diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 8f1954c..4fdb63e 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -60,7 +60,7 @@ security_scanner: - apk add --no-cache make script: - make images/debian-stretch.squashfs - artifacts: + artifacts: &squashfs_artifacts paths: - images tags: @@ -83,4 +83,5 @@ squashfs_master: except: - schedules artifacts: + <<: *squashfs_artifacts expire_in: 12 weeks diff --git a/security-scanner/security_scanner/gitlab.py b/security-scanner/security_scanner/gitlab.py index 4602428..fc587b8 100644 --- a/security-scanner/security_scanner/gitlab.py +++ b/security-scanner/security_scanner/gitlab.py @@ -34,3 +34,6 @@ class GitLab: target = FileWriter(destPath) artifact = self._project.jobs.get(job_id).artifact(sourcePath, streamed=True, action=target) del(target) + + def createPipeline(self, ref): + pipeline = self._project.pipelines.create({'ref': ref}) diff --git a/security-scanner/security_scanner/main.py b/security-scanner/security_scanner/main.py index a4a7db2..27a46e1 100644 --- a/security-scanner/security_scanner/main.py +++ b/security-scanner/security_scanner/main.py @@ -35,6 +35,7 @@ def main(argv): job = gitlab.getLastSuccessfulJob('master', 'squashfs_master') gitlab.downloadArtifact(job, 'images/debian-' + distro + '.dpkg-list', 'debian-' + distro + '.dpkg-list') if checkDebianDistro(distro) > 0: - print("triggering build") + ref = job.attributes['ref'] + print("creating pipeline for reference {}".format(ref)) pprint(job.attributes) - job.play() + gitlab.createPipeline(ref)