.gitlab-ci.yml in gitlab-dangerfiles-4.6.0 vs .gitlab-ci.yml in gitlab-dangerfiles-4.7.0
- old
+ new
@@ -1,41 +1,36 @@
stages:
- test
- deploy
-variables:
- DEFAULT_CI_IMAGE: "ruby:${RUBY_VERSION}"
-
workflow:
rules:
# For merge requests, create a pipeline.
- if: '$CI_MERGE_REQUEST_IID'
# For `master` branch, create a pipeline (this includes on schedules, pushes, merges, etc.).
- if: '$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH'
# For tags, create a pipeline.
- if: '$CI_COMMIT_TAG'
default:
- image: "${DEFAULT_CI_IMAGE}"
tags:
- gitlab-org
- before_script:
- - gem install bundler
- - bundle install -j $(nproc) --path vendor
cache:
key:
files:
- Gemfile
- gitlab-dangerfiles.gemspec
paths:
- vendor/ruby
- - Gemfile.lock
- policy: pull
.default-test-job:
+ image: "ruby:${RUBY_VERSION}"
stage: test
needs: []
+ before_script:
+ - gem install bundler
+ - bundle install -j $(nproc) --path vendor
parallel:
matrix:
- RUBY_VERSION: ['3.0', '3.1', '3.2']
test:rspec:
@@ -47,18 +42,16 @@
extends: .default-test-job
script:
- bundle exec rubocop -P -E .
include:
- - template: Security/Dependency-Scanning.gitlab-ci.yml
- - template: Security/SAST.gitlab-ci.yml
- - template: Security/Secret-Detection.gitlab-ci.yml
- - project: 'gitlab-org/quality/pipeline-common'
- file:
- - '/ci/danger-review.yml'
- - component: "gitlab.com/gitlab-org/quality/pipeline-common/gem-release@7.6.1"
+ - component: gitlab.com/components/sast/sast@~latest
+ - component: gitlab.com/components/secret-detection/secret-detection@~latest
+ - component: gitlab.com/gitlab-org/components/gem-release/gem-release@~latest
inputs:
smoke_test_script: "ruby -r 'gitlab-dangerfiles' -e \"puts Gitlab::Dangerfiles::VERSION\""
+ - component: gitlab.com/gitlab-org/components/danger-review/danger-review@~latest
+ - template: Security/Dependency-Scanning.gitlab-ci.yml
# run security jobs on MRs
# see: https://gitlab.com/gitlab-org/gitlab/-/issues/218444#note_478761991
brakeman-sast: