Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ROX-20753: Add scanner RHTAP build pipeline #1334

Merged
merged 39 commits into from
Feb 6, 2024
Merged
Show file tree
Hide file tree
Changes from 13 commits
Commits
Show all changes
39 commits
Select commit Hold shift + click to select a range
25f2a1b
Add RHTAP build pipeline
kylape Nov 28, 2023
8aa397d
Increase cpu request for clamav task
kylape Jan 11, 2024
1130867
Move cpu request spec
kylape Jan 11, 2024
7807325
Add debug to vuln feed download issue
kylape Jan 11, 2024
02f24a7
Ensure fetch-vuln-feed-data runs after clone-repository
kylape Jan 12, 2024
8886cdc
increase timeout to 2h
kylape Jan 15, 2024
171e059
Update timeouts to satisfy validation
kylape Jan 15, 2024
c25954a
Bump clamav task timeout to 2h
kylape Jan 16, 2024
ea0aee0
Bump timeouts again
kylape Jan 16, 2024
39cf8ca
chore(deps): update rhtap references (#1370)
red-hat-konflux[bot] Jan 25, 2024
a59ab95
comment out clamav scan for now
kylape Jan 25, 2024
734e856
Rename rhtap folder to konflux
kylape Jan 26, 2024
adfa9a7
Trigger build
kylape Jan 26, 2024
1ec867a
Remove CI checks to ensure containerignore/dockerignore are in sync
kylape Jan 29, 2024
8f232d6
Fail builds if git is dirty
kylape Jan 29, 2024
05dd79b
Filter out output from git status that doesn't make a tag dirty
kylape Jan 30, 2024
8954b5f
Add back the job-preamble gitub action
kylape Jan 31, 2024
1371932
Set the correct version string in the compiled binary
kylape Jan 31, 2024
af81ebe
Add labels to match other konflux builds
kylape Jan 31, 2024
6068520
Try a build without chmod +rx /scanner
kylape Jan 31, 2024
d77527a
Add SHELL line to konflux dockerfile; fix nit
kylape Jan 31, 2024
67dd3cf
Save konflux-built images for longer
kylape Jan 31, 2024
2256403
Add spaces between sections and reorder tekton config
kylape Jan 31, 2024
d5c7039
Set rebuild=true
kylape Jan 31, 2024
8580b71
Enhance tekton task script logging
kylape Jan 31, 2024
ffe1f37
Try using standard buildah image (w/o higher mem limit)
kylape Jan 31, 2024
c6d3016
Switch vuln dump task image to ubi8-minimal
kylape Jan 31, 2024
6e1c579
Externalize fetch-vuln-feed-data script; couple other small fixes
kylape Jan 31, 2024
439704c
Fix path to script
kylape Jan 31, 2024
a3091e8
Enable prefetch and source image builds
kylape Jan 31, 2024
871d773
Clean up version logging in dockerfile
kylape Jan 31, 2024
a8d2ec4
sync tekton pipeline files
kylape Feb 1, 2024
aff4a23
Addressing PR comments
kylape Feb 2, 2024
bbdcf1f
Re-enable clamav with new task image
kylape Feb 3, 2024
33aa828
Remove timeout overrides
kylape Feb 5, 2024
eb3df6c
Trigger build
kylape Feb 5, 2024
3df9f5a
Move dockerfile to be consistent with scanner-db
kylape Feb 6, 2024
e36ec93
Update validation script with new dockerfile name
kylape Feb 6, 2024
d28fe06
Update RHTAP references (klape/rhtap-scanner-onboarding) (#1391)
red-hat-konflux[bot] Feb 6, 2024
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 9 additions & 0 deletions .containerignore
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
# This file is derived of the .dockerignore
# It is required to pass `.git` to the builder containers on RHTAP so we can bake build information into the binary.
# It is required to pass the `.gitignore` files in `image/bin/` and `bin` to avoid a dirty version.
# RHTAP uses Buildah which first looks up for `.containerignore`, then, if absent, `.dockerignore`.
# Having this file enables us to have different exclusion list for RHTAP builds than in GHA/OSCI.
# To regenerate, replace the below contents with the output of the following command (please keep these comments).
# grep -vF -e '/.git/' -e '/bin/' -e '/image/bin/' .dockerignore

# currently empty!
kylape marked this conversation as resolved.
Show resolved Hide resolved
28 changes: 28 additions & 0 deletions .github/workflows/style.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,28 @@
name: Style
on:
push:
tags:
- '*'
branches:
- master
pull_request:
types:
- opened
- reopened
- synchronize
jobs:
check-generated-files:
runs-on: ubuntu-latest
container:
image: quay.io/stackrox-io/apollo-ci:scanner-test-0.3.61
steps:
- name: Checkout
uses: actions/checkout@v4
with:
fetch-depth: 0
ref: ${{ github.event.pull_request.head.sha }}

- uses: ./.github/actions/job-preamble
kylape marked this conversation as resolved.
Show resolved Hide resolved

- name: Check Generated
run: scripts/ci/jobs/check-generated.sh
Loading
Loading