diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 59d36105..4a9d0801 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -38,6 +38,7 @@ stages: - cache - test - build + - check - mirror # Stage: CACHE @@ -138,9 +139,6 @@ build-qml: script: - make build - git diff && git diff-index --quiet HEAD - - curl -L https://services.nvd.nist.gov/rest/json/cves/1.0/ - - gobinsec -verbose -wait -config utils/gobinsec_conf.yml - cmd/Desktop-Bridge/deploy/linux/proton-bridge artifacts: # Note: The latest artifacts for refs are locked against deletion, and kept # regardless of the expiry time. Introduced in GitLab 13.0 behind a @@ -235,6 +233,26 @@ build-windows-qa: artifacts: name: "bridge-windows-qa-$CI_COMMIT_SHORT_SHA" +# Stage: CHECK +check-gobinsec: + stage: check + only: + - branches + cache: + key: gobinsec-cache + paths: + - gobinsec-cache.yml + policy: pull-push + before_script: + - mkdir build + - tar -xzf bridge_linux_*.tgz -C build + script: + - "[ ! -f ./gobinsec-cache.yml ] && wget bridgeteam.protontech.ch/bridgeteam/gobinsec-cache.yml" + - cat ./gobinsec-cache.yml + - gobinsec -cache -config utils/gobinsec_conf.yml build/proton-bridge + + + # Stage: MIRROR mirror-repo: diff --git a/utils/gobinsec_conf.yml b/utils/gobinsec_conf.yml index b8dc710e..c2a80986 100644 --- a/utils/gobinsec_conf.yml +++ b/utils/gobinsec_conf.yml @@ -1,5 +1,9 @@ --- +file: + name: "./gobinsec-cache.yml" + expiration: 24h + ignore: # golang.org/x/net wrong match, we are using 2871e0cb, fixed by 37e1c6af - "CVE-2021-33194"