[Techworld with Nana] DevSecOps Bootcamp [2024, ENG]: Vulnerability Scanning for Application Dependencies
Делаю:
2026.01.15
Используем Retire.js для SCA
.gitlab-ci.yml
stages:
- test
retire:
stage: test
image: node:22-bullseye
before_script:
- npm install
- npm install -g retire
script:
- retire --path . --outputformat json --outputpath retire.json
allow_failure: true
artifacts:
when: always
paths:
- retire.json