312-97: EC-Council Certified DevSecOps Engineer (ECDE)Demo

By ECCouncil · Question Mode

QuestionQ25

DevSecOps Pipeline-Code Stage

Dustin Hoffman works as a DevSecOps engineer at an IT company based in San Diego, California. To detect new security vulnerabilities early in the source code development process, he wants to integrate the Checkmarx SCA tool with GitLab. The Checkmarx template already contains all the jobs defined for the pipeline.

Where should Dustin incorporate the Checkmarx template file https://raw.githubusercontent.com/checkmarx-ltd/cx-flow/develop/templates/gitlab/v3/Checkmarx.gitlab-ci.yml?

  • A gitlab-ci/cd.yml root directory
  • B gitlab-ci.yml root directory
  • C gitlab-cd.yml root directory
  • D gitlab.yml root directory
Explanation

GitLab CI/CD pipelines are driven by a configuration file that must be named exactly '.gitlab-ci.yml' and placed in the root directory of the repository. GitLab's CI/CD runner automatically looks for this file to define pipeline jobs and stages. To integrate the Checkmarx SCA template (which defines all the security scanning jobs), Dustin needs to add or include its contents within the '.gitlab-ci.yml' file at the root of his GitLab project, either by copying the template content directly or using GitLab's 'include' keyword to reference the external template.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!