[Techworld with Nana] DevSecOps Bootcamp [2024, ENG]: Vulnerability Scanning for Application Dependencies


Делаю:
2026.01.15


Используем Retire.js для SCA


.gitlab-ci.yml


stages:
  - test

retire:
  stage: test
  image: node:22-bullseye
  before_script:
    - npm install
    - npm install -g retire
  script:
    - retire --path . --outputformat json --outputpath retire.json
  allow_failure: true
  artifacts:
    when: always
    paths:
      - retire.json