Commit ded2e8de authored by Thomas Boni's avatar Thomas Boni
Browse files

Merge branch '246-verify-that-the-code-isn-t-modified-during-the-job' into 'latest' 

Resolve "Verify that the code isn't modified during the job"

Closes #246

See merge request r2devops/hub!122
parents 1215d2eb a34a0802

.gitlab-ci.yml

+15 −0
Original line number Diff line number Diff line
@@ -47,6 +47,21 @@ structure: 
    expire_in: 30 days

    when: always



job_customs:

  image: python:3.9.1-alpine

  stage: static_tests

  variables:

    PIPENV_PIPFILE: tools/job_customs/Pipfile

    JOB_LOGFILE: "job_customs.log"

  before_script:

    - pip install --ignore-installed distlib pipenv

    - pipenv install

  script:

    - pipenv run python3 tools/job_customs/job_customs.py

  artifacts:

    paths:

      - ${JOB_LOGFILE}



scan_images_dep:

  image: docker:19.03

  stage: static_tests

jobs/trivy_image/trivy_image.yml

+0 −1
Original line number Diff line number Diff line
@@ -63,7 +63,6 @@ trivy_image: 
    - else

    -   ./trivy --template "@$TEMPLATE_NAME" -o $TRIVY_OUTPUT $REGISTRY_IMAGE:$CI_COMMIT_SHA

    - fi



  cache:

    paths:

      - "$TRIVY_CACHE_DIR"

log

0 → 100644
+533 −0

File added.

Preview size limit exceeded, changes collapsed.

tools/job_customs/Pipfile

0 → 100644
+10 −0
Original line number Diff line number Diff line 
[[source]]

name = "pypi"

url = "https://pypi.org/simple"

verify_ssl = true



[requires]

python_version = "3"



[packages]

pyyaml = "==5.3.1"

tools/job_customs/Pipfile.lock

0 → 100644
+40 −0
Original line number Diff line number Diff line 
{

    "_meta": {

        "hash": {

            "sha256": "ac0ce3b857220356672b701f08dc6413e0373a41f9442ca3479b74651dd8f21d"

        },

        "pipfile-spec": 6,

        "requires": {

            "python_version": "3"

        },

        "sources": [

            {

                "name": "pypi",

                "url": "https://pypi.org/simple",

                "verify_ssl": true

            }

        ]

    },

    "default": {

        "pyyaml": {

            "hashes": [

                "sha256:06a0d7ba600ce0b2d2fe2e78453a470b5a6e000a985dd4a4e54e436cc36b0e97",

                "sha256:240097ff019d7c70a4922b6869d8a86407758333f02203e0fc6ff79c5dcede76",

                "sha256:4f4b913ca1a7319b33cfb1369e91e50354d6f07a135f3b901aca02aa95940bd2",

                "sha256:6034f55dab5fea9e53f436aa68fa3ace2634918e8b5994d82f3621c04ff5ed2e",

                "sha256:69f00dca373f240f842b2931fb2c7e14ddbacd1397d57157a9b005a6a9942648",

                "sha256:73f099454b799e05e5ab51423c7bcf361c58d3206fa7b0d555426b1f4d9a3eaf",

                "sha256:74809a57b329d6cc0fdccee6318f44b9b8649961fa73144a98735b0aaf029f1f",

                "sha256:7739fc0fa8205b3ee8808aea45e968bc90082c10aef6ea95e855e10abf4a37b2",

                "sha256:95f71d2af0ff4227885f7a6605c37fd53d3a106fcab511b8860ecca9fcf400ee",

                "sha256:ad9c67312c84def58f3c04504727ca879cb0013b2517c85a9a253f0cb6380c0a",

                "sha256:b8eac752c5e14d3eca0e6dd9199cd627518cb5ec06add0de9d32baeee6fe645d",

                "sha256:cc8955cfbfc7a115fa81d85284ee61147059a753344bc51098f3ccd69b0d7e0c",

                "sha256:d13155f591e6fcc1ec3b30685d50bf0711574e2c0dfffd7644babf8b5102ca1a"

            ],

            "index": "pypi",

            "version": "==5.3.1"

        }

    },

    "develop": {}

}