gitea-admin/lti-api
1
0
Fork 0
mirror of https://gitlab.com/mbugroup/lti-api.git synced 2026-05-25 07:45:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update .gitlab-ci.yml file

Browse Source
This commit is contained in:
kris
2025-11-11 08:45:25 +00:00
parent d740a3e26e
commit 4837ed4255
1 changed files with 4 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitlab-ci.yml
+4 -9
View File
@@ -13,9 +13,9 @@ gosec_scan:
stage: scan stage: scan
image: golang:1.24 image: golang:1.24
script: script:
- apt-get update && apt-get install -y jq
- go install github.com/securego/gosec/v2/cmd/gosec@latest - go install github.com/securego/gosec/v2/cmd/gosec@latest
- echo "🔍 Menjalankan scan keamanan Go..." - echo "🔍 Menjalankan scan keamanan Go..."
# Jalankan gosec, tapi jangan hentikan pipeline walau ada temuan
- gosec -fmt=json -out=gosec-report.json ./... || true - gosec -fmt=json -out=gosec-report.json ./... || true
- echo "📄 Jumlah issue terdeteksi:" && cat gosec-report.json | jq '.Issues | length' - echo "📄 Jumlah issue terdeteksi:" && cat gosec-report.json | jq '.Issues | length'
artifacts: artifacts:
@@ -34,22 +34,17 @@ sonarqube_analysis:
stage: scan stage: scan
image: sonarsource/sonar-scanner-cli:latest image: sonarsource/sonar-scanner-cli:latest
script: script:
- apk add --no-cache jq
- echo "🚀 Menjalankan analisis SonarQube..." - echo "🚀 Menjalankan analisis SonarQube..."
- if [ -f "go.mod" ]; then go test ./... -coverprofile=coverage.out || true; fi - if [ -f "go.mod" ]; then go test ./... -coverprofile=coverage.out || true; fi
# (Opsional) ubah report JSON gosec jadi format kompatibel SonarQube Generic Issue # Konversi hasil gosec ke format SonarQube Generic Issue
- echo "🧩 Mengonversi hasil gosec untuk SonarQube..." - echo "🧩 Mengonversi hasil gosec untuk SonarQube..."
- |
cat > gosec-generic-report.json <<'EOF'
{
"issues": []
}
EOF
- | - |
jq -r '.Issues[] | {engineId: "gosec", ruleId: .rule_id, primaryLocation: {message: .details, filePath: .file, textRange: {startLine: .line}}, type: "VULNERABILITY", severity: .severity}' gosec-report.json | jq -r '.Issues[] | {engineId: "gosec", ruleId: .rule_id, primaryLocation: {message: .details, filePath: .file, textRange: {startLine: .line}}, type: "VULNERABILITY", severity: .severity}' gosec-report.json |
jq -s '{issues: .}' > gosec-generic-report.json jq -s '{issues: .}' > gosec-generic-report.json
# Jalankan analisis SonarQube dan sertakan laporan gosec # Kirim analisis ke SonarQube
- sonar-scanner \ - sonar-scanner \
-Dsonar.projectKey="mbu-lti-backend" \ -Dsonar.projectKey="mbu-lti-backend" \
-Dsonar.projectName="MBU LTI Backend" \ -Dsonar.projectName="MBU LTI Backend" \