@catladder/pipeline 1.97.2 → 1.98.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/build/types.d.ts +10 -0
- package/dist/bundles/catladder-gitlab/index.js +1 -1
- package/dist/constants.js +1 -1
- package/dist/pipeline/createJobsForComponent.js +3 -1
- package/dist/tsconfig.tsbuildinfo +1 -1
- package/dist/verify/reporting.d.ts +3 -0
- package/dist/verify/reporting.js +48 -0
- package/examples/__snapshots__/cloud-run-memory-limit.ts.snap +196 -0
- package/examples/__snapshots__/cloud-run-no-cpu-throttling.ts.snap +196 -0
- package/examples/__snapshots__/cloud-run-non-public.ts.snap +196 -0
- package/examples/__snapshots__/cloud-run-with-sql-reuse-db.ts.snap +392 -0
- package/examples/__snapshots__/cloud-run-with-sql.ts.snap +392 -0
- package/examples/__snapshots__/custom-build-job-with-tests.ts.snap +196 -0
- package/examples/__snapshots__/custom-build-job.ts.snap +196 -0
- package/examples/__snapshots__/custom-deploy.ts.snap +196 -0
- package/examples/__snapshots__/custom-sbom-java.ts.snap +1386 -0
- package/examples/__snapshots__/kubernetes-application-customization.ts.snap +196 -0
- package/examples/__snapshots__/kubernetes-with-cloud-sql-legacy.ts.snap +196 -0
- package/examples/__snapshots__/kubernetes-with-cloud-sql.ts.snap +196 -0
- package/examples/__snapshots__/kubernetes-with-jobs.ts.snap +392 -0
- package/examples/__snapshots__/rails-k8s-with-worker.ts.snap +196 -0
- package/examples/__snapshots__/wait-for-other-deploy.ts.snap +392 -0
- package/examples/custom-sbom-java.ts +34 -0
- package/package.json +1 -1
- package/src/build/types.ts +13 -0
- package/src/pipeline/createJobsForComponent.ts +3 -1
- package/src/verify/reporting.ts +69 -0
|
@@ -560,6 +560,55 @@ cronjobs:
|
|
|
560
560
|
"KUBERNETES_MEMORY_REQUEST": "2Gi",
|
|
561
561
|
},
|
|
562
562
|
},
|
|
563
|
+
"api 🧾 sbom upload | dev ": {
|
|
564
|
+
"allow_failure": true,
|
|
565
|
+
"cache": undefined,
|
|
566
|
+
"environment": undefined,
|
|
567
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
568
|
+
"interruptible": true,
|
|
569
|
+
"needs": [
|
|
570
|
+
"api 🧾 sbom | dev ",
|
|
571
|
+
],
|
|
572
|
+
"retry": {
|
|
573
|
+
"max": 2,
|
|
574
|
+
"when": [
|
|
575
|
+
"runner_system_failure",
|
|
576
|
+
"stuck_or_timeout_failure",
|
|
577
|
+
],
|
|
578
|
+
},
|
|
579
|
+
"script": [
|
|
580
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/api" "dev" "__sbom.json" vex.json",
|
|
581
|
+
],
|
|
582
|
+
"stage": "verify",
|
|
583
|
+
"variables": {},
|
|
584
|
+
},
|
|
585
|
+
"api 🧾 sbom | dev ": {
|
|
586
|
+
"allow_failure": true,
|
|
587
|
+
"artifacts": {
|
|
588
|
+
"paths": [
|
|
589
|
+
"__sbom.json",
|
|
590
|
+
],
|
|
591
|
+
},
|
|
592
|
+
"cache": undefined,
|
|
593
|
+
"environment": undefined,
|
|
594
|
+
"image": "aquasec/trivy:0.38.3",
|
|
595
|
+
"interruptible": true,
|
|
596
|
+
"needs": [
|
|
597
|
+
"api 🚀 Deploy | dev ",
|
|
598
|
+
],
|
|
599
|
+
"retry": {
|
|
600
|
+
"max": 2,
|
|
601
|
+
"when": [
|
|
602
|
+
"runner_system_failure",
|
|
603
|
+
"stuck_or_timeout_failure",
|
|
604
|
+
],
|
|
605
|
+
},
|
|
606
|
+
"script": [
|
|
607
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
|
|
608
|
+
],
|
|
609
|
+
"stage": "verify",
|
|
610
|
+
"variables": {},
|
|
611
|
+
},
|
|
563
612
|
"www ↩️ Rollback ⚠️ | dev ": {
|
|
564
613
|
"environment": {
|
|
565
614
|
"action": "access",
|
|
@@ -1094,6 +1143,55 @@ application:
|
|
|
1094
1143
|
"KUBERNETES_MEMORY_REQUEST": "2Gi",
|
|
1095
1144
|
},
|
|
1096
1145
|
},
|
|
1146
|
+
"www 🧾 sbom upload | dev ": {
|
|
1147
|
+
"allow_failure": true,
|
|
1148
|
+
"cache": undefined,
|
|
1149
|
+
"environment": undefined,
|
|
1150
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
1151
|
+
"interruptible": true,
|
|
1152
|
+
"needs": [
|
|
1153
|
+
"www 🧾 sbom | dev ",
|
|
1154
|
+
],
|
|
1155
|
+
"retry": {
|
|
1156
|
+
"max": 2,
|
|
1157
|
+
"when": [
|
|
1158
|
+
"runner_system_failure",
|
|
1159
|
+
"stuck_or_timeout_failure",
|
|
1160
|
+
],
|
|
1161
|
+
},
|
|
1162
|
+
"script": [
|
|
1163
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/www" "dev" "__sbom.json" vex.json",
|
|
1164
|
+
],
|
|
1165
|
+
"stage": "verify",
|
|
1166
|
+
"variables": {},
|
|
1167
|
+
},
|
|
1168
|
+
"www 🧾 sbom | dev ": {
|
|
1169
|
+
"allow_failure": true,
|
|
1170
|
+
"artifacts": {
|
|
1171
|
+
"paths": [
|
|
1172
|
+
"__sbom.json",
|
|
1173
|
+
],
|
|
1174
|
+
},
|
|
1175
|
+
"cache": undefined,
|
|
1176
|
+
"environment": undefined,
|
|
1177
|
+
"image": "aquasec/trivy:0.38.3",
|
|
1178
|
+
"interruptible": true,
|
|
1179
|
+
"needs": [
|
|
1180
|
+
"www 🚀 Deploy | dev ",
|
|
1181
|
+
],
|
|
1182
|
+
"retry": {
|
|
1183
|
+
"max": 2,
|
|
1184
|
+
"when": [
|
|
1185
|
+
"runner_system_failure",
|
|
1186
|
+
"stuck_or_timeout_failure",
|
|
1187
|
+
],
|
|
1188
|
+
},
|
|
1189
|
+
"script": [
|
|
1190
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
|
|
1191
|
+
],
|
|
1192
|
+
"stage": "verify",
|
|
1193
|
+
"variables": {},
|
|
1194
|
+
},
|
|
1097
1195
|
},
|
|
1098
1196
|
"stages": [
|
|
1099
1197
|
"setup",
|
|
@@ -1712,6 +1810,55 @@ cronjobs: {}
|
|
|
1712
1810
|
"KUBERNETES_MEMORY_REQUEST": "2Gi",
|
|
1713
1811
|
},
|
|
1714
1812
|
},
|
|
1813
|
+
"api 🧾 sbom upload | review ": {
|
|
1814
|
+
"allow_failure": true,
|
|
1815
|
+
"cache": undefined,
|
|
1816
|
+
"environment": undefined,
|
|
1817
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
1818
|
+
"interruptible": true,
|
|
1819
|
+
"needs": [
|
|
1820
|
+
"api 🧾 sbom | review ",
|
|
1821
|
+
],
|
|
1822
|
+
"retry": {
|
|
1823
|
+
"max": 2,
|
|
1824
|
+
"when": [
|
|
1825
|
+
"runner_system_failure",
|
|
1826
|
+
"stuck_or_timeout_failure",
|
|
1827
|
+
],
|
|
1828
|
+
},
|
|
1829
|
+
"script": [
|
|
1830
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/api" "review" "__sbom.json" vex.json",
|
|
1831
|
+
],
|
|
1832
|
+
"stage": "verify",
|
|
1833
|
+
"variables": {},
|
|
1834
|
+
},
|
|
1835
|
+
"api 🧾 sbom | review ": {
|
|
1836
|
+
"allow_failure": true,
|
|
1837
|
+
"artifacts": {
|
|
1838
|
+
"paths": [
|
|
1839
|
+
"__sbom.json",
|
|
1840
|
+
],
|
|
1841
|
+
},
|
|
1842
|
+
"cache": undefined,
|
|
1843
|
+
"environment": undefined,
|
|
1844
|
+
"image": "aquasec/trivy:0.38.3",
|
|
1845
|
+
"interruptible": true,
|
|
1846
|
+
"needs": [
|
|
1847
|
+
"api 🚀 Deploy | review ",
|
|
1848
|
+
],
|
|
1849
|
+
"retry": {
|
|
1850
|
+
"max": 2,
|
|
1851
|
+
"when": [
|
|
1852
|
+
"runner_system_failure",
|
|
1853
|
+
"stuck_or_timeout_failure",
|
|
1854
|
+
],
|
|
1855
|
+
},
|
|
1856
|
+
"script": [
|
|
1857
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
|
|
1858
|
+
],
|
|
1859
|
+
"stage": "verify",
|
|
1860
|
+
"variables": {},
|
|
1861
|
+
},
|
|
1715
1862
|
"www ↩️ Rollback ⚠️ | review ": {
|
|
1716
1863
|
"environment": {
|
|
1717
1864
|
"action": "access",
|
|
@@ -2246,6 +2393,55 @@ application:
|
|
|
2246
2393
|
"KUBERNETES_MEMORY_REQUEST": "2Gi",
|
|
2247
2394
|
},
|
|
2248
2395
|
},
|
|
2396
|
+
"www 🧾 sbom upload | review ": {
|
|
2397
|
+
"allow_failure": true,
|
|
2398
|
+
"cache": undefined,
|
|
2399
|
+
"environment": undefined,
|
|
2400
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
2401
|
+
"interruptible": true,
|
|
2402
|
+
"needs": [
|
|
2403
|
+
"www 🧾 sbom | review ",
|
|
2404
|
+
],
|
|
2405
|
+
"retry": {
|
|
2406
|
+
"max": 2,
|
|
2407
|
+
"when": [
|
|
2408
|
+
"runner_system_failure",
|
|
2409
|
+
"stuck_or_timeout_failure",
|
|
2410
|
+
],
|
|
2411
|
+
},
|
|
2412
|
+
"script": [
|
|
2413
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/www" "review" "__sbom.json" vex.json",
|
|
2414
|
+
],
|
|
2415
|
+
"stage": "verify",
|
|
2416
|
+
"variables": {},
|
|
2417
|
+
},
|
|
2418
|
+
"www 🧾 sbom | review ": {
|
|
2419
|
+
"allow_failure": true,
|
|
2420
|
+
"artifacts": {
|
|
2421
|
+
"paths": [
|
|
2422
|
+
"__sbom.json",
|
|
2423
|
+
],
|
|
2424
|
+
},
|
|
2425
|
+
"cache": undefined,
|
|
2426
|
+
"environment": undefined,
|
|
2427
|
+
"image": "aquasec/trivy:0.38.3",
|
|
2428
|
+
"interruptible": true,
|
|
2429
|
+
"needs": [
|
|
2430
|
+
"www 🚀 Deploy | review ",
|
|
2431
|
+
],
|
|
2432
|
+
"retry": {
|
|
2433
|
+
"max": 2,
|
|
2434
|
+
"when": [
|
|
2435
|
+
"runner_system_failure",
|
|
2436
|
+
"stuck_or_timeout_failure",
|
|
2437
|
+
],
|
|
2438
|
+
},
|
|
2439
|
+
"script": [
|
|
2440
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
|
|
2441
|
+
],
|
|
2442
|
+
"stage": "verify",
|
|
2443
|
+
"variables": {},
|
|
2444
|
+
},
|
|
2249
2445
|
},
|
|
2250
2446
|
"stages": [
|
|
2251
2447
|
"setup",
|
|
@@ -3182,6 +3378,104 @@ cronjobs:
|
|
|
3182
3378
|
"_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL"]",
|
|
3183
3379
|
},
|
|
3184
3380
|
},
|
|
3381
|
+
"api 🧾 sbom upload | prod ": {
|
|
3382
|
+
"allow_failure": true,
|
|
3383
|
+
"cache": undefined,
|
|
3384
|
+
"environment": undefined,
|
|
3385
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
3386
|
+
"interruptible": true,
|
|
3387
|
+
"needs": [
|
|
3388
|
+
"api 🧾 sbom | prod ",
|
|
3389
|
+
],
|
|
3390
|
+
"retry": {
|
|
3391
|
+
"max": 2,
|
|
3392
|
+
"when": [
|
|
3393
|
+
"runner_system_failure",
|
|
3394
|
+
"stuck_or_timeout_failure",
|
|
3395
|
+
],
|
|
3396
|
+
},
|
|
3397
|
+
"script": [
|
|
3398
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/api" "prod" "__sbom.json" vex.json",
|
|
3399
|
+
],
|
|
3400
|
+
"stage": "verify",
|
|
3401
|
+
"variables": {},
|
|
3402
|
+
},
|
|
3403
|
+
"api 🧾 sbom upload | stage ": {
|
|
3404
|
+
"allow_failure": true,
|
|
3405
|
+
"cache": undefined,
|
|
3406
|
+
"environment": undefined,
|
|
3407
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
3408
|
+
"interruptible": true,
|
|
3409
|
+
"needs": [
|
|
3410
|
+
"api 🧾 sbom | stage ",
|
|
3411
|
+
],
|
|
3412
|
+
"retry": {
|
|
3413
|
+
"max": 2,
|
|
3414
|
+
"when": [
|
|
3415
|
+
"runner_system_failure",
|
|
3416
|
+
"stuck_or_timeout_failure",
|
|
3417
|
+
],
|
|
3418
|
+
},
|
|
3419
|
+
"script": [
|
|
3420
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/api" "stage" "__sbom.json" vex.json",
|
|
3421
|
+
],
|
|
3422
|
+
"stage": "verify",
|
|
3423
|
+
"variables": {},
|
|
3424
|
+
},
|
|
3425
|
+
"api 🧾 sbom | prod ": {
|
|
3426
|
+
"allow_failure": true,
|
|
3427
|
+
"artifacts": {
|
|
3428
|
+
"paths": [
|
|
3429
|
+
"__sbom.json",
|
|
3430
|
+
],
|
|
3431
|
+
},
|
|
3432
|
+
"cache": undefined,
|
|
3433
|
+
"environment": undefined,
|
|
3434
|
+
"image": "aquasec/trivy:0.38.3",
|
|
3435
|
+
"interruptible": true,
|
|
3436
|
+
"needs": [
|
|
3437
|
+
"api 🚀 Deploy | prod ",
|
|
3438
|
+
],
|
|
3439
|
+
"retry": {
|
|
3440
|
+
"max": 2,
|
|
3441
|
+
"when": [
|
|
3442
|
+
"runner_system_failure",
|
|
3443
|
+
"stuck_or_timeout_failure",
|
|
3444
|
+
],
|
|
3445
|
+
},
|
|
3446
|
+
"script": [
|
|
3447
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
|
|
3448
|
+
],
|
|
3449
|
+
"stage": "verify",
|
|
3450
|
+
"variables": {},
|
|
3451
|
+
},
|
|
3452
|
+
"api 🧾 sbom | stage ": {
|
|
3453
|
+
"allow_failure": true,
|
|
3454
|
+
"artifacts": {
|
|
3455
|
+
"paths": [
|
|
3456
|
+
"__sbom.json",
|
|
3457
|
+
],
|
|
3458
|
+
},
|
|
3459
|
+
"cache": undefined,
|
|
3460
|
+
"environment": undefined,
|
|
3461
|
+
"image": "aquasec/trivy:0.38.3",
|
|
3462
|
+
"interruptible": true,
|
|
3463
|
+
"needs": [
|
|
3464
|
+
"api 🚀 Deploy | stage ",
|
|
3465
|
+
],
|
|
3466
|
+
"retry": {
|
|
3467
|
+
"max": 2,
|
|
3468
|
+
"when": [
|
|
3469
|
+
"runner_system_failure",
|
|
3470
|
+
"stuck_or_timeout_failure",
|
|
3471
|
+
],
|
|
3472
|
+
},
|
|
3473
|
+
"script": [
|
|
3474
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
|
|
3475
|
+
],
|
|
3476
|
+
"stage": "verify",
|
|
3477
|
+
"variables": {},
|
|
3478
|
+
},
|
|
3185
3479
|
"www ↩️ Rollback ⚠️ | prod ": {
|
|
3186
3480
|
"environment": {
|
|
3187
3481
|
"action": "access",
|
|
@@ -4004,6 +4298,104 @@ application:
|
|
|
4004
4298
|
"_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL"]",
|
|
4005
4299
|
},
|
|
4006
4300
|
},
|
|
4301
|
+
"www 🧾 sbom upload | prod ": {
|
|
4302
|
+
"allow_failure": true,
|
|
4303
|
+
"cache": undefined,
|
|
4304
|
+
"environment": undefined,
|
|
4305
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
4306
|
+
"interruptible": true,
|
|
4307
|
+
"needs": [
|
|
4308
|
+
"www 🧾 sbom | prod ",
|
|
4309
|
+
],
|
|
4310
|
+
"retry": {
|
|
4311
|
+
"max": 2,
|
|
4312
|
+
"when": [
|
|
4313
|
+
"runner_system_failure",
|
|
4314
|
+
"stuck_or_timeout_failure",
|
|
4315
|
+
],
|
|
4316
|
+
},
|
|
4317
|
+
"script": [
|
|
4318
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/www" "prod" "__sbom.json" vex.json",
|
|
4319
|
+
],
|
|
4320
|
+
"stage": "verify",
|
|
4321
|
+
"variables": {},
|
|
4322
|
+
},
|
|
4323
|
+
"www 🧾 sbom upload | stage ": {
|
|
4324
|
+
"allow_failure": true,
|
|
4325
|
+
"cache": undefined,
|
|
4326
|
+
"environment": undefined,
|
|
4327
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
4328
|
+
"interruptible": true,
|
|
4329
|
+
"needs": [
|
|
4330
|
+
"www 🧾 sbom | stage ",
|
|
4331
|
+
],
|
|
4332
|
+
"retry": {
|
|
4333
|
+
"max": 2,
|
|
4334
|
+
"when": [
|
|
4335
|
+
"runner_system_failure",
|
|
4336
|
+
"stuck_or_timeout_failure",
|
|
4337
|
+
],
|
|
4338
|
+
},
|
|
4339
|
+
"script": [
|
|
4340
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/www" "stage" "__sbom.json" vex.json",
|
|
4341
|
+
],
|
|
4342
|
+
"stage": "verify",
|
|
4343
|
+
"variables": {},
|
|
4344
|
+
},
|
|
4345
|
+
"www 🧾 sbom | prod ": {
|
|
4346
|
+
"allow_failure": true,
|
|
4347
|
+
"artifacts": {
|
|
4348
|
+
"paths": [
|
|
4349
|
+
"__sbom.json",
|
|
4350
|
+
],
|
|
4351
|
+
},
|
|
4352
|
+
"cache": undefined,
|
|
4353
|
+
"environment": undefined,
|
|
4354
|
+
"image": "aquasec/trivy:0.38.3",
|
|
4355
|
+
"interruptible": true,
|
|
4356
|
+
"needs": [
|
|
4357
|
+
"www 🚀 Deploy | prod ",
|
|
4358
|
+
],
|
|
4359
|
+
"retry": {
|
|
4360
|
+
"max": 2,
|
|
4361
|
+
"when": [
|
|
4362
|
+
"runner_system_failure",
|
|
4363
|
+
"stuck_or_timeout_failure",
|
|
4364
|
+
],
|
|
4365
|
+
},
|
|
4366
|
+
"script": [
|
|
4367
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
|
|
4368
|
+
],
|
|
4369
|
+
"stage": "verify",
|
|
4370
|
+
"variables": {},
|
|
4371
|
+
},
|
|
4372
|
+
"www 🧾 sbom | stage ": {
|
|
4373
|
+
"allow_failure": true,
|
|
4374
|
+
"artifacts": {
|
|
4375
|
+
"paths": [
|
|
4376
|
+
"__sbom.json",
|
|
4377
|
+
],
|
|
4378
|
+
},
|
|
4379
|
+
"cache": undefined,
|
|
4380
|
+
"environment": undefined,
|
|
4381
|
+
"image": "aquasec/trivy:0.38.3",
|
|
4382
|
+
"interruptible": true,
|
|
4383
|
+
"needs": [
|
|
4384
|
+
"www 🚀 Deploy | stage ",
|
|
4385
|
+
],
|
|
4386
|
+
"retry": {
|
|
4387
|
+
"max": 2,
|
|
4388
|
+
"when": [
|
|
4389
|
+
"runner_system_failure",
|
|
4390
|
+
"stuck_or_timeout_failure",
|
|
4391
|
+
],
|
|
4392
|
+
},
|
|
4393
|
+
"script": [
|
|
4394
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
|
|
4395
|
+
],
|
|
4396
|
+
"stage": "verify",
|
|
4397
|
+
"variables": {},
|
|
4398
|
+
},
|
|
4007
4399
|
},
|
|
4008
4400
|
"stages": [
|
|
4009
4401
|
"setup",
|
|
@@ -483,6 +483,55 @@ jobs:
|
|
|
483
483
|
"stage": "test",
|
|
484
484
|
"variables": {},
|
|
485
485
|
},
|
|
486
|
+
"app 🧾 sbom upload | dev ": {
|
|
487
|
+
"allow_failure": true,
|
|
488
|
+
"cache": undefined,
|
|
489
|
+
"environment": undefined,
|
|
490
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
491
|
+
"interruptible": true,
|
|
492
|
+
"needs": [
|
|
493
|
+
"app 🧾 sbom | dev ",
|
|
494
|
+
],
|
|
495
|
+
"retry": {
|
|
496
|
+
"max": 2,
|
|
497
|
+
"when": [
|
|
498
|
+
"runner_system_failure",
|
|
499
|
+
"stuck_or_timeout_failure",
|
|
500
|
+
],
|
|
501
|
+
},
|
|
502
|
+
"script": [
|
|
503
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/app" "dev" "__sbom.json" vex.json",
|
|
504
|
+
],
|
|
505
|
+
"stage": "verify",
|
|
506
|
+
"variables": {},
|
|
507
|
+
},
|
|
508
|
+
"app 🧾 sbom | dev ": {
|
|
509
|
+
"allow_failure": true,
|
|
510
|
+
"artifacts": {
|
|
511
|
+
"paths": [
|
|
512
|
+
"__sbom.json",
|
|
513
|
+
],
|
|
514
|
+
},
|
|
515
|
+
"cache": undefined,
|
|
516
|
+
"environment": undefined,
|
|
517
|
+
"image": "aquasec/trivy:0.38.3",
|
|
518
|
+
"interruptible": true,
|
|
519
|
+
"needs": [
|
|
520
|
+
"app 🚀 Deploy | dev ",
|
|
521
|
+
],
|
|
522
|
+
"retry": {
|
|
523
|
+
"max": 2,
|
|
524
|
+
"when": [
|
|
525
|
+
"runner_system_failure",
|
|
526
|
+
"stuck_or_timeout_failure",
|
|
527
|
+
],
|
|
528
|
+
},
|
|
529
|
+
"script": [
|
|
530
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" .",
|
|
531
|
+
],
|
|
532
|
+
"stage": "verify",
|
|
533
|
+
"variables": {},
|
|
534
|
+
},
|
|
486
535
|
},
|
|
487
536
|
"stages": [
|
|
488
537
|
"setup",
|
|
@@ -1042,6 +1091,55 @@ jobs:
|
|
|
1042
1091
|
"stage": "test",
|
|
1043
1092
|
"variables": {},
|
|
1044
1093
|
},
|
|
1094
|
+
"app 🧾 sbom upload | review ": {
|
|
1095
|
+
"allow_failure": true,
|
|
1096
|
+
"cache": undefined,
|
|
1097
|
+
"environment": undefined,
|
|
1098
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
1099
|
+
"interruptible": true,
|
|
1100
|
+
"needs": [
|
|
1101
|
+
"app 🧾 sbom | review ",
|
|
1102
|
+
],
|
|
1103
|
+
"retry": {
|
|
1104
|
+
"max": 2,
|
|
1105
|
+
"when": [
|
|
1106
|
+
"runner_system_failure",
|
|
1107
|
+
"stuck_or_timeout_failure",
|
|
1108
|
+
],
|
|
1109
|
+
},
|
|
1110
|
+
"script": [
|
|
1111
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/app" "review" "__sbom.json" vex.json",
|
|
1112
|
+
],
|
|
1113
|
+
"stage": "verify",
|
|
1114
|
+
"variables": {},
|
|
1115
|
+
},
|
|
1116
|
+
"app 🧾 sbom | review ": {
|
|
1117
|
+
"allow_failure": true,
|
|
1118
|
+
"artifacts": {
|
|
1119
|
+
"paths": [
|
|
1120
|
+
"__sbom.json",
|
|
1121
|
+
],
|
|
1122
|
+
},
|
|
1123
|
+
"cache": undefined,
|
|
1124
|
+
"environment": undefined,
|
|
1125
|
+
"image": "aquasec/trivy:0.38.3",
|
|
1126
|
+
"interruptible": true,
|
|
1127
|
+
"needs": [
|
|
1128
|
+
"app 🚀 Deploy | review ",
|
|
1129
|
+
],
|
|
1130
|
+
"retry": {
|
|
1131
|
+
"max": 2,
|
|
1132
|
+
"when": [
|
|
1133
|
+
"runner_system_failure",
|
|
1134
|
+
"stuck_or_timeout_failure",
|
|
1135
|
+
],
|
|
1136
|
+
},
|
|
1137
|
+
"script": [
|
|
1138
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" .",
|
|
1139
|
+
],
|
|
1140
|
+
"stage": "verify",
|
|
1141
|
+
"variables": {},
|
|
1142
|
+
},
|
|
1045
1143
|
},
|
|
1046
1144
|
"stages": [
|
|
1047
1145
|
"setup",
|
|
@@ -1874,6 +1972,104 @@ jobs:
|
|
|
1874
1972
|
"cloudsqlProxyCredentials": "$CL_stage_app_cloudsqlProxyCredentials",
|
|
1875
1973
|
},
|
|
1876
1974
|
},
|
|
1975
|
+
"app 🧾 sbom upload | prod ": {
|
|
1976
|
+
"allow_failure": true,
|
|
1977
|
+
"cache": undefined,
|
|
1978
|
+
"environment": undefined,
|
|
1979
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
1980
|
+
"interruptible": true,
|
|
1981
|
+
"needs": [
|
|
1982
|
+
"app 🧾 sbom | prod ",
|
|
1983
|
+
],
|
|
1984
|
+
"retry": {
|
|
1985
|
+
"max": 2,
|
|
1986
|
+
"when": [
|
|
1987
|
+
"runner_system_failure",
|
|
1988
|
+
"stuck_or_timeout_failure",
|
|
1989
|
+
],
|
|
1990
|
+
},
|
|
1991
|
+
"script": [
|
|
1992
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/app" "prod" "__sbom.json" vex.json",
|
|
1993
|
+
],
|
|
1994
|
+
"stage": "verify",
|
|
1995
|
+
"variables": {},
|
|
1996
|
+
},
|
|
1997
|
+
"app 🧾 sbom upload | stage ": {
|
|
1998
|
+
"allow_failure": true,
|
|
1999
|
+
"cache": undefined,
|
|
2000
|
+
"environment": undefined,
|
|
2001
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
2002
|
+
"interruptible": true,
|
|
2003
|
+
"needs": [
|
|
2004
|
+
"app 🧾 sbom | stage ",
|
|
2005
|
+
],
|
|
2006
|
+
"retry": {
|
|
2007
|
+
"max": 2,
|
|
2008
|
+
"when": [
|
|
2009
|
+
"runner_system_failure",
|
|
2010
|
+
"stuck_or_timeout_failure",
|
|
2011
|
+
],
|
|
2012
|
+
},
|
|
2013
|
+
"script": [
|
|
2014
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/app" "stage" "__sbom.json" vex.json",
|
|
2015
|
+
],
|
|
2016
|
+
"stage": "verify",
|
|
2017
|
+
"variables": {},
|
|
2018
|
+
},
|
|
2019
|
+
"app 🧾 sbom | prod ": {
|
|
2020
|
+
"allow_failure": true,
|
|
2021
|
+
"artifacts": {
|
|
2022
|
+
"paths": [
|
|
2023
|
+
"__sbom.json",
|
|
2024
|
+
],
|
|
2025
|
+
},
|
|
2026
|
+
"cache": undefined,
|
|
2027
|
+
"environment": undefined,
|
|
2028
|
+
"image": "aquasec/trivy:0.38.3",
|
|
2029
|
+
"interruptible": true,
|
|
2030
|
+
"needs": [
|
|
2031
|
+
"app 🚀 Deploy | prod ",
|
|
2032
|
+
],
|
|
2033
|
+
"retry": {
|
|
2034
|
+
"max": 2,
|
|
2035
|
+
"when": [
|
|
2036
|
+
"runner_system_failure",
|
|
2037
|
+
"stuck_or_timeout_failure",
|
|
2038
|
+
],
|
|
2039
|
+
},
|
|
2040
|
+
"script": [
|
|
2041
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" .",
|
|
2042
|
+
],
|
|
2043
|
+
"stage": "verify",
|
|
2044
|
+
"variables": {},
|
|
2045
|
+
},
|
|
2046
|
+
"app 🧾 sbom | stage ": {
|
|
2047
|
+
"allow_failure": true,
|
|
2048
|
+
"artifacts": {
|
|
2049
|
+
"paths": [
|
|
2050
|
+
"__sbom.json",
|
|
2051
|
+
],
|
|
2052
|
+
},
|
|
2053
|
+
"cache": undefined,
|
|
2054
|
+
"environment": undefined,
|
|
2055
|
+
"image": "aquasec/trivy:0.38.3",
|
|
2056
|
+
"interruptible": true,
|
|
2057
|
+
"needs": [
|
|
2058
|
+
"app 🚀 Deploy | stage ",
|
|
2059
|
+
],
|
|
2060
|
+
"retry": {
|
|
2061
|
+
"max": 2,
|
|
2062
|
+
"when": [
|
|
2063
|
+
"runner_system_failure",
|
|
2064
|
+
"stuck_or_timeout_failure",
|
|
2065
|
+
],
|
|
2066
|
+
},
|
|
2067
|
+
"script": [
|
|
2068
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" .",
|
|
2069
|
+
],
|
|
2070
|
+
"stage": "verify",
|
|
2071
|
+
"variables": {},
|
|
2072
|
+
},
|
|
1877
2073
|
},
|
|
1878
2074
|
"stages": [
|
|
1879
2075
|
"setup",
|