

📝 This feature requires Gitlab Ultimate. kics scan -no-progress -q /usr/bin/assets/queries -p $ -output-name kics-resultsĮxample results ¶ Pipeline SAST report integration ¶

This provides you the ability to run KICS scans in your GitLab repositories and streamline vulnerabilities and misconfiguration checks to your infrastructure as code (IaC).

You can integrate KICS into your GitLab CI/CD pipelines. Notice the regex defined in the pattern field below specifies to upload all files from the “jenkins-pipeline-examples/resources/” directory that match the “.*Atifactory.*.zip” or “.*(A|a)rtifactory.*.zip” patterns.įor example: “ArtifactoryPipeline.zip” and “ArtifactoryPipelineNoProps.zip”.Gitlab CI Integrate KICS with GitLab CI ¶ Below is an example script showing how to upload a file to Artifactory in a Jenkins pipeline job. Jenkinsįile specs are supported for both generic and pipeline Jenkins jobs using the Jenkins Artifactory plugin. Let’s get started with some interesting examples that implement these functionalities. You can even use file specs with cloud CI servers, such as Travis-CI and Circle CI, using JFrog CLI! To get started, we are going to need the following: Download and install a copy of JetBrains TeamCity locally (or on your CI server instance). What’s even better is that you can actually define a single File Spec that can be used with your favorite CI server, including Jenkins, TeamCity and Bamboo. You can also use placeholders to determine the name of the artifact once downloaded or uploaded. Advanced users can also benefit from the power of regex and AQL to define file source patterns and targets when uploading and downloading artifacts. gitlab-ci.yml file to the root directory of your repository, and configure your GitLab project to use a Runner, then each merge request or push triggers your CI pipeline TeamCity: TeamCity is an ultimate Continuous Integration tool for professionals. With only 2 mandatory fields, source (referred to as pattern) and target, you can find the artifacts you need according to the specifications that you define. Getting creative with how you manage your artifacts in JFrog Artifactory? It’s time to get familiar with File Specs.įile specs allow you to specify the files you want to upload and download to and from Artifactory with a simple configuration. About GitLab GitLab: the DevOps platform Explore GitLab Install GitLab How GitLab compares Get started GitLab docs GitLab Learn Pricing Talk to an expert / Help Whats new 14.
