST.gitlab-ci.yml