DevOps

Simple starter pipeline with a Trivy (SAST) and port scan (DAST) for ci demonstration purposes.

How to use Trivy in a Gitlab CI pipeline

Instructions Download the runner onto the “worker” server. Use the binary install instructions located at sudo curl -L --output /usr/local/bin/gitlab-runner "https://gitlab-runner-downloads.s3.amazonaws.com/latest/binaries/gitlab-runner-linux-amd64" 2. Setup permissions for the runner: sudo chmod +x /usr/local/bin/gitlab-runner 3. Create a user for the runner to execute as: sudo useradd --comment 'GitLab Runner' --create-home gitlab-runner --shell /bin/bash 4. Install the runner and run it as a service: sudo gitlab-runner install --user=gitlab-runner --working-directory=/home/gitlab-runner sudo gitlab-runner start 5. Register the runner sudo gitlab-runner register