@catladder/pipeline 1.110.2 → 1.110.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (50) hide show
  1. package/dist/build/custom/buildJob.js +4 -2
  2. package/dist/build/node/buildJob.js +4 -2
  3. package/dist/build/rails/build.js +13 -2
  4. package/dist/build/sbom.d.ts +5 -0
  5. package/dist/build/sbom.js +29 -0
  6. package/dist/bundles/catladder-gitlab/index.js +3 -3
  7. package/dist/constants.js +1 -1
  8. package/dist/deploy/base.js +38 -2
  9. package/dist/deploy/cloudRun/deployJob.js +5 -4
  10. package/dist/deploy/custom/deployJob.js +3 -2
  11. package/dist/deploy/kubernetes/deployJob.js +3 -2
  12. package/dist/deploy/sbom.d.ts +4 -0
  13. package/dist/deploy/sbom.js +17 -0
  14. package/dist/pipeline/createJobsForComponent.js +1 -3
  15. package/dist/pipeline/gitlab/createGitlabJobs.js +5 -2
  16. package/dist/tsconfig.tsbuildinfo +1 -1
  17. package/examples/__snapshots__/cloud-run-memory-limit.ts.snap +40 -96
  18. package/examples/__snapshots__/cloud-run-no-cpu-throttling.ts.snap +40 -96
  19. package/examples/__snapshots__/cloud-run-non-public.ts.snap +40 -96
  20. package/examples/__snapshots__/cloud-run-with-sql-reuse-db.ts.snap +80 -192
  21. package/examples/__snapshots__/cloud-run-with-sql.ts.snap +80 -192
  22. package/examples/__snapshots__/custom-build-job-with-tests.ts.snap +40 -96
  23. package/examples/__snapshots__/custom-build-job.ts.snap +40 -96
  24. package/examples/__snapshots__/custom-deploy.ts.snap +40 -96
  25. package/examples/__snapshots__/custom-envs.ts.snap +6 -126
  26. package/examples/__snapshots__/custom-sbom-java.ts.snap +40 -96
  27. package/examples/__snapshots__/kubernetes-application-customization.ts.snap +40 -96
  28. package/examples/__snapshots__/kubernetes-with-cloud-sql-legacy.ts.snap +40 -96
  29. package/examples/__snapshots__/kubernetes-with-cloud-sql.ts.snap +40 -96
  30. package/examples/__snapshots__/kubernetes-with-jobs.ts.snap +80 -192
  31. package/examples/__snapshots__/kubernetes-with-mongodb.ts.snap +40 -96
  32. package/examples/__snapshots__/native-app.ts.snap +72 -192
  33. package/examples/__snapshots__/node-build-with-custom-image.ts.snap +40 -96
  34. package/examples/__snapshots__/rails-k8s-with-worker.ts.snap +40 -96
  35. package/examples/__snapshots__/wait-for-other-deploy.ts.snap +64 -192
  36. package/package.json +1 -1
  37. package/src/build/custom/buildJob.ts +3 -0
  38. package/src/build/node/buildJob.ts +3 -0
  39. package/src/build/rails/build.ts +3 -0
  40. package/src/build/sbom.ts +43 -0
  41. package/src/deploy/base.ts +14 -7
  42. package/src/deploy/cloudRun/deployJob.ts +6 -0
  43. package/src/deploy/custom/deployJob.ts +9 -1
  44. package/src/deploy/kubernetes/deployJob.ts +10 -1
  45. package/src/deploy/sbom.ts +24 -0
  46. package/src/pipeline/createJobsForComponent.ts +1 -3
  47. package/src/pipeline/gitlab/createGitlabJobs.ts +6 -2
  48. package/dist/verify/reporting.d.ts +0 -3
  49. package/dist/verify/reporting.js +0 -48
  50. package/src/verify/reporting.ts +0 -69
package/examples/__snapshots__/custom-build-job-with-tests.ts.snap CHANGED
@@ -184,6 +184,10 @@ exports[`matches snapshot 1`] = `
184
184
  "artifacts": false,
185
185
  "job": "www 🧪 test",
186
186
  },
187
+ {
188
+ "artifacts": true,
189
+ "job": "www 🧾 sbom | dev ",
190
+ },
187
191
  {
188
192
  "artifacts": false,
189
193
  "job": "www 🛡 audit",
@@ -215,6 +219,8 @@ exports[`matches snapshot 1`] = `
215
219
  "echo "$ENV_VARS" > ____envvars.yaml",
216
220
  "gcloud run deploy pan-test-app-dev-www --command="" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,app-name=test-app,env-type=dev,env-name=dev,build-type=custom --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --cpu-boost",
217
221
  "docker image rm asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG",
222
+ "echo Uploading SBOM to Dependency Track",
223
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://pan-test-app-dev-www-unknown-host.example.com" "__sbom.json" vex.json || true",
218
224
  ],
219
225
  "services": [
220
226
  {
@@ -300,6 +306,8 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
300
306
  ",
301
307
  "gcloud auth activate-service-account --key-file="./____keyfile.json"",
302
308
  "gcloud run services delete pan-test-app-dev-www --project=asdf --region=asia-east1",
309
+ "echo Disabling component in Dependency Track",
310
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://pan-test-app-dev-www-unknown-host.example.com" || true",
303
311
  "set -e",
304
312
  ],
305
313
  "stage": "stop dev",
@@ -392,26 +400,6 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
392
400
  "KUBERNETES_MEMORY_REQUEST": "2Gi",
393
401
  },
394
402
  },
395
- "www 🧾 sbom upload | dev ": {
396
- "allow_failure": true,
397
- "image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
398
- "interruptible": true,
399
- "needs": [
400
- "www 🧾 sbom | dev ",
401
- ],
402
- "retry": {
403
- "max": 2,
404
- "when": [
405
- "runner_system_failure",
406
- "stuck_or_timeout_failure",
407
- ],
408
- },
409
- "script": [
410
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "dev" "__sbom.json" vex.json",
411
- ],
412
- "stage": "verify",
413
- "variables": {},
414
- },
415
403
  "www 🧾 sbom | dev ": {
416
404
  "allow_failure": true,
417
405
  "artifacts": {
@@ -421,9 +409,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
421
409
  },
422
410
  "image": "aquasec/trivy:0.38.3",
423
411
  "interruptible": true,
424
- "needs": [
425
- "www 🚀 Deploy | dev ",
426
- ],
412
+ "needs": [],
427
413
  "retry": {
428
414
  "max": 2,
429
415
  "when": [
@@ -434,7 +420,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
434
420
  "script": [
435
421
  "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
436
422
  ],
437
- "stage": "verify",
423
+ "stage": "build",
438
424
  "variables": {},
439
425
  },
440
426
  },
@@ -688,6 +674,10 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
688
674
  "artifacts": false,
689
675
  "job": "www 🧪 test",
690
676
  },
677
+ {
678
+ "artifacts": true,
679
+ "job": "www 🧾 sbom | review ",
680
+ },
691
681
  {
692
682
  "artifacts": false,
693
683
  "job": "www 🛡 audit",
@@ -719,6 +709,8 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
719
709
  "echo "$ENV_VARS" > ____envvars.yaml",
720
710
  "gcloud run deploy pan-test-app-review-mr1234-www --command="" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,app-name=test-app,env-type=review,env-name=review,build-type=custom --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --cpu-boost",
721
711
  "docker image rm asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG",
712
+ "echo Uploading SBOM to Dependency Track",
713
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://pan-test-app-review-mr1234-www-unknown-host.example.com" "__sbom.json" vex.json || true",
722
714
  ],
723
715
  "services": [
724
716
  {
@@ -804,6 +796,8 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
804
796
  ",
805
797
  "gcloud auth activate-service-account --key-file="./____keyfile.json"",
806
798
  "gcloud run services delete pan-test-app-review-mr1234-www --project=asdf --region=asia-east1",
799
+ "echo Disabling component in Dependency Track",
800
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://pan-test-app-review-mr1234-www-unknown-host.example.com" || true",
807
801
  "set -e",
808
802
  ],
809
803
  "stage": "stop review",
@@ -896,26 +890,6 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
896
890
  "KUBERNETES_MEMORY_REQUEST": "2Gi",
897
891
  },
898
892
  },
899
- "www 🧾 sbom upload | review ": {
900
- "allow_failure": true,
901
- "image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
902
- "interruptible": true,
903
- "needs": [
904
- "www 🧾 sbom | review ",
905
- ],
906
- "retry": {
907
- "max": 2,
908
- "when": [
909
- "runner_system_failure",
910
- "stuck_or_timeout_failure",
911
- ],
912
- },
913
- "script": [
914
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "review" "__sbom.json" vex.json",
915
- ],
916
- "stage": "verify",
917
- "variables": {},
918
- },
919
893
  "www 🧾 sbom | review ": {
920
894
  "allow_failure": true,
921
895
  "artifacts": {
@@ -925,9 +899,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
925
899
  },
926
900
  "image": "aquasec/trivy:0.38.3",
927
901
  "interruptible": true,
928
- "needs": [
929
- "www 🚀 Deploy | review ",
930
- ],
902
+ "needs": [],
931
903
  "retry": {
932
904
  "max": 2,
933
905
  "when": [
@@ -938,7 +910,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
938
910
  "script": [
939
911
  "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
940
912
  ],
941
- "stage": "verify",
913
+ "stage": "build",
942
914
  "variables": {},
943
915
  },
944
916
  },
@@ -1253,6 +1225,10 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
1253
1225
  "artifacts": false,
1254
1226
  "job": "www 🔨 docker | prod ",
1255
1227
  },
1228
+ {
1229
+ "artifacts": true,
1230
+ "job": "www 🧾 sbom | prod ",
1231
+ },
1256
1232
  ],
1257
1233
  "retry": {
1258
1234
  "max": 2,
@@ -1280,6 +1256,8 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
1280
1256
  "echo "$ENV_VARS" > ____envvars.yaml",
1281
1257
  "gcloud run deploy pan-test-app-prod-www --command="" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,app-name=test-app,env-type=prod,env-name=prod,build-type=custom --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --cpu-boost",
1282
1258
  "docker image rm asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG",
1259
+ "echo Uploading SBOM to Dependency Track",
1260
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://pan-test-app-prod-www-unknown-host.example.com" "__sbom.json" vex.json || true",
1283
1261
  ],
1284
1262
  "services": [
1285
1263
  {
@@ -1356,6 +1334,10 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
1356
1334
  "artifacts": false,
1357
1335
  "job": "www 🔨 docker | stage ",
1358
1336
  },
1337
+ {
1338
+ "artifacts": true,
1339
+ "job": "www 🧾 sbom | stage ",
1340
+ },
1359
1341
  ],
1360
1342
  "retry": {
1361
1343
  "max": 2,
@@ -1383,6 +1365,8 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
1383
1365
  "echo "$ENV_VARS" > ____envvars.yaml",
1384
1366
  "gcloud run deploy pan-test-app-stage-www --command="" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,app-name=test-app,env-type=stage,env-name=stage,build-type=custom --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --cpu-boost",
1385
1367
  "docker image rm asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG",
1368
+ "echo Uploading SBOM to Dependency Track",
1369
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://pan-test-app-stage-www-unknown-host.example.com" "__sbom.json" vex.json || true",
1386
1370
  ],
1387
1371
  "services": [
1388
1372
  {
@@ -1468,6 +1452,8 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
1468
1452
  ",
1469
1453
  "gcloud auth activate-service-account --key-file="./____keyfile.json"",
1470
1454
  "gcloud run services delete pan-test-app-prod-www --project=asdf --region=asia-east1",
1455
+ "echo Disabling component in Dependency Track",
1456
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://pan-test-app-prod-www-unknown-host.example.com" || true",
1471
1457
  "set -e",
1472
1458
  ],
1473
1459
  "stage": "stop prod",
@@ -1513,6 +1499,8 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
1513
1499
  ",
1514
1500
  "gcloud auth activate-service-account --key-file="./____keyfile.json"",
1515
1501
  "gcloud run services delete pan-test-app-stage-www --project=asdf --region=asia-east1",
1502
+ "echo Disabling component in Dependency Track",
1503
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://pan-test-app-stage-www-unknown-host.example.com" || true",
1516
1504
  "set -e",
1517
1505
  ],
1518
1506
  "stage": "stop stage",
@@ -1525,46 +1513,6 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
1525
1513
  "KUBERNETES_MEMORY_REQUEST": "200Mi",
1526
1514
  },
1527
1515
  },
1528
- "www 🧾 sbom upload | prod ": {
1529
- "allow_failure": true,
1530
- "image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
1531
- "interruptible": true,
1532
- "needs": [
1533
- "www 🧾 sbom | prod ",
1534
- ],
1535
- "retry": {
1536
- "max": 2,
1537
- "when": [
1538
- "runner_system_failure",
1539
- "stuck_or_timeout_failure",
1540
- ],
1541
- },
1542
- "script": [
1543
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "prod" "__sbom.json" vex.json",
1544
- ],
1545
- "stage": "verify",
1546
- "variables": {},
1547
- },
1548
- "www 🧾 sbom upload | stage ": {
1549
- "allow_failure": true,
1550
- "image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
1551
- "interruptible": true,
1552
- "needs": [
1553
- "www 🧾 sbom | stage ",
1554
- ],
1555
- "retry": {
1556
- "max": 2,
1557
- "when": [
1558
- "runner_system_failure",
1559
- "stuck_or_timeout_failure",
1560
- ],
1561
- },
1562
- "script": [
1563
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "stage" "__sbom.json" vex.json",
1564
- ],
1565
- "stage": "verify",
1566
- "variables": {},
1567
- },
1568
1516
  "www 🧾 sbom | prod ": {
1569
1517
  "allow_failure": true,
1570
1518
  "artifacts": {
@@ -1574,9 +1522,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
1574
1522
  },
1575
1523
  "image": "aquasec/trivy:0.38.3",
1576
1524
  "interruptible": true,
1577
- "needs": [
1578
- "www 🚀 Deploy | prod ",
1579
- ],
1525
+ "needs": [],
1580
1526
  "retry": {
1581
1527
  "max": 2,
1582
1528
  "when": [
@@ -1587,7 +1533,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
1587
1533
  "script": [
1588
1534
  "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
1589
1535
  ],
1590
- "stage": "verify",
1536
+ "stage": "build",
1591
1537
  "variables": {},
1592
1538
  },
1593
1539
  "www 🧾 sbom | stage ": {
@@ -1599,9 +1545,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
1599
1545
  },
1600
1546
  "image": "aquasec/trivy:0.38.3",
1601
1547
  "interruptible": true,
1602
- "needs": [
1603
- "www 🚀 Deploy | stage ",
1604
- ],
1548
+ "needs": [],
1605
1549
  "retry": {
1606
1550
  "max": 2,
1607
1551
  "when": [
@@ -1612,7 +1556,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
1612
1556
  "script": [
1613
1557
  "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
1614
1558
  ],
1615
- "stage": "verify",
1559
+ "stage": "build",
1616
1560
  "variables": {},
1617
1561
  },
1618
1562
  },
package/examples/__snapshots__/custom-build-job.ts.snap CHANGED
@@ -129,6 +129,10 @@ exports[`matches snapshot 1`] = `
129
129
  "artifacts": false,
130
130
  "job": "www 🔨 docker | dev ",
131
131
  },
132
+ {
133
+ "artifacts": true,
134
+ "job": "www 🧾 sbom | dev ",
135
+ },
132
136
  ],
133
137
  "retry": {
134
138
  "max": 2,
@@ -156,6 +160,8 @@ exports[`matches snapshot 1`] = `
156
160
  "echo "$ENV_VARS" > ____envvars.yaml",
157
161
  "gcloud run deploy pan-test-app-dev-www --command="" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,app-name=test-app,env-type=dev,env-name=dev,build-type=custom --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --cpu-boost",
158
162
  "docker image rm asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG",
163
+ "echo Uploading SBOM to Dependency Track",
164
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://pan-test-app-dev-www-unknown-host.example.com" "__sbom.json" vex.json || true",
159
165
  ],
160
166
  "services": [
161
167
  {
@@ -241,6 +247,8 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
241
247
  ",
242
248
  "gcloud auth activate-service-account --key-file="./____keyfile.json"",
243
249
  "gcloud run services delete pan-test-app-dev-www --project=asdf --region=asia-east1",
250
+ "echo Disabling component in Dependency Track",
251
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://pan-test-app-dev-www-unknown-host.example.com" || true",
244
252
  "set -e",
245
253
  ],
246
254
  "stage": "stop dev",
@@ -253,26 +261,6 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
253
261
  "KUBERNETES_MEMORY_REQUEST": "200Mi",
254
262
  },
255
263
  },
256
- "www 🧾 sbom upload | dev ": {
257
- "allow_failure": true,
258
- "image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
259
- "interruptible": true,
260
- "needs": [
261
- "www 🧾 sbom | dev ",
262
- ],
263
- "retry": {
264
- "max": 2,
265
- "when": [
266
- "runner_system_failure",
267
- "stuck_or_timeout_failure",
268
- ],
269
- },
270
- "script": [
271
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "dev" "__sbom.json" vex.json",
272
- ],
273
- "stage": "verify",
274
- "variables": {},
275
- },
276
264
  "www 🧾 sbom | dev ": {
277
265
  "allow_failure": true,
278
266
  "artifacts": {
@@ -282,9 +270,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
282
270
  },
283
271
  "image": "aquasec/trivy:0.38.3",
284
272
  "interruptible": true,
285
- "needs": [
286
- "www 🚀 Deploy | dev ",
287
- ],
273
+ "needs": [],
288
274
  "retry": {
289
275
  "max": 2,
290
276
  "when": [
@@ -295,7 +281,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
295
281
  "script": [
296
282
  "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
297
283
  ],
298
- "stage": "verify",
284
+ "stage": "build",
299
285
  "variables": {},
300
286
  },
301
287
  },
@@ -494,6 +480,10 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
494
480
  "artifacts": false,
495
481
  "job": "www 🔨 docker | review ",
496
482
  },
483
+ {
484
+ "artifacts": true,
485
+ "job": "www 🧾 sbom | review ",
486
+ },
497
487
  ],
498
488
  "retry": {
499
489
  "max": 2,
@@ -521,6 +511,8 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
521
511
  "echo "$ENV_VARS" > ____envvars.yaml",
522
512
  "gcloud run deploy pan-test-app-review-mr1234-www --command="" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,app-name=test-app,env-type=review,env-name=review,build-type=custom --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --cpu-boost",
523
513
  "docker image rm asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG",
514
+ "echo Uploading SBOM to Dependency Track",
515
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://pan-test-app-review-mr1234-www-unknown-host.example.com" "__sbom.json" vex.json || true",
524
516
  ],
525
517
  "services": [
526
518
  {
@@ -606,6 +598,8 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
606
598
  ",
607
599
  "gcloud auth activate-service-account --key-file="./____keyfile.json"",
608
600
  "gcloud run services delete pan-test-app-review-mr1234-www --project=asdf --region=asia-east1",
601
+ "echo Disabling component in Dependency Track",
602
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://pan-test-app-review-mr1234-www-unknown-host.example.com" || true",
609
603
  "set -e",
610
604
  ],
611
605
  "stage": "stop review",
@@ -618,26 +612,6 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
618
612
  "KUBERNETES_MEMORY_REQUEST": "200Mi",
619
613
  },
620
614
  },
621
- "www 🧾 sbom upload | review ": {
622
- "allow_failure": true,
623
- "image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
624
- "interruptible": true,
625
- "needs": [
626
- "www 🧾 sbom | review ",
627
- ],
628
- "retry": {
629
- "max": 2,
630
- "when": [
631
- "runner_system_failure",
632
- "stuck_or_timeout_failure",
633
- ],
634
- },
635
- "script": [
636
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "review" "__sbom.json" vex.json",
637
- ],
638
- "stage": "verify",
639
- "variables": {},
640
- },
641
615
  "www 🧾 sbom | review ": {
642
616
  "allow_failure": true,
643
617
  "artifacts": {
@@ -647,9 +621,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
647
621
  },
648
622
  "image": "aquasec/trivy:0.38.3",
649
623
  "interruptible": true,
650
- "needs": [
651
- "www 🚀 Deploy | review ",
652
- ],
624
+ "needs": [],
653
625
  "retry": {
654
626
  "max": 2,
655
627
  "when": [
@@ -660,7 +632,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
660
632
  "script": [
661
633
  "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
662
634
  ],
663
- "stage": "verify",
635
+ "stage": "build",
664
636
  "variables": {},
665
637
  },
666
638
  },
@@ -959,6 +931,10 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
959
931
  "artifacts": false,
960
932
  "job": "www 🔨 docker | prod ",
961
933
  },
934
+ {
935
+ "artifacts": true,
936
+ "job": "www 🧾 sbom | prod ",
937
+ },
962
938
  ],
963
939
  "retry": {
964
940
  "max": 2,
@@ -986,6 +962,8 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
986
962
  "echo "$ENV_VARS" > ____envvars.yaml",
987
963
  "gcloud run deploy pan-test-app-prod-www --command="" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,app-name=test-app,env-type=prod,env-name=prod,build-type=custom --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --cpu-boost",
988
964
  "docker image rm asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG",
965
+ "echo Uploading SBOM to Dependency Track",
966
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://pan-test-app-prod-www-unknown-host.example.com" "__sbom.json" vex.json || true",
989
967
  ],
990
968
  "services": [
991
969
  {
@@ -1062,6 +1040,10 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
1062
1040
  "artifacts": false,
1063
1041
  "job": "www 🔨 docker | stage ",
1064
1042
  },
1043
+ {
1044
+ "artifacts": true,
1045
+ "job": "www 🧾 sbom | stage ",
1046
+ },
1065
1047
  ],
1066
1048
  "retry": {
1067
1049
  "max": 2,
@@ -1089,6 +1071,8 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
1089
1071
  "echo "$ENV_VARS" > ____envvars.yaml",
1090
1072
  "gcloud run deploy pan-test-app-stage-www --command="" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,app-name=test-app,env-type=stage,env-name=stage,build-type=custom --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --cpu-boost",
1091
1073
  "docker image rm asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/$DOCKER_IMAGE_NAME:$DOCKER_IMAGE_TAG",
1074
+ "echo Uploading SBOM to Dependency Track",
1075
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://pan-test-app-stage-www-unknown-host.example.com" "__sbom.json" vex.json || true",
1092
1076
  ],
1093
1077
  "services": [
1094
1078
  {
@@ -1174,6 +1158,8 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
1174
1158
  ",
1175
1159
  "gcloud auth activate-service-account --key-file="./____keyfile.json"",
1176
1160
  "gcloud run services delete pan-test-app-prod-www --project=asdf --region=asia-east1",
1161
+ "echo Disabling component in Dependency Track",
1162
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://pan-test-app-prod-www-unknown-host.example.com" || true",
1177
1163
  "set -e",
1178
1164
  ],
1179
1165
  "stage": "stop prod",
@@ -1219,6 +1205,8 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
1219
1205
  ",
1220
1206
  "gcloud auth activate-service-account --key-file="./____keyfile.json"",
1221
1207
  "gcloud run services delete pan-test-app-stage-www --project=asdf --region=asia-east1",
1208
+ "echo Disabling component in Dependency Track",
1209
+ "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://pan-test-app-stage-www-unknown-host.example.com" || true",
1222
1210
  "set -e",
1223
1211
  ],
1224
1212
  "stage": "stop stage",
@@ -1231,46 +1219,6 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
1231
1219
  "KUBERNETES_MEMORY_REQUEST": "200Mi",
1232
1220
  },
1233
1221
  },
1234
- "www 🧾 sbom upload | prod ": {
1235
- "allow_failure": true,
1236
- "image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
1237
- "interruptible": true,
1238
- "needs": [
1239
- "www 🧾 sbom | prod ",
1240
- ],
1241
- "retry": {
1242
- "max": 2,
1243
- "when": [
1244
- "runner_system_failure",
1245
- "stuck_or_timeout_failure",
1246
- ],
1247
- },
1248
- "script": [
1249
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "prod" "__sbom.json" vex.json",
1250
- ],
1251
- "stage": "verify",
1252
- "variables": {},
1253
- },
1254
- "www 🧾 sbom upload | stage ": {
1255
- "allow_failure": true,
1256
- "image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
1257
- "interruptible": true,
1258
- "needs": [
1259
- "www 🧾 sbom | stage ",
1260
- ],
1261
- "retry": {
1262
- "max": 2,
1263
- "when": [
1264
- "runner_system_failure",
1265
- "stuck_or_timeout_failure",
1266
- ],
1267
- },
1268
- "script": [
1269
- "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "stage" "__sbom.json" vex.json",
1270
- ],
1271
- "stage": "verify",
1272
- "variables": {},
1273
- },
1274
1222
  "www 🧾 sbom | prod ": {
1275
1223
  "allow_failure": true,
1276
1224
  "artifacts": {
@@ -1280,9 +1228,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
1280
1228
  },
1281
1229
  "image": "aquasec/trivy:0.38.3",
1282
1230
  "interruptible": true,
1283
- "needs": [
1284
- "www 🚀 Deploy | prod ",
1285
- ],
1231
+ "needs": [],
1286
1232
  "retry": {
1287
1233
  "max": 2,
1288
1234
  "when": [
@@ -1293,7 +1239,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
1293
1239
  "script": [
1294
1240
  "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
1295
1241
  ],
1296
- "stage": "verify",
1242
+ "stage": "build",
1297
1243
  "variables": {},
1298
1244
  },
1299
1245
  "www 🧾 sbom | stage ": {
@@ -1305,9 +1251,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
1305
1251
  },
1306
1252
  "image": "aquasec/trivy:0.38.3",
1307
1253
  "interruptible": true,
1308
- "needs": [
1309
- "www 🚀 Deploy | stage ",
1310
- ],
1254
+ "needs": [],
1311
1255
  "retry": {
1312
1256
  "max": 2,
1313
1257
  "when": [
@@ -1318,7 +1262,7 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INF
1318
1262
  "script": [
1319
1263
  "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
1320
1264
  ],
1321
- "stage": "verify",
1265
+ "stage": "build",
1322
1266
  "variables": {},
1323
1267
  },
1324
1268
  },