Docker¶

A pre-built Docker image on Python Alpine Linux, published by MaturityBuilder.

gitlab-compliance is published on Docker Hub as the gitlab-compliance package.

docker run -it -v $PWD:/src -w /src -e GITLAB_TOKEN=$GITLAB_TOKEN -e
maturitybuilder/gitlab-compliance check -f example-policies --include-nested
--project <my gitlab project path>

Audit Pipeline Yaml¶

gitlab-compliance:
    image: maturitybuilder/gitlab-compliance
    script:
        - gitlab-compliance check -f example-policies --include-nested --project
          <my gitlab project path>

Depending on your workflow and security policy the pipeline can potentially auto resolve includes and image updates by passing arg --fix Next: Usage.