fix: keep default dependencies on jobs using DOCKER_SNAPSHOT_IMAGE or DOCKER_RELEASE_IMAGE

  extends: .docker-dind-base

  variables:

    GIT_STRATEGY: none

  dependencies: []

  stage: package-test

  script: |

    # Test by internal health_check (Recommended way, more info https://docs.docker.com/engine/reference/builder/#healthcheck)

    - !reference [.test-policy, rules]

# Security audit with trivy

# This is a non-blocking job, it will always return (code) 0

docker-trivy:

  extends: .docker-base

  dependencies: []

  image:

    name: $DOCKER_TRIVY_IMAGE

    entrypoint: [""]

  image:

    name: $DOCKER_SBOM_IMAGE

    entrypoint: [""]

  # force no dependency

  dependencies: []

  script:

    - mkdir -p -m 777 reports

    - basename=$(echo "${DOCKER_SNAPSHOT_IMAGE}" | sed 's|[/:]|_|g')