Configure Dependency Scanning in .gitlab-ci.yml, creating this file if it does not already exist

.gitlab-ci.yml

@@ -1,31 +1,33 @@
+# You can override the included template(s) by including variable overrides
+# SAST customization: https://docs.gitlab.com/ee/user/application_security/sast/#customizing-the-sast-settings
+# Secret Detection customization: https://docs.gitlab.com/ee/user/application_security/secret_detection/#customizing-settings
+# Dependency Scanning customization: https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#customizing-the-dependency-scanning-settings
+# Container Scanning customization: https://docs.gitlab.com/ee/user/application_security/container_scanning/#customizing-the-container-scanning-settings
+# Note that environment variables can be set in several places
+# See https://docs.gitlab.com/ee/ci/variables/#cicd-variable-precedence
 stages:
-  - test
+- test
-  - build
+- build
-  - release
+- release
-
+".go_template":
-.go_template:
   image: golang:latest
-
 sast:
   stage: test
-
 include:
 - template: Security/SAST.gitlab-ci.yml
-
+- template: Security/Dependency-Scanning.gitlab-ci.yml
 format:
-  extends: .go_template
+  extends: ".go_template"
   stage: test
   script:
   - make check/fmt
-
 test:
-  extends: .go_template
+  extends: ".go_template"
   stage: test
   script:
   - make test
-
 build:
-  extends: .go_template
+  extends: ".go_template"
   stage: build
   script:
   - make build
@@ -33,28 +35,23 @@ build:
     paths:
     - fail2ban_exporter
     expire_in: 1 day
-
 release:
   stage: release
   image: docker:stable
   services:
   - docker:dind
   variables:
-    DOCKER_REGISTRY: $CI_REGISTRY
+    DOCKER_REGISTRY: "$CI_REGISTRY"
-    DOCKER_USERNAME: $CI_REGISTRY_USER
+    DOCKER_USERNAME: "$CI_REGISTRY_USER"
-    DOCKER_PASSWORD: $CI_REGISTRY_PASSWORD
+    DOCKER_PASSWORD: "$CI_REGISTRY_PASSWORD"
     GIT_DEPTH: 0
   rules:
-    - if: $CI_COMMIT_TAG =~ /^v.*$/
+  - if: "$CI_COMMIT_TAG =~ /^v.*$/"
   script:
-    - docker run --rm --privileged \
+  - docker run --rm --privileged \ -v $PWD:/go/src/gitlab.com/hectorjsmith/fail2ban-prometheus-exporter
-      -v $PWD:/go/src/gitlab.com/hectorjsmith/fail2ban-prometheus-exporter \
+    \ -w /go/src/gitlab.com/hectorjsmith/fail2ban-prometheus-exporter \ -v /var/run/docker.sock:/var/run/docker.sock
-      -w /go/src/gitlab.com/hectorjsmith/fail2ban-prometheus-exporter \
+    \ -e DOCKER_USERNAME -e DOCKER_PASSWORD -e DOCKER_REGISTRY  \ -e GITLAB_TOKEN
-      -v /var/run/docker.sock:/var/run/docker.sock \
+    \ goreleaser/goreleaser release --clean
-      -e DOCKER_USERNAME -e DOCKER_PASSWORD -e DOCKER_REGISTRY  \
-      -e GITLAB_TOKEN \
-      goreleaser/goreleaser release --clean
-
 tag images:
   stage: release
   image: docker:stable
@@ -63,8 +60,8 @@ tag images:
   needs:
   - release
   rules:
-    - if: $CI_COMMIT_TAG =~ /^v\d+\.\d+\.\d+$/
+  - if: "$CI_COMMIT_TAG =~ /^v\\d+\\.\\d+\\.\\d+$/"
   variables:
     IMAGE_NAME: registry.gitlab.com/hectorjsmith/fail2ban-prometheus-exporter
   script:
-    - ./.gitlab-ci/tagLatestImage.sh
+  - "./.gitlab-ci/tagLatestImage.sh"