1.3 KiB
1.3 KiB
Questions
Part 2
- Q2.1: Every commit triggers the CI/CD pipeline. Find out a way to trigger the pipeline only if specific commits (e.g. commit in a development branch) are made. Where can this be configured. Describe your solution and implement it in your pipeline.
- Q2.2: Take the CIS controls and give some examples (minimum 5) of controls from this standard that are not or not enough implemented in the calculator app. Provide a short description and a possible remediation. Implement at least two of the controls in the app / pipeline.
- Q2.3 (optional): The linter from question 1.3 is a good start. It is only executed in your pipeline. But what if you would also integrate it directly in your local development environment (e.g. IDE)? Can you do the linting before you commit? Describe your solution and implement it in your (local) pipeline. Describe the advantages and disadvantages of this approach.
Answers - Part 2
Q2.1
Solution is to add a rule section to add condition to trigger the pipeline. It's what is implemented for the docker-build job. Another option is to use an only section to trigger the pipeline only if the change is made in a specific branch. It's what is implemented for the pages job.