依赖项扫描在GitLab CICD管道中没有触发

Question

我是新来的GitLab，并试图建立一个样本CICD管道。下面是我的代码:

variables:
REPO_NAME: devsecopscollab/my_test_repo
IMAGE_TAG: demo-app-1.0
include:
- template: SAST.gitlab-ci.yml
- template: Dependency-Scanning.gitlab-ci.yml
stages:
- Test
- Build
- Deploy
job1_runTests:
stage: Test
image: python:3.10.8
before_script:
- apt-get update && apt-get install make
script:
- make test
sast:
stage: Test
artifacts:
name: sast
paths:
- gl-sast-report.json
reports:
sast: gl-sast-report.json
when: always
dependency_scanning:
stage: Test
variables:
CI_DEBUG_TRACE: "true"
artifacts:
name: dependency_scanning
paths:
- gl-dependency-scanning-report.json
reports:
dependency_scanning: gl-dependency-scanning-report.json
when: always
job2_buildImage:
stage: Build
image: docker:20.10.21
services:
- docker:20.10.21-dind
variables:
DOCKER_TLS_CERTDIR: "/certs"
before_script:
- docker login -u $DOCKERHUB_USER -p $DOCKERHUB_PASS
script:
- docker build -t $REPO_NAME:$IMAGE_TAG .
- docker push $REPO_NAME:$IMAGE_TAG
job3_deploy:
stage: Deploy
before_script:
- chmod 400 $SSH_KEY 
script:
- ssh -o StrictHostKeyChecking=no -i $SSH_KEY ubuntu@$PUBLIC_IP "
docker login -u $DOCKERHUB_USER -p $DOCKERHUB_PASS &&
docker ps -aq | xargs --no-run-if-empty docker stop | xargs --no-run-if-empty docker rm &&
docker run -d -p 5000:5000 $REPO_NAME:$IMAGE_TAG"

但是我的管道看起来像下图(没有显示依赖扫描阶段):

这个管道有问题吗?为什么依赖项扫描阶段不可见?

尝试了上面给出的代码片段，并期望在管道上看到一个依赖项扫描阶段。

Answer 1

依赖项扫描仅在最终计划中工作。cf: https://gitlab.com/gitlab-org/gitlab/-/issues/327366https://i.stack.imgur.com/o7GE9.png也可以查看这个链接https://docs.gitlab.com/ee/user/application_security/dependency_scanning/要触发依赖扫描模板更容易，只需使用

include:
- template: SAST.gitlab-ci.yml
- template: Dependency-Scanning.gitlab-ci.yml