Merge branch 'russell/sast-clarify-stage-requirement' into 'master'

Note that several Secure features require the test stage

See merge request gitlab-org/gitlab!78154

doc/user/application_security/cluster_image_scanning/index.md

@@ -41,6 +41,8 @@ in your existing `.gitlab-ci.yml` file.
 
 To enable cluster image scanning in your pipeline, you need the following:
 
+- Cluster Image Scanning runs in the `test` stage, which is available by default. If you redefine the stages
+  in the `.gitlab-ci.yml` file, the `test` stage is required.
 - [GitLab Runner](https://docs.gitlab.com/runner/)
   with the [`docker`](https://docs.gitlab.com/runner/executors/docker.html)
   or [`kubernetes`](https://docs.gitlab.com/runner/install/kubernetes.html)
@@ -52,7 +54,6 @@ To enable cluster image scanning in your pipeline, you need the following:
 - The configuration for accessing your Kubernetes cluster stored in the `CIS_KUBECONFIG`
   [configuration variable](#cicd-variables-for-cluster-image-scanning)
   with the type set to `File` (see [Configuring the cluster](#configuring-the-cluster)).
-- GitLab CI/CD pipeline must include the `test` stage, which is available unless overridden with the [`stages`](../../../ci/yaml/index.md#stages) keyword.
 
 ### Configuring the cluster
 

doc/user/application_security/container_scanning/index.md

@@ -48,6 +48,7 @@ information directly in the merge request.
 
 To enable container scanning in your pipeline, you need the following:
 
+- Container Scanning runs in the `test` stage, which is available by default. If you redefine the stages in the `.gitlab-ci.yml` file, the `test` stage is required.
 - [GitLab Runner](https://docs.gitlab.com/runner/) with the [`docker`](https://docs.gitlab.com/runner/executors/docker.html)
   or [`kubernetes`](https://docs.gitlab.com/runner/install/kubernetes.html) executor.
 - Docker `18.09.03` or higher installed on the same computer as the runner. If you're using the

doc/user/application_security/dast/index.md

@@ -53,7 +53,7 @@ results. On failure, the analyzer outputs an
 - [GitLab Runner](../../../ci/runners/index.md) available, with the
 [`docker` executor](https://docs.gitlab.com/runner/executors/docker.html).
 - Target application deployed. For more details, read [Deployment options](#deployment-options).
-- GitLab CI/CD pipeline must include the `test` stage, which is available unless overridden with the [`stages`](../../../ci/yaml/index.md#stages) keyword.
+- DAST runs in the `test` stage, which is available by default. If you redefine the stages in the `.gitlab-ci.yml` file, the `test` stage is required.
 
 ### Deployment options
 

doc/user/application_security/sast/index.md

@@ -49,6 +49,8 @@ the analyzer outputs an [exit code](../../../development/integrations/secure.md#
 
 ## Requirements
 
+SAST runs in the `test` stage, which is available by default. If you redefine the stages in the `.gitlab-ci.yml` file, the `test` stage is required.
+
 To run SAST jobs, by default, you need GitLab Runner with the
 [`docker`](https://docs.gitlab.com/runner/executors/docker.html) or
 [`kubernetes`](https://docs.gitlab.com/runner/install/kubernetes.html) executor.
@@ -61,8 +63,6 @@ WARNING:
 If you use your own runners, make sure the Docker version installed
 is **not** `19.03.0`. See [troubleshooting information](#error-response-from-daemon-error-processing-tar-file-docker-tar-relocation-error) for details.
 
-GitLab CI/CD pipeline must include the `test` stage, which is available unless overridden with the [`stages`](../../../ci/yaml/index.md#stages) keyword.
-
 ## Supported languages and frameworks
 
 GitLab SAST supports a variety of languages, package managers, and frameworks. Our SAST security scanners also feature automatic language detection which works even for mixed-language projects. If any supported language is detected in project source code we automatically run the appropriate SAST analyzers.