#3. Setup manual fortify run in gitlab.

.gitlab-ci.yml

 variables:
   GIT_SUBMODULE_STRATEGY: normal
+  
 stages:
   - test
   - analysis
+  
+workflow:
+  rules:
+    - if: $CI_MERGE_REQUEST_ID
+    - if: $CI_COMMIT_TAG
+    - if: $CI_COMMIT_BRANCH == "master"
 
 mac_llvm_testing:
+  stage: test
   tags:
     - mac
   script:
@@ -28,6 +36,7 @@ mac_llvm_testing:
         -D ExperimentalTest
 
 linux_gcc_testing:
+  stage: test
   tags:
     - linux
   script:
@@ -49,6 +58,13 @@ linux_gcc_testing:
         -D ExperimentalStart
         -D ExperimentalBuild
         -D ExperimentalTest
+        
+windows_msvc_testing:
+  stage: test
+  tags:
+    - nsmwin10
+  script:
+    - ci\windows_testing.bat
 
 linux_analysis:
   stage: analysis
@@ -79,9 +95,34 @@ linux_analysis:
         -D ExperimentalMemCheck
         -D ExperimentalCoverage
   allow_failure: true
-
-windows_msvc_testing:
+  
+Linux-fortify:
+  stage: analysis
   tags:
-    - nsmwin10
+    - linux
+  rules:
+    - when: manual
   script:
-    - ci\windows_testing.bat
+    - which git
+    - git --version
+    - mkdir build
+    - cd build
+    - module load cmake qt/5.9.0 fortify
+    - export CC="sourceanalyzer -b rsm gcc"
+    - export CXX="sourceanalyzer -b rsm g++"
+    - cmake -Drsm_ENABLE_TESTS=OFF
+        -DOPENSSL_ROOT_DIR=/opt/vendors/openssl/1.1.1d/
+        -DLibSSH_DIR=/opt/vendors/libssh/0.9.3/lib64/cmake/libssh/
+        -Drsm_ENABLE_rsmcore=ON
+        -Drsm_ENABLE_rsmwidgets=OFF ..
+    ## clean after cmake configure
+    - sourceanalyzer -b rsm -clean
+    - make
+    - sourceanalyzer -b rsm -scan -f scanResults.fpr
+    - ReportGenerator -format PDF -f rsmReport.pdf -source scanResults.fpr -template "DeveloperWorkbook.xml"
+    - mv rsmReport.pdf ..
+  artifacts:
+    paths:
+    - rsmReport.pdf
+    expire_in: 1 week
+  allow_failure: true