diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 7ed90ce7bfa..f263fbeaea3 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -503,6 +503,7 @@ include: secret_detection: allow_failure: false + needs: [] variables: SECRET_DETECTION_EXCLUDED_PATHS: 'keys.example,config/artifacts.example,public/acuant/*/opencv.min.js,tmp/0.0.0.0-3000.key' SECRET_DETECTION_REPORT_FILE: 'gl-secret-detection-report.json' @@ -527,6 +528,7 @@ secret_detection: # check if '{ "vulnerabilities": [], ..' is empty in the report file if it exists if [ "$(jq ".vulnerabilities | length" $SECRET_DETECTION_REPORT_FILE)" -gt 0 ]; then echo "Vulnerabilities detected. Please analyze the artifact $SECRET_DETECTION_REPORT_FILE produced by the 'secret-detection' job." + echo "Check the \"Security\" tab on the overall pipeline run to download the report for more information." exit 80 fi else