Merge pull request #1375 from Alfresco/feature/APPS-891_MoveSecurityScansToTestsPhase

Run the security scans on the AGS build only on the master and releas…

.travis.yml

@@ -42,7 +42,6 @@ stages:
   - name: Build AGS
   - name: Tests
     if: commit_message !~ /\[skip tests\]/
-  - name: Security Scans
   - name: Release
     if: fork = false AND (branch = master OR branch =~ /release\/.*/) AND type != pull_request AND commit_message =~ /\[(community|enterprise) release .*\]/
   - name: Publish
@@ -72,11 +71,3 @@ jobs:
       before_script: source scripts/setUpMavenPhase.sh
       script:
         - travis_retry travis_wait 35 mvn -B -q ${MAVEN_PHASE} -Dskip.integrationtests=false -f rm-benchmark/pom.xml -Dorg.slf4j.simpleLogger.log.org.apache.maven.cli.transfer.Slf4jMavenTransferListener=warn
-
-    - name: "Source Clear Scan (SCA)"
-      stage: Security Scans
-      script: travis_wait 30 bash scripts/source_clear.sh
-    - name: "Static Analysis (SAST)"
-      stage: Security Scans
-      script:
-       - echo "Static Analysis (SAST)"

travis/.travis.tests-stage.yml

@@ -209,3 +209,8 @@ jobs:
       after_script:
         - bash scripts/getLogs.sh
         - bash scripts/cleanup.sh
+
+    - name: "Source Clear Scan (SCA)"
+      stage: Tests
+      if: branch = master OR branch =~ /release\/V3.\d+.*/
+      script: travis_wait 30 bash scripts/source_clear.sh