Merge Request Approval Rules for Manifest Projects

Overview

For manifest projects, approval rules must have the sast_bot as an approved user for each merge request approval rule in the project. If sast_bot is not added as an authorized approver to these rules, projects with image build pipelines that utilize that manifest project will fail to update the tags in the deploy-staging and release jobs.

To add an approved user, follow the instructions below.

How to Add an Approved User via the GitLab User Interface

Prerequisites

• You have Maintainer or Owner access to the project.

Steps

1. Open the project.

   • Navigate to your GitLab project in the web interface.

2. Go to Merge Request settings.

   • Click on: Settings → Merge requests.

3. Locate Approval Rules.

   • Scroll down to the Approval rules section.
   • Find the rule you want to edit (e.g., Default) and click Edit.
   • If you need a new rule, click Add approval rule instead.

4. Add sast_bot as an Approver.

   • In the Approvers field, type sast_bot.
   • Select sast_bot from the autocomplete list.

5. Save changes.

   • Click Save changes to apply the update.

Verification

• Open any merge request in the project.
• Check the Approvals section to confirm sast_bot is listed as an approver.

For more information on merge request approval rules, please refer to the official GitLab documentation.