@catladder/pipeline 1.110.1 → 1.110.3

package/src/build/custom/testJob.ts

@@ -1,10 +1,9 @@
-import { join } from "path";
 import type { Context } from "../../types/context";
 import type { CatladderJob } from "../../types/jobs";
 import { ensureArray, notNil } from "../../utils";
 import { isOfBuildType } from "../types";
-import type { BuildConfigArtifactsReports } from "../types";
 import type { Artifacts } from "../../types";
+import { createArtifactsConfig } from "../base/createArtifactsConfig";
 
 const RUNNER_CUSTOM_TEST_VARIABLES = {
   KUBERNETES_CPU_REQUEST: "0.5",
@@ -48,7 +47,8 @@ export const createCustomTestJobs = (context: Context): CatladderJob[] => {
         allow_failure: true,
         ...createArtifactsConfig(
           context.componentConfig.dir,
-          buildConfig.audit?.artifactsReports
+          buildConfig.audit?.artifactsReports,
+          buildConfig.audit?.artifacts
         ),
       }
     : null;
@@ -62,7 +62,8 @@ export const createCustomTestJobs = (context: Context): CatladderJob[] => {
         script: [...(ensureArray(buildConfig.lint?.command) ?? [])],
         ...createArtifactsConfig(
           context.componentConfig.dir,
-          buildConfig.lint?.artifactsReports
+          buildConfig.lint?.artifactsReports,
+          buildConfig.lint?.artifacts
         ),
       }
     : null;
@@ -75,30 +76,16 @@ export const createCustomTestJobs = (context: Context): CatladderJob[] => {
         script: [...(ensureArray(buildConfig.test?.command) ?? [])],
         ...createArtifactsConfig(
           context.componentConfig.dir,
-          buildConfig.test?.artifactsReports
+          buildConfig.test?.artifactsReports,
+          buildConfig.test?.artifacts
         ),
       }
     : null;
   return [auditJob, lintJob, testJob].filter(notNil);
 };
 
-type OptionalArtifacts =
+export type OptionalArtifacts =
   | {
       artifacts: Artifacts;
     }
   | undefined;
-
-const createArtifactsConfig = (
-  rootPath: string,
-  artifactsReports?: BuildConfigArtifactsReports
-): OptionalArtifacts =>
-  artifactsReports
-    ? {
-        artifacts: {
-          paths: [],
-          reports: {
-            junit: artifactsReports?.junit?.map((p) => join(rootPath, p)) ?? [],
-          },
-        },
-      }
-    : undefined;

package/src/build/node/buildJob.ts

@@ -10,6 +10,8 @@ import { NODE_RUNNER_BUILD_VARIABLES } from "./constants";
 import { getDockerAppCopyAndBuildScript, getYarnInstall } from "./yarn";
 import type { CatladderJob } from "../../types/jobs";
 import { getRunnerImage } from "../../runner";
+import { createSbomBuildJob } from "../sbom";
+import { sbomDeactivated } from "../../deploy/sbom";
 
 export const createNodeBuildJobs = (context: Context): CatladderJob[] => {
   const buildConfig = context.componentConfig.build;
@@ -76,5 +78,6 @@ export const createNodeBuildJobs = (context: Context): CatladderJob[] => {
           }),
         ]
       : []),
+    ...(sbomDeactivated(context) ? [] : [createSbomBuildJob(context)]),
   ];
 };

package/src/build/node/testJob.ts

@@ -5,6 +5,7 @@ import { ensureArray, notNil } from "../../utils";
 import { getNodeCache } from "./cache";
 import { NODE_RUNNER_BUILD_VARIABLES } from "./constants";
 import { getYarnInstall } from "./yarn";
+import { createArtifactsConfig } from "../base/createArtifactsConfig";
 
 export const createNodeTestJobs = (context: Context): CatladderJob[] => {
   // don't run tests after release
@@ -42,6 +43,11 @@ export const createNodeTestJobs = (context: Context): CatladderJob[] => {
             ]),
           ],
           allow_failure: true,
+          ...createArtifactsConfig(
+            context.componentConfig.dir,
+            buildConfig.audit?.artifactsReports,
+            buildConfig.audit?.artifacts
+          ),
         }
       : null;
 
@@ -57,6 +63,11 @@ export const createNodeTestJobs = (context: Context): CatladderJob[] => {
             ...yarnInstall,
             ...(ensureArray(buildConfig.lint?.command) ?? ["yarn lint"]),
           ],
+          ...createArtifactsConfig(
+            context.componentConfig.dir,
+            buildConfig.lint?.artifactsReports,
+            buildConfig.lint?.artifacts
+          ),
         }
       : null;
   const testJob: CatladderJob | null =
@@ -73,6 +84,11 @@ export const createNodeTestJobs = (context: Context): CatladderJob[] => {
             ...yarnInstall,
             ...(ensureArray(buildConfig.test?.command) ?? ["yarn test"]),
           ],
+          ...createArtifactsConfig(
+            context.componentConfig.dir,
+            buildConfig.test?.artifactsReports,
+            buildConfig.test?.artifacts
+          ),
         }
       : null;
   return [auditJob, lintJob, testJob].filter(notNil);

package/src/build/rails/build.ts

@@ -2,6 +2,8 @@ import type { Context } from "../..";
 import { isOfBuildType } from "../types";
 import type { CatladderJob } from "../../types/jobs";
 import { createDockerBuildJobBase, gitlabDockerLogin } from "../docker";
+import { sbomDeactivated } from "../../deploy/sbom";
+import { createSbomBuildJob } from "../sbom";
 
 export const createRailsBuildJobs = (context: Context): CatladderJob[] => {
   const buildConfig = context.componentConfig.build;
@@ -37,5 +39,6 @@ export const createRailsBuildJobs = (context: Context): CatladderJob[] => {
         }`,
       ],
     }),
+    ...(sbomDeactivated(context) ? [] : [createSbomBuildJob(context)]),
   ];
 };

package/src/build/sbom.ts

@@ -0,0 +1,43 @@
+import type { Context } from "../types/context";
+import type { CatladderJob } from "../types/jobs";
+import { ensureArray } from "../utils";
+
+export const SBOM_BUILD_JOB_NAME = "🧾 sbom";
+export const SBOM_FILE = "__sbom.json";
+
+export const createSbomBuildJob = (context: Context): CatladderJob => {
+  const buildConfig = context.componentConfig.build;
+
+  const defaultImage = "aquasec/trivy:0.38.3";
+  const defaultScript = [
+    `trivy fs --quiet --format cyclonedx --output "${SBOM_FILE}" ${
+      context.packageManagerInfo?.componentIsInWorkspace
+        ? "."
+        : context.componentConfig.dir
+    }`,
+  ];
+
+  const image =
+    buildConfig.type === "custom" && buildConfig.sbom !== false
+      ? buildConfig.sbom?.jobImage ?? defaultImage
+      : defaultImage;
+
+  const script =
+    buildConfig.type === "custom" && buildConfig.sbom !== false
+      ? ensureArray(buildConfig.sbom?.command) ?? defaultScript
+      : defaultScript;
+
+  return {
+    name: SBOM_BUILD_JOB_NAME,
+    stage: "build",
+    envMode: "jobPerEnv",
+    variables: {},
+    cache: undefined,
+    image,
+    script,
+    allow_failure: true,
+    artifacts: {
+      paths: [SBOM_FILE],
+    },
+  };
+};

package/src/build/types.ts

@@ -1,4 +1,9 @@
-import type { EnvVars, GitlabJobImage, GitlabJobService } from "../types";
+import type {
+  Artifacts,
+  EnvVars,
+  GitlabJobImage,
+  GitlabJobService,
+} from "../types";
 
 import type { CatladderJob } from "../types/jobs";
 
@@ -12,6 +17,22 @@ export type BuildConfigArtifactsReports = {
   junit?: string[];
 };
 
+export type TestJobCustom = {
+  command?: string | string[];
+  jobImage?: GitlabJobImage;
+  /**
+   * additional CI/CD artifacts reports,
+   * use to display information in merge requests, pipeline views and security dashboards.
+   */
+  artifactsReports?: BuildConfigArtifactsReports;
+  /**
+   * GitLab {@link Artifacts} configuration.
+   *
+   * {@link TestJobCustom.artifacts}.reports.junit is merged with {@link TestJobCustom.artifactsReports} in case both given.
+   */
+  artifacts?: Artifacts;
+};
+
 export type BuildConfigBase = {
   /**
    * command to run on the image to start the app (e.g. yarn start)
@@ -38,39 +59,38 @@ export type BuildConfigBase = {
    * customize docker build
    */
   docker?: {
+    /**
+     * Custom Dockerfile lines integrated in the generated Dockerfile before the standard build steps.
+     *
+     * - [runner-images/docker-build/scripts/ensureNodeDockerfile](https://git.panter.ch/catladder/catladder/-/tree/main/runner-images/docker-build/scripts/ensureNodeDockerfile)
+     * - [runner-images/docker-build/scripts/ensureNginxDockerfile](https://git.panter.ch/catladder/catladder/-/tree/main/runner-images/docker-build/scripts/ensureNginxDockerfile)
+     * - [runner-images/docker-build/scripts/ensureMeteorDockerfile](https://git.panter.ch/catladder/catladder/-/tree/main/runner-images/docker-build/scripts/ensureMeteorDockerfile)
+     */
     additionsBegin?: string[];
+    /**
+     * Custom Dockerfile lines integrated in the generated Dockerfile after the standard build steps.
+     *
+     * - [runner-images/docker-build/scripts/ensureNodeDockerfile](https://git.panter.ch/catladder/catladder/-/tree/main/runner-images/docker-build/scripts/ensureNodeDockerfile)
+     * - [runner-images/docker-build/scripts/ensureNginxDockerfile](https://git.panter.ch/catladder/catladder/-/tree/main/runner-images/docker-build/scripts/ensureNginxDockerfile)
+     * - [runner-images/docker-build/scripts/ensureMeteorDockerfile](https://git.panter.ch/catladder/catladder/-/tree/main/runner-images/docker-build/scripts/ensureMeteorDockerfile)
+     */
     additionsEnd?: string[];
   };
 
   /**
    * customize lint, set false to disable
    */
-  lint?:
-    | false
-    | {
-        command?: string | string[];
-        jobImage?: GitlabJobImage;
-      };
+  lint?: false | TestJobCustom;
 
   /**
    * customize test, set false to disable
    */
-  test?:
-    | false
-    | {
-        command?: string | string[];
-        jobImage?: GitlabJobImage;
-      };
+  test?: false | TestJobCustom;
 
   /**
    * customize audit, set false to disable
    */
-  audit?:
-    | false
-    | {
-        command?: string | string[];
-        jobImage?: GitlabJobImage;
-      };
+  audit?: false | TestJobCustom;
 
   /**
    * additional paths for artifacts,
@@ -147,6 +167,9 @@ export type BuildConfigCustom = Omit<
 > & {
   type: "custom";
   jobImage: GitlabJobImage;
+  /**
+   * {@link GitlabJobService}s used in lint, test, audit, and build jobs.
+   */
   jobServices?: GitlabJobService[];
 
   docker: BuildConfigCustomDocker;
@@ -154,41 +177,17 @@ export type BuildConfigCustom = Omit<
   /**
    * custom lint, disabled when not set
    */
-  lint?: {
-    command?: string | string[];
-    jobImage?: GitlabJobImage;
-    /**
-     * additional CI/CD artifacts reports,
-     * use to display information in merge requests, pipeline views and security dashboards.
-     */
-    artifactsReports?: BuildConfigArtifactsReports;
-  };
+  lint?: TestJobCustom;
 
   /**
    * custom test, disabled when not set
    */
-  test?: {
-    command?: string | string[];
-    jobImage?: GitlabJobImage;
-    /**
-     * additional CI/CD artifacts reports,
-     * use to display information in merge requests, pipeline views and security dashboards.
-     */
-    artifactsReports?: BuildConfigArtifactsReports;
-  };
+  test?: TestJobCustom;
 
   /**
    * custom audit, disabled when not set
    */
-  audit?: {
-    command?: string | string[];
-    jobImage?: GitlabJobImage;
-    /**
-     * additional CI/CD artifacts reports,
-     * use to display information in merge requests, pipeline views and security dashboards.
-     */
-    artifactsReports?: BuildConfigArtifactsReports;
-  };
+  audit?: TestJobCustom;
 
   /**
    * custom sbom (software bill of materials), set false to disable

package/src/deploy/base.ts

@@ -1,6 +1,8 @@
 import { getDockerImageVariables, requiresDockerBuild } from "../build/docker";
+import { SBOM_BUILD_JOB_NAME } from "../build/sbom";
 import type { Context } from "../types";
 import type { CatladderJob } from "../types/jobs";
+import { sbomDeactivated } from "./sbom";
 import { contextIsStoppable } from "./utils";
 
 export const DEPLOY_JOB_NAME = "🚀 Deploy";
@@ -43,13 +45,18 @@ export const getBaseDeploymentJob = (context: Context): JobWithoutScript => {
     name: DEPLOY_JOB_NAME,
     envMode: "stagePerEnv", // makes it easier to run manual tasks er env
 
-    needs: context.componentConfig.deploy
-      ? context.componentConfig.deploy.waitFor?.map((c) => ({
-          componentName: c,
-          job: DEPLOY_JOB_NAME,
-          artifacts: false,
-        })) ?? undefined
-      : undefined,
+    needs: [
+      ...(sbomDeactivated(context)
+        ? []
+        : [{ job: SBOM_BUILD_JOB_NAME, artifacts: true }]),
+      ...(context.componentConfig.deploy
+        ? context.componentConfig.deploy.waitFor?.map((c) => ({
+            componentName: c,
+            job: DEPLOY_JOB_NAME,
+            artifacts: false,
+          })) ?? []
+        : []),
+    ],
     // we don't want to deploy when there is a broken test
     needsStages: [
       {

package/src/deploy/cloudRun/deployJob.ts

@@ -22,6 +22,10 @@ import {
 import { allowFailureInScripts } from "../../utils/gitlab";
 import { getCloudRunJobName } from "./utils/jobName";
 import { createArgsString } from "./utils/createArgsString";
+import {
+  getDependencyTrackDeleteScript,
+  getDependencyTrackUploadScript,
+} from "../sbom";
 
 const setExtraVarsScripts = (deployConfig: DeployConfigCloudRun) => [
   `export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe ${deployConfig.projectId} --format="value(projectNumber)")`,
@@ -234,6 +238,7 @@ export const createGoogleCloudRunDeployJobs = (
     ...getJobRunScripts("postDeploy"),
 
     `docker image rm ${gcloudImageName}`,
+    ...getDependencyTrackUploadScript(context),
   ];
 
   const stopScripts = [
@@ -250,6 +255,7 @@ export const createGoogleCloudRunDeployJobs = (
     ...(deployConfig.cloudSql && deployConfig.cloudSql.deleteDatabaseOnStop
       ? getDatabaseDeleteScript(context, deployConfig)
       : []),
+    ...getDependencyTrackDeleteScript(context),
   ];
   return [
     merge({}, baseDeploymentJob, getDockerJobBaseProps(context), {

package/src/deploy/custom/deployJob.ts

@@ -6,6 +6,10 @@ import type { Context } from "../../types/context";
 import type { CatladderJob } from "../../types/jobs";
 import { getBaseDeploymentJob, getBaseDeploymentStopJob } from "../base";
 import { isOfDeployType } from "../types";
+import {
+  getDependencyTrackDeleteScript,
+  getDependencyTrackUploadScript,
+} from "../sbom";
 
 export const createCustomDeployJobs = (context: Context): CatladderJob[] => {
   const deployConfig = context.componentConfig.deploy;
@@ -27,13 +31,17 @@ export const createCustomDeployJobs = (context: Context): CatladderJob[] => {
         `cd ${context.componentConfig.dir}`,
         ...(deployConfig.requiresYarnInstall ? yarnInstall : []),
         ...deployConfig.script,
+        ...getDependencyTrackUploadScript(context),
       ],
     }),
     ...(deployConfig.stopScript
       ? [
           merge({}, getBaseDeploymentStopJob(context), {
             image: deployConfig.jobImage ?? getRunnerImage("jobs-default"),
-            script: deployConfig.stopScript,
+            script: [
+              ...deployConfig.stopScript,
+              ...getDependencyTrackDeleteScript(context),
+            ],
           }),
         ]
       : []),

package/src/deploy/kubernetes/deployJob.ts

@@ -11,6 +11,10 @@ import {
 } from "../base";
 import { isOfDeployType } from "../types";
 import { createKubeValues } from "./kubeValues";
+import {
+  getDependencyTrackDeleteScript,
+  getDependencyTrackUploadScript,
+} from "../sbom";
 
 export const createKubernetesDeployJobs = (
   context: Context
@@ -76,6 +80,7 @@ export const createKubernetesDeployJobs = (
         ...connectContext,
         "kubernetesCreateSecret",
         "kubernetesDeploy",
+        ...getDependencyTrackUploadScript(context),
         "echo deployment successful 😻",
       ],
       environment: {
@@ -83,7 +88,11 @@ export const createKubernetesDeployJobs = (
       },
     }),
     merge({}, baseStopJob, shared, {
-      script: [...connectContext, "kubernetesDelete"],
+      script: [
+        ...connectContext,
+        "kubernetesDelete",
+        ...getDependencyTrackDeleteScript(context),
+      ],
       environment: {
         kubernetes: kubernetesEnvironment,
       },

package/src/deploy/sbom.ts

@@ -0,0 +1,24 @@
+import type { Context } from "../types/context";
+import { SBOM_FILE } from "../build/sbom";
+
+export const sbomDeactivated = (context: Context) =>
+  context.componentConfig.build.type === "custom" &&
+  context.componentConfig.build.sbom === false;
+
+export const getDependencyTrackUploadScript = (context: Context): string[] => {
+  return sbomDeactivated(context)
+    ? []
+    : [
+        "echo Uploading SBOM to Dependency Track",
+        `/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "${context.fullConfig.customerName}-${context.fullConfig.appName}/${context.componentName}" "${context.environment.url}" "${SBOM_FILE}" vex.json || true`,
+      ];
+};
+
+export const getDependencyTrackDeleteScript = (context: Context): string[] => {
+  return sbomDeactivated(context)
+    ? []
+    : [
+        "echo Disabling component in Dependency Track",
+        `/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "${context.fullConfig.customerName}-${context.fullConfig.appName}/${context.componentName}" "${context.environment.url}" || true`,
+      ];
+};

package/src/pipeline/createJobsForComponent.ts

@@ -1,6 +1,5 @@
 import { isFunction } from "lodash";
 import { BUILD_TYPES } from "../build";
-import { createReportingJobs } from "../verify/reporting";
 import { createContext } from "../context";
 import { DEPLOY_TYPES } from "../deploy";
 import type { Config, PipelineTrigger } from "../types/config";
@@ -36,10 +35,9 @@ const createRawJobs = (context: Context): CatladderJob[] => {
     context.componentConfig.deploy !== false
       ? DEPLOY_TYPES[context.componentConfig.deploy.type].jobs(context)
       : [];
-  const reportingJobs = createReportingJobs(context);
 
   const customJobs = getCustomJobs(context);
-  return [...buildJobs, ...deployJobs, ...reportingJobs, ...customJobs];
+  return [...buildJobs, ...deployJobs, ...customJobs];
 };
 export const createJobsForComponent = async (
   config: Config,

package/src/pipeline/gitlab/createGitlabJobs.ts

@@ -72,10 +72,10 @@ export const makeGitlabJob = (
     }));
   });
   const cleanedNeeds: CatladderJob["needs"] = [
+    ...(needsFromStages ?? []),
     ...(needs ?? []),
     // pull in legacy needs from other component, which is now identical to needs
     ...(needsOtherComponent ?? []),
-    ...(needsFromStages ?? []),
   ];
 
   const gitlabNeeds: GitlabJobDef["needs"] = cleanedNeeds
@@ -94,6 +94,10 @@ export const makeGitlabJob = (
     ) // sort in a predictable manner for snapshot tests
     .sort((a, b) => getJobName(a).localeCompare(getJobName(b)));
 
+  const deduplicatedGitlabNeeds: GitlabJobDef["needs"] = [
+    ...new Map(gitlabNeeds.map((n) => [isObject(n) ? n.job : n, n])).values(),
+  ];
+
   const fullJobName = getFullJobName(
     name,
     componentName,
@@ -116,7 +120,7 @@ export const makeGitlabJob = (
         }
       : job.environment,
     // sort in a predictable manner for snapshot tests
-    needs: gitlabNeeds,
+    needs: deduplicatedGitlabNeeds,
     retry: BASE_RETRY,
     interruptible: true,
   });

package/src/types/gitlab-types.ts

@@ -2,19 +2,19 @@ export type Artifacts = {
   paths: string[];
   expire_in?: string;
   when?: "always" | "on_success" | "on_failure";
-  reports?: ArtifactReports;
+  // Reports won't show up on MRs until https://gitlab.com/groups/gitlab-org/-/epics/8205
+  reports?: {
+    accessibility?: string | string[];
+    coverage_report?: { coverage_format: string; path: string };
+    codequality?: string | string[];
+    cyclonedx?: string | string[];
+    dotenv?: string | string[];
+    junit?: string | string[];
+    sast?: string;
+    secret_detection?: string;
+    terraform?: string;
+  };
 };
-// Reports won't show up on MRs until https://gitlab.com/groups/gitlab-org/-/epics/8205
-export type ArtifactReports =
-  | { accessibility: string | string[] }
-  | { coverage_report: { coverage_format: string; path: string } }
-  | { codequality: string | string[] }
-  | { cyclonedx: string | string[] }
-  | { dotenv: string | string[] }
-  | { junit: string | string[] }
-  | { sast: string }
-  | { secret_detection: string }
-  | { terraform: string };
 export type GitlabJobCache = {
   key: GitlabJobCacheKey;
   policy?: string;

package/dist/verify/reporting.d.ts

@@ -1,3 +0,0 @@
-import type { Context } from "../types/context";
-import type { CatladderJob } from "../types/jobs";
-export declare const createReportingJobs: (context: Context) => CatladderJob<"stop" | "setup" | "test" | "build" | "deploy" | "verify" | "rollback">[];

package/dist/verify/reporting.js

@@ -1,48 +0,0 @@
-"use strict";
-
-exports.__esModule = true;
-exports.createReportingJobs = void 0;
-var base_1 = require("../deploy/base");
-var utils_1 = require("../utils");
-var STAGE = "verify";
-var SBOM_GENERATE_JOB_NAME = "🧾 sbom";
-var SBOM_FILE = "__sbom.json";
-var createSbomGenerateJob = function (context) {
-  var _a, _b, _c, _d, _e;
-  var buildConfig = context.componentConfig.build;
-  var defaultImage = "aquasec/trivy:0.38.3";
-  var defaultScript = ["trivy fs --quiet --format cyclonedx --output \"".concat(SBOM_FILE, "\" ").concat(((_a = context.packageManagerInfo) === null || _a === void 0 ? void 0 : _a.componentIsInWorkspace) ? "." : context.componentConfig.dir)];
-  var image = buildConfig.type === "custom" && buildConfig.sbom !== false ? (_c = (_b = buildConfig.sbom) === null || _b === void 0 ? void 0 : _b.jobImage) !== null && _c !== void 0 ? _c : defaultImage : defaultImage;
-  var script = buildConfig.type === "custom" && buildConfig.sbom !== false ? (_e = (0, utils_1.ensureArray)((_d = buildConfig.sbom) === null || _d === void 0 ? void 0 : _d.command)) !== null && _e !== void 0 ? _e : defaultScript : defaultScript;
-  return {
-    name: SBOM_GENERATE_JOB_NAME,
-    stage: STAGE,
-    needs: context.componentConfig.deploy !== false ? [base_1.DEPLOY_JOB_NAME] : [],
-    envMode: "jobPerEnv",
-    variables: {},
-    cache: undefined,
-    image: image,
-    script: script,
-    allow_failure: true,
-    artifacts: {
-      paths: [SBOM_FILE]
-    }
-  };
-};
-var createSbomUploadJob = function (context) {
-  return {
-    name: "🧾 sbom upload",
-    stage: STAGE,
-    needs: [SBOM_GENERATE_JOB_NAME],
-    envMode: "jobPerEnv",
-    variables: {},
-    cache: undefined,
-    image: "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
-    script: ["/dtrackuploader https://dep.panter.swiss/ \"$DT_KEY_PROD\" upload \"".concat(context.fullConfig.customerName, "-").concat(context.fullConfig.appName, "/").concat(context.componentName, "\" \"").concat(context.environment.shortName, "\" \"").concat(SBOM_FILE, "\" vex.json")],
-    allow_failure: true
-  };
-};
-var createReportingJobs = function (context) {
-  return context.componentConfig.build.type === "custom" && context.componentConfig.build.sbom === false ? [] : [createSbomGenerateJob(context), createSbomUploadJob(context)];
-};
-exports.createReportingJobs = createReportingJobs;