Merge pull request #4 from simplify-framework/feature/upgrade-docker-run-scripts

Fix merging objects - deep merge varialbes, stages, extends

Author: cuongquay

.gitlab-ci.yml

@@ -4,6 +4,9 @@ stages:
   - build
   - test
 
+variables:
+  ESLINT_FAILURE_ALLOWED: "false"
+  
 include:
   - local: Security/SAST.gitlab-ci.yml
   - template: Security/DAST.gitlab-ci.yml

Security/SAST.gitlab-ci.yml

@@ -36,9 +36,6 @@ sast:
   # see https://gitlab.com/gitlab-org/gitlab/-/issues/218444
   script:
     - /analyzer run
-    - if [ "`which node | grep '/bin/node$'`" == "" ]; then apk add nodejs npm; fi
-    - if [ "$SAST_FAILURE_ALLOWED" == "false" ]; then npm install simplify-security; fi
-    - if [ "$SAST_FAILURE_ALLOWED" == "false" ]; then node node_modules/simplify-security/entrypoint.js report -i gl-sast-report.json; fi
 
 eslint-sast:
   extends: .sast-analyzer

package.json

@@ -27,6 +27,7 @@
     "dotenv": "^8.2.0",
     "readline-sync": "^1.4.10",
     "simplify-sdk": "^0.1.52",
+    "simplify-security": "^0.1.14",
     "uuid": "^8.3.1",
     "yaml": "^1.10.2",
     "yargs": "^15.4.1"