.gitlab-ci.yml

---
# SAST customization: https://docs.gitlab.com/ee/user/application_security/sast/#customizing-the-sast-settings
# Secret Detection customization: https://docs.gitlab.com/ee/user/application_security/secret_detection/pipeline/#customization
# Dependency Scanning customization: https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#customizing-the-dependency-scanning-settings
# Container Scanning customization: https://docs.gitlab.com/ee/user/application_security/container_scanning/#customizing-the-container-scanning-settings

variables:
  DOCKERHUB_REPO_NAME: cioban
  GITHUB_REPO_NAME: ix-ai/cioban
  ENABLE_ARM64: 'true'
  ENABLE_ARMv7: 'true'
  ENABLE_ARMv6: 'true'
  ENABLE_386: 'true'

include:
- project: ix.ai/ci-templates
  file: "/python-project.yml"
- template: Security/SAST.gitlab-ci.yml
- template: Dependency-Scanning.gitlab-ci.yml
- template: Jobs/Container-Scanning.gitlab-ci.yml

sast:
  stage: test

container_scanning:
  variables:
    GIT_STRATEGY: fetch
  script:
    - !reference [.set-image-tag]
    - export CS_IMAGE="${CI_REGISTRY_IMAGE}:${TAG}"
    - gtcs scan
  stage: .post