From f5ea475530b6357564e397907974e1d40cacc565 Mon Sep 17 00:00:00 2001
From: Lars Gebhardt-Kusche <lars@kusche.berlin>
Date: Tue, 11 Nov 2025 22:13:45 +0100
Subject: [PATCH] Configure SAST and Secret Detection in `.gitlab-ci.yml`,
 creating this file if it does not already exist

---
 .gitlab-ci.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index b0976a8..994d98c 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -20,7 +20,12 @@ stages:
 - incremental rollout 100%
 - performance
 - cleanup
+- secret-detection
 sast:
   stage: test
 include:
 - template: Auto-DevOps.gitlab-ci.yml
+variables:
+  SECRET_DETECTION_ENABLED: 'true'
+secret_detection:
+  stage: secret-detection