1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37
stages: - build - test image: ubuntu before_script: - curl -sSL https://cli.kondukto.io | sh - export KONDUKTO_HOST=$KONDUKTO_HOST - export KONDUKTO_TOKEN=$KONDUKTO_TOKEN build: stage: build script: - echo "Project Building" SAST Test: stage: test script: - echo "SAST via Kondukto" - kdt scan -p $CI_PROJECT_NAME -t checkmarx -b $CI_COMMIT_REF_NAME SCA Test: stage: test script: - echo "SCA via Kondukto" - kdt scan -p $CI_PROJECT_NAME -t dependencycheck - b $CI_COMMIT_REF_NAME --async - kdt sbom import cyclonedx.json -p $CI_PROJECT_NAME CS Test: stage: test script: - echo "CS via Kondukto" - kdt scan -p $CI_PROJECT_NAME -t trivy --image=ubuntu:latest - b $CI_COMMIT_REF_NAME --async