Gitlab静态应用程序安全测试(SAST)失败，权限被拒绝

Question

我正在尝试将静态应用程序安全测试(SAST)添加到我的ci/cd文件中。但是，当我按照指示添加模板Security/SAST.gitlab-ci.yml后运行它

此日志失败。

[ERRO] [Find Security Bugs] [2022-01-06T13:20:34Z] ▶ Project couldn't be built: Command couldn't be executed: fork/exec /builds/Hoshani/my-awesome-project/mvnw: permission denied

[FATA] [Find Security Bugs] [2022-01-06T13:20:34Z] ▶ Command couldn't be executed: fork/exec /builds/Hoshani/my-awesome-project/mvnw: permission denied

这是yaml文件供您参考

variables:
  MAVEN_OPTS: "-Dhttps.protocols=TLSv1.2 -Dmaven.repo.local=$CI_PROJECT_DIR/.m2/repository -Dorg.slf4j.simpleLogger.log.org.apache.maven.cli.transfer.Slf4jMavenTransferListener=WARN -Dorg.slf4j.simpleLogger.showDateTime=true -Djava.awt.headless=true"
  MAVEN_CLI_OPTS: "--batch-mode --errors --fail-at-end --show-version -DinstallAtEnd=true -DdeployAtEnd=true"

image: maven:3.8.1

cache:
  paths:
    - .m2/repository

stages:          
  - build
  - test
  - deploy

build-job:       
  stage: build
  script:
    - mvn clean install

include:
  - template: Security/SAST.gitlab-ci.yml
  - template: Jobs/SAST-IaC.latest.gitlab-ci.yml

unit-test-job:   
  stage: test    
  script:
    - mvn test
  artifacts:
    when: always
    reports:
      junit:
        - target/surefire-reports/TEST-*.xml

任何帮助都将不胜感激，谢谢

Answer 1

作为一种快速解决方案，只需在mvnw上添加执行权限就可以解决这个问题。

chmod a+x mvnw

有关详细信息，请参阅这里