CI: Enable static analysis for merge requests

ci/gitlab-ci.yml

@@ -7,12 +7,17 @@ variables:
   MEDIALIBRARY_ALPINE_IMG: registry.videolan.org/medialibrary-alpine:20210902074848
   MEDIALIB_TEST_FOLDER: $CI_PROJECT_DIR/medialib_tests/
 
+include:
+  - template: Security/SAST.gitlab-ci.yml
+
 stages:
   - build
   - test
+  - static-analysis
 
 build:debian:
     image: $MEDIALIBRARY_IMG
+    stage: build
     rules:
       - if: $CI_MERGE_REQUEST_IID
       - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
@@ -30,7 +35,6 @@ build:debian:
         - $CI_PROJECT_DIR/build
       when: on_success
 
-
 build:novlc:
     image: $MEDIALIBRARY_IMG
     stage: build
@@ -215,6 +219,7 @@ test:win64:
 
 asan-ubsan:
     image: $VLC_DEBIAN_UNSTABLE_IMG
+    stage: build
     rules:
       - if: '$CI_PIPELINE_SOURCE == "schedule"'
         when: on_success
@@ -268,3 +273,5 @@ asan-ubsan:
 #      - ./test/fast_teardown/fast_teardown $CI_PROJECT_DIR/test/samples/samples
 #      - ./test/fast_discover_cancel/fast_discover_cancel $CI_PROJECT_DIR/test/samples/samples
 
+sast:
+  stage: static-analysis