[epiphany/alatiera/flatpak-dep] CI: Make flatpak-scanbuild job unprivileged

[Alexander Mikhaylenko <alexm src gnome org>]

commit ebd8844dfefffae9f4536eabe4b9c29377604d1f
Author: Alexander Mikhaylenko <alexm gnome org>
Date:   Thu Feb 20 18:06:11 2020 +0500

    CI: Make flatpak-scanbuild job unprivileged

 .gitlab-ci.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)
---
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 93a0136ba..20b0a58d1 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -42,11 +42,13 @@ flatpak-master:
 flatpak-scanbuild:
   extends: '.flatpak-template'
   stage: .pre
+  tags:
+    - flatpak
   variables:
     MESON_ARGS: '-Dprofile=Devel -Dunit_tests=enabled --werror'
   image: 'registry.gitlab.gnome.org/gnome/gnome-runtime-images/gnome:master'
   script:
-    - flatpak-builder --stop-at=${FLATPAK_MODULE} flatpak_app ${MANIFEST_PATH}
+    - flatpak-builder --user --disable-rofiles-fuse --stop-at=${FLATPAK_MODULE} flatpak_app ${MANIFEST_PATH}
     - flatpak build flatpak_app meson --prefix=/app ${MESON_ARGS} _build
     - flatpak build flatpak_app ninja -C _build scan-build
     - bash -c 'if [[ -n "$(ls -A _build/meson-logs/scanbuild/)" ]]; then echo "Scan build log found, 
assuming defects exist"; exit 1; fi'