gitea-admin/lti-api
1
0
Fork 0
mirror of https://gitlab.com/mbugroup/lti-api.git synced 2026-05-20 13:31:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update .gitlab-ci.yml file

Browse Source
This commit is contained in:
kris
2025-11-11 08:28:54 +00:00
parent 8e89f9fad0
commit 0766cfeeb2
1 changed files with 8 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitlab-ci.yml
+8 -7
View File
@@ -7,16 +7,16 @@ cache:
- .cache - .cache
# ============================================================ # ============================================================
# 🧠 Step 1: Security Scan dengan gosec # 🧠 Step 1: Security Scan dengan gosec (pakai Go 1.24)
# ============================================================ # ============================================================
gosec_scan: gosec_scan:
stage: scan stage: scan
image: golang:1.23 image: golang:1.24
script: script:
- go install github.com/securego/gosec/v2/cmd/gosec@latest - go install github.com/securego/gosec/v2/cmd/gosec@latest
- echo "🔍 Menjalankan scan keamanan Go..." - echo "🔍 Menjalankan scan keamanan Go..."
- gosec -fmt=json -out=gosec-report.json ./... - gosec -fmt=json -out=gosec-report.json ./...
- cat gosec-report.json | jq '.Issues | length' - echo "📄 Jumlah issue terdeteksi:" && cat gosec-report.json | jq '.Issues | length'
artifacts: artifacts:
when: always when: always
paths: paths:
@@ -24,8 +24,7 @@ gosec_scan:
expire_in: 1 week expire_in: 1 week
allow_failure: false allow_failure: false
only: only:
- merge_requests - devops-ec2
- branches
# ============================================================ # ============================================================
# 🧱 Step 2: Analisis SonarQube # 🧱 Step 2: Analisis SonarQube
@@ -35,17 +34,18 @@ sonarqube_analysis:
image: sonarsource/sonar-scanner-cli:latest image: sonarsource/sonar-scanner-cli:latest
script: script:
- echo "🚀 Menjalankan analisis SonarQube..." - echo "🚀 Menjalankan analisis SonarQube..."
- if [ -f "go.mod" ]; then go test ./... -coverprofile=coverage.out || true; fi
- sonar-scanner \ - sonar-scanner \
-Dsonar.projectKey="mbu-lti-backend" \ -Dsonar.projectKey="mbu-lti-backend" \
-Dsonar.projectName="MBU LTI Backend" \ -Dsonar.projectName="MBU LTI Backend" \
-Dsonar.sources="." \ -Dsonar.sources="." \
-Dsonar.host.url="https://status.mbugroup.id/sonar" \ -Dsonar.host.url="https://status.mbugroup.id/sonar" \
-Dsonar.login="sqp_97b3cb2f80ce932fb07b5641aeecc8704b76d1a7" \ -Dsonar.login="sqp_97b3cb2f80ce932fb07b5641aeecc8704b76d1a7" \
-Dsonar.go.coverage.reportPaths="coverage.out" \
-Dsonar.sourceEncoding="UTF-8" \ -Dsonar.sourceEncoding="UTF-8" \
-Dsonar.verbose=true -Dsonar.verbose=true
only: only:
- merge_requests - devops-ec2
- branches
allow_failure: false allow_failure: false
dependencies: dependencies:
- gosec_scan - gosec_scan
@@ -53,4 +53,5 @@ sonarqube_analysis:
when: always when: always
paths: paths:
- .scannerwork - .scannerwork
- coverage.out
expire_in: 1 week expire_in: 1 week