@catladder/pipeline 1.110.2 → 1.110.3

package/examples/__snapshots__/node-build-with-custom-image.ts.snap

@@ -223,6 +223,10 @@ COPY --chown=node:node .yarn /app/.yarn",
             "artifacts": false,
             "job": "www 🧪 test",
           },
+          {
+            "artifacts": true,
+            "job": "www 🧾 sbom | dev ",
+          },
           {
             "artifacts": false,
             "job": "www 🛡 audit",
@@ -254,6 +258,8 @@ COPY --chown=node:node .yarn /app/.yarn",
           "echo "$ENV_VARS" > ____envvars.yaml",
           "gcloud run deploy pan-test-app-dev-www --command="yarn,start" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,app-name=test-app,env-type=dev,env-name=dev,build-type=node --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --cpu-boost",
           "docker image rm asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG",
+          "echo Uploading SBOM to Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://pan-test-app-dev-www-unknown-host.example.com" "__sbom.json" vex.json || true",
         ],
         "services": [
           {
@@ -339,6 +345,8 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
           ",
           "gcloud auth activate-service-account --key-file="./____keyfile.json"",
           "gcloud run services delete pan-test-app-dev-www --project=asdf --region=asia-east1",
+          "echo Disabling component in Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://pan-test-app-dev-www-unknown-host.example.com" || true",
           "set -e",
         ],
         "stage": "stop dev",
@@ -419,26 +427,6 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
           "KUBERNETES_MEMORY_REQUEST": "2Gi",
         },
       },
-      "www 🧾 sbom upload | dev ": {
-        "allow_failure": true,
-        "image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
-        "interruptible": true,
-        "needs": [
-          "www 🧾 sbom | dev ",
-        ],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "dev" "__sbom.json" vex.json",
-        ],
-        "stage": "verify",
-        "variables": {},
-      },
       "www 🧾 sbom | dev ": {
         "allow_failure": true,
         "artifacts": {
@@ -448,9 +436,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
         },
         "image": "aquasec/trivy:0.38.3",
         "interruptible": true,
-        "needs": [
-          "www 🚀 Deploy | dev ",
-        ],
+        "needs": [],
         "retry": {
           "max": 2,
           "when": [
@@ -461,7 +447,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
         "script": [
           "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
         ],
-        "stage": "verify",
+        "stage": "build",
         "variables": {},
       },
     },
@@ -754,6 +740,10 @@ COPY --chown=node:node .yarn /app/.yarn",
             "artifacts": false,
             "job": "www 🧪 test",
           },
+          {
+            "artifacts": true,
+            "job": "www 🧾 sbom | review ",
+          },
           {
             "artifacts": false,
             "job": "www 🛡 audit",
@@ -785,6 +775,8 @@ COPY --chown=node:node .yarn /app/.yarn",
           "echo "$ENV_VARS" > ____envvars.yaml",
           "gcloud run deploy pan-test-app-review-mr1234-www --command="yarn,start" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,app-name=test-app,env-type=review,env-name=review,build-type=node --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --cpu-boost",
           "docker image rm asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG",
+          "echo Uploading SBOM to Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://pan-test-app-review-mr1234-www-unknown-host.example.com" "__sbom.json" vex.json || true",
         ],
         "services": [
           {
@@ -870,6 +862,8 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
           ",
           "gcloud auth activate-service-account --key-file="./____keyfile.json"",
           "gcloud run services delete pan-test-app-review-mr1234-www --project=asdf --region=asia-east1",
+          "echo Disabling component in Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://pan-test-app-review-mr1234-www-unknown-host.example.com" || true",
           "set -e",
         ],
         "stage": "stop review",
@@ -950,26 +944,6 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
           "KUBERNETES_MEMORY_REQUEST": "2Gi",
         },
       },
-      "www 🧾 sbom upload | review ": {
-        "allow_failure": true,
-        "image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
-        "interruptible": true,
-        "needs": [
-          "www 🧾 sbom | review ",
-        ],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "review" "__sbom.json" vex.json",
-        ],
-        "stage": "verify",
-        "variables": {},
-      },
       "www 🧾 sbom | review ": {
         "allow_failure": true,
         "artifacts": {
@@ -979,9 +953,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
         },
         "image": "aquasec/trivy:0.38.3",
         "interruptible": true,
-        "needs": [
-          "www 🚀 Deploy | review ",
-        ],
+        "needs": [],
         "retry": {
           "max": 2,
           "when": [
@@ -992,7 +964,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
         "script": [
           "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
         ],
-        "stage": "verify",
+        "stage": "build",
         "variables": {},
       },
     },
@@ -1377,6 +1349,10 @@ COPY --chown=node:node .yarn /app/.yarn",
             "artifacts": false,
             "job": "www 🔨 docker | prod ",
           },
+          {
+            "artifacts": true,
+            "job": "www 🧾 sbom | prod ",
+          },
         ],
         "retry": {
           "max": 2,
@@ -1404,6 +1380,8 @@ COPY --chown=node:node .yarn /app/.yarn",
           "echo "$ENV_VARS" > ____envvars.yaml",
           "gcloud run deploy pan-test-app-prod-www --command="yarn,start" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,app-name=test-app,env-type=prod,env-name=prod,build-type=node --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --cpu-boost",
           "docker image rm asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG",
+          "echo Uploading SBOM to Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://pan-test-app-prod-www-unknown-host.example.com" "__sbom.json" vex.json || true",
         ],
         "services": [
           {
@@ -1480,6 +1458,10 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
             "artifacts": false,
             "job": "www 🔨 docker | stage ",
           },
+          {
+            "artifacts": true,
+            "job": "www 🧾 sbom | stage ",
+          },
         ],
         "retry": {
           "max": 2,
@@ -1507,6 +1489,8 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
           "echo "$ENV_VARS" > ____envvars.yaml",
           "gcloud run deploy pan-test-app-stage-www --command="yarn,start" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,app-name=test-app,env-type=stage,env-name=stage,build-type=node --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --cpu-boost",
           "docker image rm asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG",
+          "echo Uploading SBOM to Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://pan-test-app-stage-www-unknown-host.example.com" "__sbom.json" vex.json || true",
         ],
         "services": [
           {
@@ -1592,6 +1576,8 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
           ",
           "gcloud auth activate-service-account --key-file="./____keyfile.json"",
           "gcloud run services delete pan-test-app-prod-www --project=asdf --region=asia-east1",
+          "echo Disabling component in Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://pan-test-app-prod-www-unknown-host.example.com" || true",
           "set -e",
         ],
         "stage": "stop prod",
@@ -1637,6 +1623,8 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
           ",
           "gcloud auth activate-service-account --key-file="./____keyfile.json"",
           "gcloud run services delete pan-test-app-stage-www --project=asdf --region=asia-east1",
+          "echo Disabling component in Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://pan-test-app-stage-www-unknown-host.example.com" || true",
           "set -e",
         ],
         "stage": "stop stage",
@@ -1649,46 +1637,6 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
           "KUBERNETES_MEMORY_REQUEST": "200Mi",
         },
       },
-      "www 🧾 sbom upload | prod ": {
-        "allow_failure": true,
-        "image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
-        "interruptible": true,
-        "needs": [
-          "www 🧾 sbom | prod ",
-        ],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "prod" "__sbom.json" vex.json",
-        ],
-        "stage": "verify",
-        "variables": {},
-      },
-      "www 🧾 sbom upload | stage ": {
-        "allow_failure": true,
-        "image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
-        "interruptible": true,
-        "needs": [
-          "www 🧾 sbom | stage ",
-        ],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "stage" "__sbom.json" vex.json",
-        ],
-        "stage": "verify",
-        "variables": {},
-      },
       "www 🧾 sbom | prod ": {
         "allow_failure": true,
         "artifacts": {
@@ -1698,9 +1646,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
         },
         "image": "aquasec/trivy:0.38.3",
         "interruptible": true,
-        "needs": [
-          "www 🚀 Deploy | prod ",
-        ],
+        "needs": [],
         "retry": {
           "max": 2,
           "when": [
@@ -1711,7 +1657,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
         "script": [
           "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
         ],
-        "stage": "verify",
+        "stage": "build",
         "variables": {},
       },
       "www 🧾 sbom | stage ": {
@@ -1723,9 +1669,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
         },
         "image": "aquasec/trivy:0.38.3",
         "interruptible": true,
-        "needs": [
-          "www 🚀 Deploy | stage ",
-        ],
+        "needs": [],
         "retry": {
           "max": 2,
           "when": [
@@ -1736,7 +1680,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
         "script": [
           "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
         ],
-        "stage": "verify",
+        "stage": "build",
         "variables": {},
       },
     },

package/examples/__snapshots__/rails-k8s-with-worker.ts.snap

@@ -221,6 +221,10 @@ jobs:
             "artifacts": false,
             "job": "app 🧪 test",
           },
+          {
+            "artifacts": true,
+            "job": "app 🧾 sbom | dev ",
+          },
           {
             "artifacts": false,
             "job": "app 🛡 audit",
@@ -245,6 +249,8 @@ jobs:
           "kubectl config use-context "kube-pan-test-app-dev-app"",
           "kubernetesCreateSecret",
           "kubernetesDeploy",
+          "echo Uploading SBOM to Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app" "https://app.dev.test-app.pan.panter.cloud" "__sbom.json" vex.json || true",
           "echo deployment successful 😻",
         ],
         "stage": "deploy dev",
@@ -366,6 +372,8 @@ jobs:
           "kubectl config set-context "kube-pan-test-app-dev-app" --cluster="kube-pan-test-app-dev-app" --user="kube-pan-test-app-dev-app" --namespace="pan-test-app-dev"",
           "kubectl config use-context "kube-pan-test-app-dev-app"",
           "kubernetesDelete",
+          "echo Disabling component in Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/app" "https://app.dev.test-app.pan.panter.cloud" || true",
         ],
         "stage": "stop dev",
         "variables": {
@@ -496,26 +504,6 @@ jobs:
         "stage": "test",
         "variables": {},
       },
-      "app 🧾 sbom upload | dev ": {
-        "allow_failure": true,
-        "image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
-        "interruptible": true,
-        "needs": [
-          "app 🧾 sbom | dev ",
-        ],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app" "dev" "__sbom.json" vex.json",
-        ],
-        "stage": "verify",
-        "variables": {},
-      },
       "app 🧾 sbom | dev ": {
         "allow_failure": true,
         "artifacts": {
@@ -525,9 +513,7 @@ jobs:
         },
         "image": "aquasec/trivy:0.38.3",
         "interruptible": true,
-        "needs": [
-          "app 🚀 Deploy | dev ",
-        ],
+        "needs": [],
         "retry": {
           "max": 2,
           "when": [
@@ -538,7 +524,7 @@ jobs:
         "script": [
           "trivy fs --quiet --format cyclonedx --output "__sbom.json" .",
         ],
-        "stage": "verify",
+        "stage": "build",
         "variables": {},
       },
     },
@@ -832,6 +818,10 @@ jobs:
             "artifacts": false,
             "job": "app 🧪 test",
           },
+          {
+            "artifacts": true,
+            "job": "app 🧾 sbom | review ",
+          },
           {
             "artifacts": false,
             "job": "app 🛡 audit",
@@ -856,6 +846,8 @@ jobs:
           "kubectl config use-context "kube-pan-test-app-review-mr1234-app"",
           "kubernetesCreateSecret",
           "kubernetesDeploy",
+          "echo Uploading SBOM to Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app" "https://app.mr1234.review.test-app.pan.panter.cloud" "__sbom.json" vex.json || true",
           "echo deployment successful 😻",
         ],
         "stage": "deploy review",
@@ -980,6 +972,8 @@ jobs:
           "kubectl config set-context "kube-pan-test-app-review-mr1234-app" --cluster="kube-pan-test-app-review-mr1234-app" --user="kube-pan-test-app-review-mr1234-app" --namespace="pan-test-app-review"",
           "kubectl config use-context "kube-pan-test-app-review-mr1234-app"",
           "kubernetesDelete",
+          "echo Disabling component in Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/app" "https://app.mr1234.review.test-app.pan.panter.cloud" || true",
         ],
         "stage": "stop review",
         "variables": {
@@ -1113,26 +1107,6 @@ jobs:
         "stage": "test",
         "variables": {},
       },
-      "app 🧾 sbom upload | review ": {
-        "allow_failure": true,
-        "image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
-        "interruptible": true,
-        "needs": [
-          "app 🧾 sbom | review ",
-        ],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app" "review" "__sbom.json" vex.json",
-        ],
-        "stage": "verify",
-        "variables": {},
-      },
       "app 🧾 sbom | review ": {
         "allow_failure": true,
         "artifacts": {
@@ -1142,9 +1116,7 @@ jobs:
         },
         "image": "aquasec/trivy:0.38.3",
         "interruptible": true,
-        "needs": [
-          "app 🚀 Deploy | review ",
-        ],
+        "needs": [],
         "retry": {
           "max": 2,
           "when": [
@@ -1155,7 +1127,7 @@ jobs:
         "script": [
           "trivy fs --quiet --format cyclonedx --output "__sbom.json" .",
         ],
-        "stage": "verify",
+        "stage": "build",
         "variables": {},
       },
     },
@@ -1566,6 +1538,10 @@ jobs:
             "artifacts": false,
             "job": "app 🔨 docker | prod ",
           },
+          {
+            "artifacts": true,
+            "job": "app 🧾 sbom | prod ",
+          },
         ],
         "retry": {
           "max": 2,
@@ -1586,6 +1562,8 @@ jobs:
           "kubectl config use-context "kube-pan-test-app-prod-app"",
           "kubernetesCreateSecret",
           "kubernetesDeploy",
+          "echo Uploading SBOM to Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app" "https://my-fancy-website.com" "__sbom.json" vex.json || true",
           "echo deployment successful 😻",
         ],
         "stage": "deploy prod",
@@ -1689,6 +1667,10 @@ jobs:
             "artifacts": false,
             "job": "app 🔨 docker | stage ",
           },
+          {
+            "artifacts": true,
+            "job": "app 🧾 sbom | stage ",
+          },
         ],
         "retry": {
           "max": 2,
@@ -1709,6 +1691,8 @@ jobs:
           "kubectl config use-context "kube-pan-test-app-stage-app"",
           "kubernetesCreateSecret",
           "kubernetesDeploy",
+          "echo Uploading SBOM to Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app" "https://app.stage.test-app.pan.panter.cloud" "__sbom.json" vex.json || true",
           "echo deployment successful 😻",
         ],
         "stage": "deploy stage",
@@ -1830,6 +1814,8 @@ jobs:
           "kubectl config set-context "kube-pan-test-app-prod-app" --cluster="kube-pan-test-app-prod-app" --user="kube-pan-test-app-prod-app" --namespace="pan-test-app-prod"",
           "kubectl config use-context "kube-pan-test-app-prod-app"",
           "kubernetesDelete",
+          "echo Disabling component in Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/app" "https://my-fancy-website.com" || true",
         ],
         "stage": "stop prod",
         "variables": {
@@ -1945,6 +1931,8 @@ jobs:
           "kubectl config set-context "kube-pan-test-app-stage-app" --cluster="kube-pan-test-app-stage-app" --user="kube-pan-test-app-stage-app" --namespace="pan-test-app-stage"",
           "kubectl config use-context "kube-pan-test-app-stage-app"",
           "kubernetesDelete",
+          "echo Disabling component in Dependency Track",
+          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/app" "https://app.stage.test-app.pan.panter.cloud" || true",
         ],
         "stage": "stop stage",
         "variables": {
@@ -2024,46 +2012,6 @@ jobs:
           "cloudsqlProxyCredentials": "$CL_stage_app_cloudsqlProxyCredentials",
         },
       },
-      "app 🧾 sbom upload | prod ": {
-        "allow_failure": true,
-        "image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
-        "interruptible": true,
-        "needs": [
-          "app 🧾 sbom | prod ",
-        ],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app" "prod" "__sbom.json" vex.json",
-        ],
-        "stage": "verify",
-        "variables": {},
-      },
-      "app 🧾 sbom upload | stage ": {
-        "allow_failure": true,
-        "image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
-        "interruptible": true,
-        "needs": [
-          "app 🧾 sbom | stage ",
-        ],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app" "stage" "__sbom.json" vex.json",
-        ],
-        "stage": "verify",
-        "variables": {},
-      },
       "app 🧾 sbom | prod ": {
         "allow_failure": true,
         "artifacts": {
@@ -2073,9 +2021,7 @@ jobs:
         },
         "image": "aquasec/trivy:0.38.3",
         "interruptible": true,
-        "needs": [
-          "app 🚀 Deploy | prod ",
-        ],
+        "needs": [],
         "retry": {
           "max": 2,
           "when": [
@@ -2086,7 +2032,7 @@ jobs:
         "script": [
           "trivy fs --quiet --format cyclonedx --output "__sbom.json" .",
         ],
-        "stage": "verify",
+        "stage": "build",
         "variables": {},
       },
       "app 🧾 sbom | stage ": {
@@ -2098,9 +2044,7 @@ jobs:
         },
         "image": "aquasec/trivy:0.38.3",
         "interruptible": true,
-        "needs": [
-          "app 🚀 Deploy | stage ",
-        ],
+        "needs": [],
         "retry": {
           "max": 2,
           "when": [
@@ -2111,7 +2055,7 @@ jobs:
         "script": [
           "trivy fs --quiet --format cyclonedx --output "__sbom.json" .",
         ],
-        "stage": "verify",
+        "stage": "build",
         "variables": {},
       },
     },