Voiceai specific from master

.github/workflows/codeql.yml

@@ -0,0 +1,76 @@
+# For most projects, this workflow file will not need changing; you simply need
+# to commit it to your repository.
+#
+# You may wish to alter this file to override the set of languages analyzed,
+# or to provide custom queries or build logic.
+#
+# ******** NOTE ********
+# We have attempted to detect the languages in your repository. Please check
+# the `language` matrix defined below to confirm you have the correct set of
+# supported CodeQL languages.
+#
+name: "CodeQL"
+
+on:
+  push:
+    branches: [ "master" ]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [ "master" ]
+  schedule:
+    - cron: '37 18 * * 5'
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [ 'go' ]
+        # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
+        # Use only 'java' to analyze code written in Java, Kotlin or both
+        # Use only 'javascript' to analyze code written in JavaScript, TypeScript or both
+        # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v3
+
+    # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v2
+      with:
+        languages: ${{ matrix.language }}
+        # If you wish to specify custom queries, you can do so here or in a config file.
+        # By default, queries listed here will override any specified in a config file.
+        # Prefix the list here with "+" to use these queries and those in the config file.
+
+        # Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
+        # queries: security-extended,security-and-quality
+
+
+    # Autobuild attempts to build any compiled languages  (C/C++, C#, Go, or Java).
+    # If this step fails, then you should remove it and run the build manually (see below)
+    - name: Autobuild
+      uses: github/codeql-action/autobuild@v2
+
+    # ℹ️ Command-line programs to run using the OS shell.
+    # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
+
+    #   If the Autobuild fails above, remove it and uncomment the following three lines.
+    #   modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
+
+    # - run: |
+    #   echo "Run, Build Application using script"
+    #   ./location_of_script_within_repo/buildscript.sh
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v2
+      with:
+        category: "/language:${{matrix.language}}"

.lighthouse/jenkins-x/lint-helm.sh

@@ -0,0 +1,5 @@
+#!/usr/bin/env sh
+for chart in packs/*; do
+  echo linting chart "$chart"
+  jx gitops helm build -c "$chart"
+done

.lighthouse/jenkins-x/lint-helm.yaml

@@ -0,0 +1,36 @@
+apiVersion: tekton.dev/v1beta1
+kind: PipelineRun
+metadata:
+  creationTimestamp: null
+  name: lint-helm
+spec:
+  pipelineSpec:
+    tasks:
+    - name: from-build-pack
+      resources: {}
+      taskSpec:
+        metadata: {}
+        stepTemplate:
+          image: uses:jenkins-x/jx3-pipeline-catalog/tasks/helm/pullrequest.yaml@versionStream
+          name: ""
+          resources:
+            requests:
+              cpu: 200m
+              memory: 256Mi
+          workingDir: /workspace/source
+        steps:
+        - image: uses:jenkins-x/jx3-pipeline-catalog/tasks/git-clone/git-clone-pr.yaml@versionStream
+          name: ""
+          resources: {}
+        - name: jx-variables
+          resources: {}
+        - name: build-helm-build
+          resources: {}
+          script: |
+            #!/usr/bin/env sh
+            . .jx/variables.sh
+            . /workspace/source/.lighthouse/jenkins-x/lint-helm.sh
+  podTemplate: {}
+  serviceAccountName: tekton-bot
+  timeout: 12h0m0s
+status: {}

.lighthouse/jenkins-x/lint-pipelines.yaml

@@ -0,0 +1,51 @@
+apiVersion: tekton.dev/v1beta1
+kind: PipelineRun
+metadata:
+  creationTimestamp: null
+  name: lint-pipelines
+spec:
+  pipelineSpec:
+    tasks:
+    - name: from-build-pack
+      resources: {}
+      taskSpec:
+        metadata: {}
+        stepTemplate:
+          image: uses:jenkins-x/jx3-pipeline-catalog/tasks/go/pullrequest.yaml@versionStream
+          name: ""
+          resources:
+            requests:
+              cpu: 200m
+              memory: 256Mi
+          workingDir: /workspace/source
+        steps:
+        - image: uses:jenkins-x/jx3-pipeline-catalog/tasks/git-clone/git-clone-pr.yaml@versionStream
+          name: ""
+          resources: {}
+        - name: jx-variables
+          resources: {}
+        - name: promote-jx-preview:lint-pipelines
+          resources: {}
+          script: |
+            #!/usr/bin/env sh
+            . .jx/variables.sh
+
+            echo 'linting pipelines in the packs and .lighthouse folder:'
+            jx pipeline lint -r --out=pipelines-packs.tap
+            echo ""
+            cat pipelines-packs.tap
+
+            echo 'linting pipelines in the tasks folder:'
+            jx pipeline lint -a -d tasks --out=pipelines-tasks.tap
+            echo ""
+            cat pipelines-tasks.tap
+        - image: uses:jenkins-x/jx3-pipeline-catalog/tasks/lint/lint.yaml@versionStream
+          name: pr-comment
+          resources: {}
+          script: |
+            #!/usr/bin/env sh
+            jx-tap run
+  podTemplate: {}
+  serviceAccountName: tekton-bot
+  timeout: 12h0m0s
+status: {}

.lighthouse/jenkins-x/release.yaml

@@ -31,7 +31,7 @@ spec:
               memory: 600Mi
         - name: promote-changelog
           resources: {}
-        - image: ghcr.io/jenkins-x/jx-changelog:0.4.0
+        - image: ghcr.io/jenkins-x/jx-boot:3.10.83
           name: promote-pullrequest
           resources: {}
           script: |
@@ -40,7 +40,7 @@ spec:
 
             git clone https://github.com/jenkins-x/$REPO_NAME new-main
             cd new-main
-            sed -i -e "s|uses:jenkins-x/jx3-pipeline-catalog/tasks/go/release.yaml@versionStream.*|uses:jenkins-x/jx3-pipeline-catalog/tasks/go/release.yaml@$PULL_BASE_SHA|" environment/.lighthouse/jenkins-x/pullrequest.yaml
+            sed -i -e "s|uses:jenkins-x/jx3-pipeline-catalog/tasks/go/release.yaml@.*|uses:jenkins-x/jx3-pipeline-catalog/tasks/go/release.yaml@$PULL_BASE_SHA|" environment/.lighthouse/jenkins-x/pullrequest.yaml
 
             git add * || true
             git commit -a -m "chore: upgrade environment pull request to $PULL_BASE_SHA" --allow-empty

.lighthouse/jenkins-x/triggers.yaml

@@ -2,6 +2,20 @@ apiVersion: config.lighthouse.jenkins-x.io/v1alpha1
 kind: TriggerConfig
 spec:
   presubmits:
+  - name: lint-pipelines
+    context: "lint-pipelines"
+    always_run: true
+    optional: false
+    trigger: (?m)^/test( all| lint-pipelines.*),?(s+|$)
+    rerun_command: /test lint-pipelines
+    source: "lint-pipelines.yaml"
+  - name: lint-helm
+    context: "lint-helm"
+    always_run: true
+    optional: false
+    trigger: (?m)^/test( all| lint-helm.*),?(s+|$)
+    rerun_command: /test lint-helm
+    source: "lint-helm.yaml"
   - name: godemo
     context: "godemo"
     always_run: false

README.md

@@ -47,3 +47,14 @@ If the [helm/charts](helm/charts) folder is modified you can upgrade the charts
 ```bash
 jx gitops upgrade --ignore-yaml-error
 ```
+<details>
+    <summary>Zebra Repository Information</summary>
+    <ul>
+        <li> Zebra Business Unit : CTO </li>
+        <li> Zebra Manager : Valik </li>
+        <li> Zebra Repo Admin: valiksb </li>
+        <li> Zebra Jira Project ID: VoiceAI </li>
+        <li> Product: VoiceAI</li>
+        <li> Topics: bu-cto-rpt, no_codeql </li>
+    </ul>
+</details>

packs/git/.lighthouse/jenkins-x/release.yaml

@@ -18,7 +18,7 @@ spec:
             limits: {}
           workingDir: /workspace/source
         steps:
-        - image: ghcr.io/jenkins-x/jx-release-version:2.6.1
+        - image: ghcr.io/jenkins-x/jx-release-version:2.6.10
           name: next-version
           resources: {}
           script: |
@@ -35,7 +35,7 @@ spec:
               secretKeyRef:
                 name: tekton-git
                 key: username
-        - image: ghcr.io/jenkins-x/jx-boot:3.10.10
+        - image: ghcr.io/jenkins-x/jx-boot:3.10.83
           name: jx-variables
           resources:
             # override requests for the pod here

packs/go-cli/.lighthouse/jenkins-x/release.yaml

@@ -29,7 +29,7 @@ spec:
             requests:
               cpu: 400m
               memory: 600Mi
-        - name: build-make-build
+        - name: upload-binaries
           resources: {}
         - name: check-registry
           resources: {}

packs/lookml/.lighthouse/jenkins-x/lint.yaml

@@ -43,31 +43,15 @@ spec:
       workspaces:
       - name: output
         workspace: output
-      params:
-      - name: PULL_NUMBER
-        value: $(params.PULL_NUMBER)
-      - name: REPO_URL
-        value: $(params.REPO_URL)
       taskSpec:
         workspaces:
           - name: output
+            mountPath: /workspace
         metadata: {}
-        params:
-        - default: ""
-          description: git pull request number
-          name: PULL_NUMBER
-          type: string
-        - description: git url to clone
-          name: REPO_URL
-          type: string
         stepTemplate:
           env:
           - name: HOME
             value: /tekton/home
-          - name: PULL_NUMBER
-            value: $(params.PULL_NUMBER)
-          - name: REPO_URL
-            value: $(params.REPO_URL)
           name: ""
           workingDir: $(workspaces.output.path)/source
         steps:

tasks/C++/pullrequest.yaml

@@ -22,7 +22,7 @@ spec:
           resources: {}
           workingDir: /workspace/source
         steps:
-        - image: ghcr.io/jenkins-x/jx-boot:3.10.10
+        - image: ghcr.io/jenkins-x/jx-boot:3.10.83
           name: jx-variables
           resources: {}
           script: |
@@ -44,15 +44,15 @@ spec:
         - image: ghcr.io/jenkins-x/jx-registry:0.1.10
           name: check-registry
           resources: {}
-        - image: gcr.io/kaniko-project/executor:v1.6.0-debug
+        - image: gcr.io/kaniko-project/executor:v1.9.1-debug
           name: build-container-build
           resources: {}
           script: |
             #!/busybox/sh
             source .jx/variables.sh
-            cp /tekton/creds-secrets/tekton-container-registry-auth/.dockerconfigjson /kaniko/.docker/config.json
+            cp /tekton/creds/.docker/config.json /kaniko/.docker/config.json
             /kaniko/executor $KANIKO_FLAGS --context=/workspace/source --dockerfile=${DOCKERFILE_PATH:-Dockerfile} --destination=$PUSH_CONTAINER_REGISTRY/$DOCKER_REGISTRY_ORG/$APP_NAME:$VERSION
-        - image: ghcr.io/jenkins-x-plugins/jx-preview:0.0.225
+        - image: ghcr.io/jenkins-x-plugins/jx-preview:0.0.240
           name: promote-jx-preview
           resources: {}
           script: |

tasks/C++/release.yaml

@@ -33,13 +33,13 @@ spec:
               secretKeyRef:
                 key: username
                 name: tekton-git
-          image: ghcr.io/jenkins-x/jx-release-version:2.6.1
+          image: ghcr.io/jenkins-x/jx-release-version:2.6.10
           name: next-version
           resources: {}
           script: |
             #!/usr/bin/env sh
             jx-release-version --tag > VERSION
-        - image: ghcr.io/jenkins-x/jx-boot:3.10.10
+        - image: ghcr.io/jenkins-x/jx-boot:3.10.83
           name: jx-variables
           resources: {}
           script: |
@@ -60,15 +60,15 @@ spec:
         - image: ghcr.io/jenkins-x/jx-registry:0.1.10
           name: check-registry
           resources: {}
-        - image: gcr.io/kaniko-project/executor:v1.6.0-debug
+        - image: gcr.io/kaniko-project/executor:v1.9.1-debug
           name: build-container-build
           resources: {}
           script: |
             #!/busybox/sh
             source .jx/variables.sh
-            cp /tekton/creds-secrets/tekton-container-registry-auth/.dockerconfigjson /kaniko/.docker/config.json
+            cp /tekton/creds/.docker/config.json /kaniko/.docker/config.json
             /kaniko/executor $KANIKO_FLAGS --context=/workspace/source --dockerfile=${DOCKERFILE_PATH:-Dockerfile} --destination=$PUSH_CONTAINER_REGISTRY/$DOCKER_REGISTRY_ORG/$APP_NAME:$VERSION
-        - image: ghcr.io/jenkins-x/jx-changelog:0.4.0
+        - image: ghcr.io/jenkins-x/jx-boot:3.10.83
           name: promote-changelog
           resources: {}
           script: |
@@ -78,6 +78,7 @@ spec:
             if [ -d "charts/$REPO_NAME" ]; then
             jx gitops yset -p version -v "$VERSION" -f ./charts/$REPO_NAME/Chart.yaml
             jx gitops yset -p appVersion -v "$VERSION" -f ./charts/$REPO_NAME/Chart.yaml
+            yq e -i '.sources = ((.sources // []) + "'$REPO_URL'" | unique)' ./charts/$REPO_NAME/Chart.yaml
             jx gitops yset -p 'image.repository' -v $DOCKER_REGISTRY/$DOCKER_REGISTRY_ORG/$APP_NAME -f ./charts/$REPO_NAME/values.yaml
             jx gitops yset -p 'image.tag' -v "$VERSION" -f ./charts/$REPO_NAME/values.yaml;
             else echo no charts; fi
@@ -87,21 +88,21 @@ spec:
             git tag -fa v$VERSION -m "Release version $VERSION"
             git push --force origin v$VERSION
 
-            jx changelog create --version v${VERSION}
-        - image: ghcr.io/jenkins-x/jx-boot:3.10.10
+            jx changelog create --version v${VERSION} --output-markdown ../changelog.md
+        - image: ghcr.io/jenkins-x/jx-boot:3.10.83
           name: promote-helm-release
           resources: {}
           script: |
             #!/usr/bin/env sh
             source .jx/variables.sh
             jx gitops helm release
-        - image: ghcr.io/jenkins-x-plugins/jx-promote:0.4.6
+        - image: ghcr.io/jenkins-x-plugins/jx-promote:0.6.4
           name: promote-jx-promote
           resources: {}
           script: |
             #!/usr/bin/env sh
             source .jx/variables.sh
-            jx promote -b --all --timeout 1h --no-poll
+            jx promote -b --all --timeout 1h --no-poll --add-changelog ../changelog.md
   podTemplate: {}
   serviceAccountName: tekton-bot
   timeout: 12h0m0s