Add security scans (include infrastructure/ci-templates) (!1) · Merge requests · viknash / manning-fpcpp-book · GitLab

GitLab now enforces expiry dates on tokens that originally had no set expiration date. Those tokens were given an expiration date of one year later. Please review your personal access tokens, project access tokens, and group access tokens to ensure you are aware of upcoming expirations. Administrators of GitLab can find more information on how to identify and mitigate interruption in our documentation.

Administrator requested to merge security-scan-template into master Oct 19, 2026

Adds the shared security scan jobs (Trivy, Gitleaks, Semgrep) from infrastructure/ci-templates.

Findings are imported into DefectDojo (https://dojo.finsec.localdomain). The project inherits the CI variables DEFECTDOJO_TOKEN and TRIVY_TOKEN from its group.
The jobs are allow_failure, they never block the pipeline.
The commit carries [ci skip], so opening this MR starts no pipeline; the scans run on the next push or merge request.

Created by finsec.localdomain/security/gitlab-rollout.py, see docs/security.md in the devops repository.