no path to secrets

.gitlab-ci.yml

@@ -34,8 +34,8 @@ include:
 # - local: ci-configs/case-3-build/build.yml
 # - local: ci-configs/case-3-build/build_image.yml
 # - local: ci-configs/case-4-security/container_scan.yml
-- local: ci-configs/case-4-security/sast.yml
-# - local: ci-configs/case-4-security/secret_detection.yml
+# - local: ci-configs/case-4-security/sast.yml
+- local: ci-configs/case-4-security/secret_detection.yml
 
 
 

ci-configs/case-4-security/secret_detection.yml

@@ -7,6 +7,8 @@ variables:
 
 secret_detection:
   stage: code_quality
+  variables:
+    # SECRET_DETECTION_EXCLUDED_PATHS: "path/to/exclude1,path/to/exclude2"
   artifacts:
     paths:
       - $SECRET_DETECTION_REPORT_FILE

solutions/case-4-security.md

 ### Solution Case 4 Security:
 1. inside container_scan.yml the path should be CS_IMAGE: "${CI_REGISTRY_IMAGE}/${IMAGE_NAME}:${IMAGE_TAG}"
+2. uncommment lines in `.semgrepignore` ...all the false positives mostly..can triage and look through them if you have gitlab premium...