Skip to content

6. Add more evidence

Add additional scan results to the release using the Generic Package Repository.

  • 1. Find the 6-add-more-evidence branch in Repository > Branches
  • 2. Click Merge Request to create a new MR from this branch
  • 3. Uncheck Delete source branch when merge request is accepted. if you prefer to keep the branch.
  • 4. Click Create Merge Request
  • 5. Review the changes to .gitlab/Jobs/Container-Scanning.gitlab-ci.yml template
  • 6. Note the release-evidence job, and the needs: keyword on the release job
  • 7. Note the curl upload commands in the script section, these commands upload artifacts from previous jobs in this pipeline to the generic package repository, which is a good place for long-term storage of release artifacts
  • 8. Click Mark as Ready on the Overview tab
  • 9. Click Merge, and wait for the pipeline to complete
  • 10. Create a tag from Repository > Tags
  • 11. Enter a name for the tag, like 1.0.0
  • 12. Select the main branch
  • 13. Click Create Tag, wait for the pipeline to complete
  • 14. View the newly created Release at Deployments > Releases
  • 15. Note the additional evidence under Assets > Other