diff --git a/{% if from_ccsteam %}.gitlab-ci.yml{% endif %}.jinja b/{% if from_ccsteam %}.gitlab-ci.yml{% endif %}.jinja index 5961c16..b3b9c07 100644 --- a/{% if from_ccsteam %}.gitlab-ci.yml{% endif %}.jinja +++ b/{% if from_ccsteam %}.gitlab-ci.yml{% endif %}.jinja @@ -71,6 +71,7 @@ variables: stages: - check - build + - security - deploy default: @@ -106,6 +107,15 @@ test: - poetry run pytest --cov-config=setup.cfg coverage: '/Total coverage: \d\d\d.\d\d%/' +security: + stage: security + allow_failure: true + trigger: + include: + - project: devsecops/pipelines + file: integration_templates/python.yml + + build: image: docker:latest stage: build @@ -205,3 +215,6 @@ deploy.botsprod: - echo "Deploing Docker container ${CONTAINER_NAME}" - *create_db - *run_bot + needs: + - job: security + artifacts: true