.gitlab-ci.yml

@@ -94,6 +94,7 @@ black:
   interruptible: true
   image: python:3.6
   stage: lint
+  when: manual
   variables:
     GIT_STRATEGY: fetch
   before_script:
@@ -105,6 +106,7 @@ flake8:
   interruptible: true
   image: python:3.6
   stage: lint
+  when: manual
   variables:
     GIT_STRATEGY: fetch
   before_script:
@@ -122,6 +124,7 @@ test_api:
     - postgres:11
     - redis:3
   stage: test
+  when: manual
   image: funkwhale/funkwhale:develop
   cache:
     key: "$CI_PROJECT_ID__pip_cache"
@@ -145,7 +148,32 @@ test_api:
   tags:
     - docker
 
+check_vulnerabilities_api:
+  interruptible: true
+  stage: test
+  image: alpine:3.8
+  cache:
+    key: "$CI_PROJECT_ID__pip_cache_api_vuln"
+    paths:
+      - "$PIP_CACHE_DIR"
+  only:
+    - tags@funkwhale/funkwhale
+    - master@funkwhale/funkwhale
+    - develop@funkwhale/funkwhale
+    - vuln-testing@funkwhale/funkwhale
+  before_script:
+    - apk add make git musl-dev gcc postgresql-dev python3-dev py3-psycopg2 py3-pillow libldap libpq libmagic libffi-dev zlib-dev openldap-dev npm
+    - cd api
+    - sed -i '/Pillow/d' requirements/base.txt
+    - pip3 install -r requirements/base.txt
+    - npm install -g snyk
+  script:
+    - snyk test
+  tags:
+    - docker
+
 test_front:
+  when: manual
   interruptible: true
   stage: test
   image: node:11