GitLab config: Failures in job 'dependency_scanning' cannot fail the build
To fully benefit from the advantages of CI/CD, developers need to follow certain principles. Many of these principles have been introduced in the landmark book [Continuous Delivery: Reliable Software Releases through Build, Test, and Deployment Automation](https://www.oreilly.com/library/view/continuous-delivery-reliable/9780321670250/) and are nowadays widely accepted. One of these principles is:
> Every executed job should be able to fail the build.
If not, developers can miss or ignore the underlying issue, which adds technical debt and might result in problems later.
**Problem**: We analyzed your project and found that the file [.gitlab-ci.yml](https://gitlab.com/ydkn/capistrano-git-copy-bundle/blob/master/.gitlab-ci.yml#L23) (line 23) violates this principle. Failures of job `dependency_scanning` (in stage `security`), cannot fail the build:
```
dependency_scanning:
...
allow_failure: true
...
```
**Suggested Fix:** To follow the principle, you should set ```allow_failure: false```.
**Disclaimer:**
This issue has been automatically reported by [CD-Linter](https://bitbucket.org/sealuzh/cd-linter/), a tool developed at the [University of Zurich](https://www.uzh.ch/) that detects CI/CD violations in the GitLab CI/CD pipeline configuration.
We are currently evaluating the effectiveness of our tool and we are monitoring this issue.
*Please up/downvote this issue to indicate whether you agree/disagree with the report.*
issue