Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Verified Commit 943bfdbd authored by Romain Hunault's avatar Romain Hunault 🚴🏻
Browse files

ci(security): add semgrep ce scan job

parent 8f469fc1

.gitlab-ci.yml

+17 −2
Original line number Diff line number Diff line
@@ -87,7 +87,7 @@ build-release: 
    paths:

      - app/build/outputs/apk/release



analysis:

code-quality:

  stage: code-quality

  <<: *build_rules

  needs:
@@ -99,7 +99,7 @@ analysis: 
      - app/build/reports/

      - build/reports/



tests:

unit-tests:

  stage: code-quality

  <<: *build_rules

  needs:
@@ -117,6 +117,21 @@ tests: 
        coverage_format: jacoco

        path: app/build/reports/jacoco/jacocoReleaseReport/jacocoReleaseReport.xml



code-security:

  image: semgrep/semgrep:latest

  stage: code-quality

  <<: *build_rules

  needs: []

  script:

    - semgrep scan --config=auto --error --json-output semgrep-report.json --junit-xml-output semgrep-junit.xml .

  artifacts:

    when: always

    reports:

      junit: semgrep-junit.xml

    paths:

      - semgrep-report.json

      - semgrep-junit.xml



generate-apks:

  stage: build

  <<: *rules_publish

README.md

+8 −0
Original line number Diff line number Diff line 
[![build-release](https://gitlab.e.foundation/e/os/apps/badges/000-os-security-ci-tools/pipeline.svg?job=build-release&key_text=Build%20Release&key_width=120)](https://gitlab.e.foundation/e/os/apps/-/jobs?name=build-release&kind=BUILD)

[![code-quality](https://gitlab.e.foundation/e/os/apps/badges/000-os-security-ci-tools/pipeline.svg?job=code-quality&key_text=Code%20Quality&key_width=120)](https://gitlab.e.foundation/e/os/apps/-/jobs?name=code-quality&kind=BUILD)

[![unit-tests](https://gitlab.e.foundation/e/os/apps/badges/000-os-security-ci-tools/pipeline.svg?job=unit-tests&key_text=Unit%20Tests&key_width=120)](https://gitlab.e.foundation/e/os/apps/-/jobs?name=unit-tests&kind=BUILD)

[![code-security](https://gitlab.e.foundation/e/os/apps/badges/000-os-security-ci-tools/pipeline.svg?job=code-security&key_text=Code%20Security&key_width=120)](https://gitlab.e.foundation/e/os/apps/-/jobs?name=code-security&kind=BUILD)

[![secret-scan](https://gitlab.e.foundation/e/os/apps/badges/000-os-security-ci-tools/pipeline.svg?job=secret-scan&key_text=Secret%20Scan&key_width=120)](https://gitlab.e.foundation/e/os/apps/-/jobs?name=secret-scan&kind=BUILD)

[![high-critical-scan](https://gitlab.e.foundation/e/os/apps/badges/000-os-security-ci-tools/pipeline.svg?job=high-critical-scan&key_text=High%2FCritical&key_width=120)](https://gitlab.e.foundation/e/os/apps/-/jobs?name=high-critical-scan&kind=BUILD)

[![dependency-vuln-scan](https://gitlab.e.foundation/e/os/apps/badges/000-os-security-ci-tools/pipeline.svg?job=dependency-vuln-scan&key_text=Dependency%20Vuln&key_width=130)](https://gitlab.e.foundation/e/os/apps/-/jobs?name=dependency-vuln-scan&kind=BUILD)



# App Lounge



App Lounge is an open-source application that allows you to install Android apps on your device quickly and easily. It is licensed and distributed under [The GNU General Public License v3.0](https://www.gnu.org/licenses/gpl-3.0.en.html).