build

.gitlab-ci.yml

@@ -2,6 +2,9 @@
 stages:          # List of stages for jobs, and their order of execution
   - notify1
   - lint
+  - test
+  - security
+  - dast
   - build
   - clean
   - notify
@@ -31,6 +34,14 @@ lint:
     - rm -rf /home/gitlab-runner/builds/1fLwHSKm2/0/jaydee/portainer.tmp
   rules:
       - if: '$CI_COMMIT_MESSAGE =~ /lint/'
+
+      
+include:
+  - template: Security/SAST.gitlab-ci.yml
+  - template: Security/Dependency-Scanning.gitlab-ci.yml
+  - template: Security/Secret-Detection.gitlab-ci.yml
+  - template: Security/DAST.gitlab-ci.yml
+
 build-job:       # This job runs in the build stage, which runs first.
     stage: build
     image: r.sectorq.eu/jaydee/builder:amd64
@@ -99,4 +110,4 @@ notify2:
       - curl -XPOST http://192.168.77.101:8123/api/webhook/voice-notifications-tC_8YKxMJIAaQRV5riKuC7Zl --data-raw 'message=portainer build job failed'
       - rm -rf /home/gitlab-runner/builds/1fLwHSKm2/0/jaydee/portainer.tmp
   rules:
-      - if: '$CI_COMMIT_MESSAGE =~ /build/'
+      - if: '$CI_COMMIT_MESSAGE =~ /build/'

.gitlab/sast-ruleset.toml

@@ -0,0 +1,2 @@
+[semgrep]
+exclude = ["bandit.B101", "java_deserialization_rule-JacksonUnsafeDeserialization"]

main.py

@@ -46,7 +46,7 @@ def setup_vault():
     # Specify the mount point of your KV engine
     return vclient
 
-VERSION = "0.1.67"
+VERSION = "0.1.74"
 
 
 defaults = {