3 ms·

I think you just need to drop a JSON file with the right format into the `artifacts` directory. That said, this integration isn't really adding much over just

I think you just need to drop a JSON file with the right format into the `artifacts` directory. That said, this integration isn't really adding much over just defining a build step that runs the check (unless you're using AutoDevops to have this run on all your repos). You could just provide a Gitlab/other CI config snippet for users to run the tool.

_pdp_ 9y ago
Of course, and that will work. However, what if the vulnerability artefacts need to be converted into issues in GitLab? That will require a much deeper integration then printing the details in the build log. Dropping a file will be easy. We can provide just a switch for that.