Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Additional changes for the RHTAP pipeline #1343

Closed
wants to merge 39 commits into from
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
39 commits
Select commit Hold shift + click to select a range
f151aed
Add RHTAP build pipeline
kylape Nov 28, 2023
f3d564b
Add retry and timeout flags to curl command
kylape Nov 28, 2023
59a4866
Echo git command to see if it works
kylape Nov 28, 2023
52495bd
Add .containerignore to be able to add .git dir to rhtap (buildah) bu…
kylape Nov 29, 2023
d19f913
Trigger build
kylape Nov 29, 2023
4b0e00f
Trigger build
kylape Nov 29, 2023
3beb19d
Revert "Add .containerignore to be able to add .git dir to rhtap (bui…
kylape Nov 29, 2023
3cebdec
debug
kylape Nov 29, 2023
f627931
more debug
kylape Nov 29, 2023
02a6507
Revert "more debug"
kylape Nov 29, 2023
4514444
just make curl less silent
kylape Nov 29, 2023
6c9e85f
Add back containerignore file
kylape Nov 29, 2023
2fa60e2
More debug
kylape Nov 29, 2023
b05a60d
Fetch enough from git to construct a version string
kylape Nov 30, 2023
bf44f63
Add more debug
kylape Nov 30, 2023
4e799e1
typo
kylape Nov 30, 2023
3f79c1c
Set up containerfile sync check github action
kylape Dec 1, 2023
afdb479
debug: what is causing the dirty git repo?
kylape Dec 4, 2023
313fa6e
Trigger build
kylape Dec 4, 2023
250486c
Remove bin from containerignore
kylape Dec 4, 2023
8ae270b
Update containerignore comments and fix lint check
kylape Dec 4, 2023
52eef4b
Set clone depth to 0 (unlimited); sync tekton files
kylape Dec 4, 2023
41fa75d
Trigger build
kylape Dec 4, 2023
37915e7
Generate vuln dump instead of download
kylape Dec 5, 2023
c514d07
change DUMP_DIR to ROOT
kylape Dec 5, 2023
ff682ab
debug
kylape Dec 5, 2023
1e5dbcb
gen-vuln-feed-data has to run after clone-repo now
kylape Dec 5, 2023
8294fb7
cd
kylape Dec 5, 2023
f4f2303
Increase memory limit
kylape Dec 6, 2023
18b210a
more memory
kylape Dec 6, 2023
aa1d705
I guess try 8Gi?
kylape Dec 6, 2023
7bc85f8
Revert "I guess try 8Gi?"
kylape Dec 6, 2023
efb7200
match vuln feed zip names
kylape Dec 6, 2023
bef2ad6
Trigger build
kylape Dec 6, 2023
5eba918
Break scanner binary build into separate task
kylape Dec 6, 2023
b1bd342
Can't pull brew image. reverting to apollo-ci for now
kylape Dec 6, 2023
fe60cb9
Switch workspace to pvc
kylape Dec 6, 2023
d5f5881
Red Hat Trusted App Pipeline update scanner-temp (#1342)
red-hat-konflux[bot] Dec 6, 2023
5fe26ec
Copy over change from original tekton files
kylape Dec 6, 2023
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 9 additions & 0 deletions .containerignore
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
# This file is derived of the .dockerignore
# It is required to pass `.git` to the builder containers on RHTAP so we can bake build information into the binary.
# It is required to pass the `.gitignore` files in `image/bin/` and `bin` to avoid a dirty version.
# RHTAP uses Buildah which first looks up for `.containerignore`, then, if absent, `.dockerignore`.
# Having this file enables us to have different exclusion list for RHTAP builds than in GHA/OSCI.
# To regenerate, replace the below contents with the output of the following command (please keep these comments).
# grep -vF -e '/.git/' -e '/bin/' -e '/image/bin/' .dockerignore

# currently empty!
17 changes: 17 additions & 0 deletions .github/actions/job-preamble/action.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
name: Job Preamble
description: Common steps for most jobs
runs:
using: composite
steps:
- name: Recover docker image cache space
run: |
df --si /
docker system prune --force --all
df --si /
shell: bash

- name: Ignore dubious repository ownership
run: |
# Prevent fatal error "detected dubious ownership in repository" from recent git.
git config --global --add safe.directory "$(pwd)"
shell: bash
33 changes: 33 additions & 0 deletions .github/workflows/style.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,33 @@
name: Style
on:
push:
tags:
- '*'
branches:
- master
pull_request:
types:
- opened
- reopened
- synchronize
jobs:
check-generated-files:
env:
ARTIFACT_DIR: junit-reports/
runs-on: ubuntu-latest
container:
image: quay.io/stackrox-io/apollo-ci:stackrox-test-0.3.61
steps:
- name: Checkout
uses: actions/checkout@v4
with:
fetch-depth: 0
ref: ${{ github.event.pull_request.head.sha }}

- uses: ./.github/actions/job-preamble

- name: Create artifacts dir
run: mkdir -p "$ARTIFACT_DIR"

- name: Check Generated
run: scripts/ci/jobs/check-generated.sh
Loading
Loading