Configure SAST in .gitlab-ci.yml, creating this file if it does not already exist

.gitlab-ci.yml

@@ -1,11 +1,15 @@
+# You can override the included template(s) by including variable overrides
+# SAST customization: https://docs.gitlab.com/ee/user/application_security/sast/#customizing-the-sast-settings
+# Secret Detection customization: https://docs.gitlab.com/ee/user/application_security/secret_detection/#customizing-settings
+# Dependency Scanning customization: https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#customizing-the-dependency-scanning-settings
+# Note that environment variables can be set in several places
+# See https://docs.gitlab.com/ee/ci/variables/#cicd-variable-precedence
 stages:
-  - build
-  - test
-  - release
-
+- build
+- test
+- release
 variables:
-  DEBIAN_FRONTEND: 'noninteractive'
-
+  DEBIAN_FRONTEND: noninteractive
 job-build:
   stage: build
   image: ubuntu:rolling
@@ -19,16 +23,19 @@ job-build:
   - cd build
   - cmake ..
   - make -j
-
 job-release:
   stage: release
   image: registry.gitlab.com/gitlab-org/release-cli:latest
   rules:
-    - if: $CI_COMMIT_TAG =~ /^v.*/
+  - if: "$CI_COMMIT_TAG =~ /^v.*/"
   script:
   - echo 'running release_job'
   release:
-    name: 'Release $CI_COMMIT_TAG'
-    description: 'Release $CI_COMMIT_TAG / $CI_COMMIT_SHA'
-    tag_name: '$CI_COMMIT_TAG'
-    ref: '$CI_COMMIT_SHA'
+    name: Release $CI_COMMIT_TAG
+    description: Release $CI_COMMIT_TAG / $CI_COMMIT_SHA
+    tag_name: "$CI_COMMIT_TAG"
+    ref: "$CI_COMMIT_SHA"
+sast:
+  stage: test
+include:
+- template: Security/SAST.gitlab-ci.yml