Dependency scanner documentation wrong

DevSecOps
1

I’m trying to setup the dependency scanner accordign to the documenttion but this appears to be completely wrong.

When I just add the component it complains it needs a test stage (not mentioned in the docs), When I add a test stage it’s not executed. Finally I’ve ended up with this:

workflow:
name: “foobar”

stages:

  • vault-get-secrets
  • build
  • test

include:

  • template: Jobs/Dependency-Scanning.gitlab-ci.yml

variables:

Dependency Scanning configuration

DS_EXCLUDED_ANALYZERS: “”
DS_EXCLUDED_PATHS: “spec,test,tests,tmp”
DS_DISABLE_DIND: “false”

build_upload:
tags:
- eks-elastic-xxl
- eks-elastic-xl

stage: build
retry: 2
image: foo
script:
- ls

dependency_scanning:
tags:
- eks-elastic-xxl
- eks-elastic-xl
rules:
- when: always
allow_failure: true

This fails with: dependency_scanning is used for configuration only, and its script should not be executed

So how do I run this? Or is it just completely unimplemented?