Configure SAST in .gitlab-ci.yml, creating this file if it does not already exist

.gitlab-ci.yml

@@ -1,18 +1,10 @@
-#Calendar implementation for the HTWK Leipzig timetable. Evaluation and display of the individual dates in iCal format.
+# You can override the included template(s) by including variable overrides
-#Copyright (C) 2024 HTWKalender support@htwkalender.de
+# SAST customization: https://docs.gitlab.com/ee/user/application_security/sast/#customizing-the-sast-settings
-
+# Secret Detection customization: https://docs.gitlab.com/ee/user/application_security/secret_detection/pipeline/#customization
-#This program is free software: you can redistribute it and/or modify
+# Dependency Scanning customization: https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#customizing-the-dependency-scanning-settings
-#it under the terms of the GNU Affero General Public License as published by
+# Container Scanning customization: https://docs.gitlab.com/ee/user/application_security/container_scanning/#customizing-the-container-scanning-settings
-#the Free Software Foundation, either version 3 of the License, or
+# Note that environment variables can be set in several places
-#(at your option) any later version.
+# See https://docs.gitlab.com/ee/ci/variables/#cicd-variable-precedence
-
-#This program is distributed in the hope that it will be useful,
-#but WITHOUT ANY WARRANTY; without even the implied warranty of
-#MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-#GNU Affero General Public License for more details.
-
-#You should have received a copy of the GNU Affero General Public License
-#along with this program.  If not, see <https://www.gnu.org/licenses/>.
 stages:
 - lint
 - sonarqube-check
@@ -20,7 +12,6 @@ stages:
 - build
 - package
 - deploy
-
 lint-frontend:
   image: node:lts
   stage: lint
@@ -31,7 +22,6 @@ lint-frontend:
   rules:
   - changes:
     - frontend/**/*
-
 lint-data-manager:
   stage: lint
   image: golangci/golangci-lint:latest
@@ -43,7 +33,6 @@ lint-data-manager:
   rules:
   - changes:
     - services/data-manager/**/*
-
 lint-ical:
   stage: lint
   image: golangci/golangci-lint:latest
@@ -55,7 +44,6 @@ lint-ical:
   rules:
   - changes:
     - services/ical/**/*
-
 sonarqube-data-manager:
   stage: sonarqube-check
   tags:
@@ -76,9 +64,9 @@ sonarqube-data-manager:
   - sonar-scanner
   allow_failure: true
   rules:
-    - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
+  - if: $CI_PIPELINE_SOURCE == "merge_request_event"
-    - if: '$CI_COMMIT_REF_NAME == "master" || $CI_COMMIT_REF_NAME == "main" || $CI_COMMIT_REF_NAME == "develop"'
+  - if: $CI_COMMIT_REF_NAME == "master" || $CI_COMMIT_REF_NAME == "main" || $CI_COMMIT_REF_NAME
-
+      == "develop"
 test-data-manager:
   image: golang:alpine
   stage: test
@@ -88,7 +76,6 @@ test-data-manager:
   rules:
   - changes:
     - services/data-manager/**/*
-
 test-ical:
   image: golang:alpine
   stage: test
@@ -98,7 +85,6 @@ test-ical:
   rules:
   - changes:
     - services/ical/**/*
-
 test-frontend:
   image: node:lts
   stage: test
@@ -108,7 +94,9 @@ test-frontend:
   - npm run test
   dependencies:
   - lint-frontend
-
 include:
-  - local: 'charts/ci-build-deploy.yml'
+- local: charts/ci-build-deploy.yml
 - template: Security/Dependency-Scanning.gitlab-ci.yml
+- template: Security/SAST.gitlab-ci.yml
+sast:
+  stage: test