fix: add MAVEN_DEPENDENCY_CHECK_DISABLED variable

README.md

@@ -108,6 +108,8 @@ It is bound to the `test` stage, and uses the following variables:
 | Name                  | description                            | default value     |
 | --------------------- | -------------------------------------- | ----------------- |
 | `MAVEN_DEPENDENCY_CHECK_ARGS` | Maven arguments for Dependency Check job | `org.owasp:dependency-check-maven:check -DretireJsAnalyzerEnabled=false -DassemblyAnalyzerEnabled=false` |
+| `MAVEN_DEPENDENCY_CHECK_DISABLED` | Set to `true` to disable this job | _none_ |
+
 
 A Dependency Check is a quite long operation and therefore the job is configured to be ran __manually__ by default.
 

templates/gitlab-ci-maven.yml

@@ -459,6 +459,9 @@ mvn-dependency-check:
     paths:
       - "${MAVEN_PROJECT_DIR}/**/target/dependency-check-report.*"
   rules:
+    # exclude if disable
+    - if: '$MAVEN_DEPENDENCY_CHECK_DISABLED == "true"'
+      when: never
     # on schedule: auto
     - if: '$CI_PIPELINE_SOURCE == "schedule"'
       allow_failure: true