1. 更新流水线配置

.gitlab-ci.yml

@@ -1,10 +1,27 @@
 stages          :
+  - scan
   - compile
   - test
   - check
   - package
   - release
 
+# 安全扫描
+security-scan:
+  stage: scan
+  tags:
+    - linux-maven
+  script:
+    - echo "=============== 开始安全扫描任务  ==============="
+    - $OPENSCA_CLI -path $CI_PROJECT_DIR -token $OPENSCA_TOKEN -out $CI_PROJECT_DIR/results/result.html,$CI_PROJECT_DIR/results/result.dsdx.json
+  artifacts:
+    reports:
+      dast:
+        - results/result.html
+    untracked: false
+    when: on_success
+    expire_in: 30 days
+
 # 编译
 compile         :
   stage : compile
@@ -40,21 +57,6 @@ integration-test:
   dependencies:
     - compile
 
-security-test-job:
-  stage: test
-  tags:
-    - linux-maven
-  script:
-    - echo "do opensca scan..."
-    - $OPENSCA_CLI -path $CI_PROJECT_DIR -token $OPENSCA_TOKEN -out $CI_PROJECT_DIR/results/result.html,$CI_PROJECT_DIR/results/result.dsdx.json
-  artifacts:
-    paths:
-      - results/
-      - results/result.html
-    untracked: false
-    when: on_success
-    expire_in: 30 days
-
 # 代码质量检查
 sonarqube-check :
   stage        : check