Commit c2160c95 authored by Bertrand Goareguer's avatar Bertrand Goareguer
Browse files

fix: globbing not supported in report paths

parent db420d8e

templates/gitlab-ci-defectdojo.yml

+9 −9
Original line number Diff line number Diff line
@@ -11,15 +11,15 @@ variables: 
  TBC_TRACKING_IMAGE: "$CI_REGISTRY/to-be-continuous/tools/tracking:master"



  DEFECTDOJO_DIR: "."

  DEFECTDOJO_BANDIT_REPORTS: "**/bandit*.json **/reports/py-bandit.bandit.json"

  DEFECTDOJO_GITLEAKS_REPORTS: "**/gitleaks-report.json"

  DEFECTDOJO_NODEJSSCAN_REPORTS: "**/nodejsscan-report-sarif.json"

  DEFECTDOJO_NPMAUDIT_REPORTS: "**/npm-audit*.json"

  DEFECTDOJO_DC_REPORTS: "**/dependency-check*.xml"

  DEFECTDOJO_DC_GRADLE_REPORTS: "**/dependency-check*.xml"

  DEFECTDOJO_TRIVY_REPORTS: "trivy/*.json **/trivy-*.json **/reports/docker-trivy-*.native.json **/reports/py-trivy.trivy.json"

  DEFECTDOJO_HADOLINT_REPORTS: "**/hadolint-json-*.json **/reports/docker-hadolint-*.native.json"

  DEFECTDOJO_MOBSF_REPORTS: "**/mobsf*.json"

  DEFECTDOJO_BANDIT_REPORTS: "bandit*.json reports/py-bandit.bandit.json"

  DEFECTDOJO_GITLEAKS_REPORTS: "gitleaks-report.json"

  DEFECTDOJO_NODEJSSCAN_REPORTS: "nodejsscan-report-sarif.json"

  DEFECTDOJO_NPMAUDIT_REPORTS: "npm-audit*.json"

  DEFECTDOJO_DC_REPORTS: "dependency-check*.xml"

  DEFECTDOJO_DC_GRADLE_REPORTS: "dependency-check*.xml"

  DEFECTDOJO_TRIVY_REPORTS: "trivy/*.json trivy-*.json reports/docker-trivy-*.native.json reports/py-trivy.trivy.json"

  DEFECTDOJO_HADOLINT_REPORTS: "hadolint-json-*.json reports/docker-hadolint-*.native.json"

  DEFECTDOJO_MOBSF_REPORTS: "mobsf*.json"

  DEFECTDOJO_SONARQUBE_SINCELEAKPERIOD: "false"

  DEFECTDOJO_SONARQUBE_NOSECURITYHOTSPOT: "true"

  DEFECTDOJO_SONARQUBE_ALLBUGS: "false"