@catladder/pipeline 1.97.2 โ 1.98.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/build/types.d.ts +10 -0
- package/dist/bundles/catladder-gitlab/index.js +1 -1
- package/dist/constants.js +1 -1
- package/dist/pipeline/createJobsForComponent.js +3 -1
- package/dist/tsconfig.tsbuildinfo +1 -1
- package/dist/verify/reporting.d.ts +3 -0
- package/dist/verify/reporting.js +48 -0
- package/examples/__snapshots__/cloud-run-memory-limit.ts.snap +196 -0
- package/examples/__snapshots__/cloud-run-no-cpu-throttling.ts.snap +196 -0
- package/examples/__snapshots__/cloud-run-non-public.ts.snap +196 -0
- package/examples/__snapshots__/cloud-run-with-sql-reuse-db.ts.snap +392 -0
- package/examples/__snapshots__/cloud-run-with-sql.ts.snap +392 -0
- package/examples/__snapshots__/custom-build-job-with-tests.ts.snap +196 -0
- package/examples/__snapshots__/custom-build-job.ts.snap +196 -0
- package/examples/__snapshots__/custom-deploy.ts.snap +196 -0
- package/examples/__snapshots__/custom-sbom-java.ts.snap +1386 -0
- package/examples/__snapshots__/kubernetes-application-customization.ts.snap +196 -0
- package/examples/__snapshots__/kubernetes-with-cloud-sql-legacy.ts.snap +196 -0
- package/examples/__snapshots__/kubernetes-with-cloud-sql.ts.snap +196 -0
- package/examples/__snapshots__/kubernetes-with-jobs.ts.snap +392 -0
- package/examples/__snapshots__/rails-k8s-with-worker.ts.snap +196 -0
- package/examples/__snapshots__/wait-for-other-deploy.ts.snap +392 -0
- package/examples/custom-sbom-java.ts +34 -0
- package/package.json +1 -1
- package/src/build/types.ts +13 -0
- package/src/pipeline/createJobsForComponent.ts +3 -1
- package/src/verify/reporting.ts +69 -0
|
@@ -452,6 +452,55 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","HOST","ROOT_URL","HOST_CA
|
|
|
452
452
|
"KUBERNETES_MEMORY_REQUEST": "2Gi",
|
|
453
453
|
},
|
|
454
454
|
},
|
|
455
|
+
"api ๐งพ sbom upload | dev ": {
|
|
456
|
+
"allow_failure": true,
|
|
457
|
+
"cache": undefined,
|
|
458
|
+
"environment": undefined,
|
|
459
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
460
|
+
"interruptible": true,
|
|
461
|
+
"needs": [
|
|
462
|
+
"api ๐งพ sbom | dev ",
|
|
463
|
+
],
|
|
464
|
+
"retry": {
|
|
465
|
+
"max": 2,
|
|
466
|
+
"when": [
|
|
467
|
+
"runner_system_failure",
|
|
468
|
+
"stuck_or_timeout_failure",
|
|
469
|
+
],
|
|
470
|
+
},
|
|
471
|
+
"script": [
|
|
472
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/api" "dev" "__sbom.json" vex.json",
|
|
473
|
+
],
|
|
474
|
+
"stage": "verify",
|
|
475
|
+
"variables": {},
|
|
476
|
+
},
|
|
477
|
+
"api ๐งพ sbom | dev ": {
|
|
478
|
+
"allow_failure": true,
|
|
479
|
+
"artifacts": {
|
|
480
|
+
"paths": [
|
|
481
|
+
"__sbom.json",
|
|
482
|
+
],
|
|
483
|
+
},
|
|
484
|
+
"cache": undefined,
|
|
485
|
+
"environment": undefined,
|
|
486
|
+
"image": "aquasec/trivy:0.38.3",
|
|
487
|
+
"interruptible": true,
|
|
488
|
+
"needs": [
|
|
489
|
+
"api ๐ Deploy | dev ",
|
|
490
|
+
],
|
|
491
|
+
"retry": {
|
|
492
|
+
"max": 2,
|
|
493
|
+
"when": [
|
|
494
|
+
"runner_system_failure",
|
|
495
|
+
"stuck_or_timeout_failure",
|
|
496
|
+
],
|
|
497
|
+
},
|
|
498
|
+
"script": [
|
|
499
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
|
|
500
|
+
],
|
|
501
|
+
"stage": "verify",
|
|
502
|
+
"variables": {},
|
|
503
|
+
},
|
|
455
504
|
"www ๐ฎ lint": {
|
|
456
505
|
"cache": [
|
|
457
506
|
{
|
|
@@ -856,6 +905,55 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","HOST","ROOT_URL","HOST_CA
|
|
|
856
905
|
"KUBERNETES_MEMORY_REQUEST": "2Gi",
|
|
857
906
|
},
|
|
858
907
|
},
|
|
908
|
+
"www ๐งพ sbom upload | dev ": {
|
|
909
|
+
"allow_failure": true,
|
|
910
|
+
"cache": undefined,
|
|
911
|
+
"environment": undefined,
|
|
912
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
913
|
+
"interruptible": true,
|
|
914
|
+
"needs": [
|
|
915
|
+
"www ๐งพ sbom | dev ",
|
|
916
|
+
],
|
|
917
|
+
"retry": {
|
|
918
|
+
"max": 2,
|
|
919
|
+
"when": [
|
|
920
|
+
"runner_system_failure",
|
|
921
|
+
"stuck_or_timeout_failure",
|
|
922
|
+
],
|
|
923
|
+
},
|
|
924
|
+
"script": [
|
|
925
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/www" "dev" "__sbom.json" vex.json",
|
|
926
|
+
],
|
|
927
|
+
"stage": "verify",
|
|
928
|
+
"variables": {},
|
|
929
|
+
},
|
|
930
|
+
"www ๐งพ sbom | dev ": {
|
|
931
|
+
"allow_failure": true,
|
|
932
|
+
"artifacts": {
|
|
933
|
+
"paths": [
|
|
934
|
+
"__sbom.json",
|
|
935
|
+
],
|
|
936
|
+
},
|
|
937
|
+
"cache": undefined,
|
|
938
|
+
"environment": undefined,
|
|
939
|
+
"image": "aquasec/trivy:0.38.3",
|
|
940
|
+
"interruptible": true,
|
|
941
|
+
"needs": [
|
|
942
|
+
"www ๐ Deploy | dev ",
|
|
943
|
+
],
|
|
944
|
+
"retry": {
|
|
945
|
+
"max": 2,
|
|
946
|
+
"when": [
|
|
947
|
+
"runner_system_failure",
|
|
948
|
+
"stuck_or_timeout_failure",
|
|
949
|
+
],
|
|
950
|
+
},
|
|
951
|
+
"script": [
|
|
952
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
|
|
953
|
+
],
|
|
954
|
+
"stage": "verify",
|
|
955
|
+
"variables": {},
|
|
956
|
+
},
|
|
859
957
|
},
|
|
860
958
|
"stages": [
|
|
861
959
|
"setup",
|
|
@@ -1384,6 +1482,55 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","HOST","ROOT_URL","HOST_CA
|
|
|
1384
1482
|
"KUBERNETES_MEMORY_REQUEST": "2Gi",
|
|
1385
1483
|
},
|
|
1386
1484
|
},
|
|
1485
|
+
"api ๐งพ sbom upload | review ": {
|
|
1486
|
+
"allow_failure": true,
|
|
1487
|
+
"cache": undefined,
|
|
1488
|
+
"environment": undefined,
|
|
1489
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
1490
|
+
"interruptible": true,
|
|
1491
|
+
"needs": [
|
|
1492
|
+
"api ๐งพ sbom | review ",
|
|
1493
|
+
],
|
|
1494
|
+
"retry": {
|
|
1495
|
+
"max": 2,
|
|
1496
|
+
"when": [
|
|
1497
|
+
"runner_system_failure",
|
|
1498
|
+
"stuck_or_timeout_failure",
|
|
1499
|
+
],
|
|
1500
|
+
},
|
|
1501
|
+
"script": [
|
|
1502
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/api" "review" "__sbom.json" vex.json",
|
|
1503
|
+
],
|
|
1504
|
+
"stage": "verify",
|
|
1505
|
+
"variables": {},
|
|
1506
|
+
},
|
|
1507
|
+
"api ๐งพ sbom | review ": {
|
|
1508
|
+
"allow_failure": true,
|
|
1509
|
+
"artifacts": {
|
|
1510
|
+
"paths": [
|
|
1511
|
+
"__sbom.json",
|
|
1512
|
+
],
|
|
1513
|
+
},
|
|
1514
|
+
"cache": undefined,
|
|
1515
|
+
"environment": undefined,
|
|
1516
|
+
"image": "aquasec/trivy:0.38.3",
|
|
1517
|
+
"interruptible": true,
|
|
1518
|
+
"needs": [
|
|
1519
|
+
"api ๐ Deploy | review ",
|
|
1520
|
+
],
|
|
1521
|
+
"retry": {
|
|
1522
|
+
"max": 2,
|
|
1523
|
+
"when": [
|
|
1524
|
+
"runner_system_failure",
|
|
1525
|
+
"stuck_or_timeout_failure",
|
|
1526
|
+
],
|
|
1527
|
+
},
|
|
1528
|
+
"script": [
|
|
1529
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
|
|
1530
|
+
],
|
|
1531
|
+
"stage": "verify",
|
|
1532
|
+
"variables": {},
|
|
1533
|
+
},
|
|
1387
1534
|
"www ๐ฎ lint": {
|
|
1388
1535
|
"cache": [
|
|
1389
1536
|
{
|
|
@@ -1788,6 +1935,55 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","HOST","ROOT_URL","HOST_CA
|
|
|
1788
1935
|
"KUBERNETES_MEMORY_REQUEST": "2Gi",
|
|
1789
1936
|
},
|
|
1790
1937
|
},
|
|
1938
|
+
"www ๐งพ sbom upload | review ": {
|
|
1939
|
+
"allow_failure": true,
|
|
1940
|
+
"cache": undefined,
|
|
1941
|
+
"environment": undefined,
|
|
1942
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
1943
|
+
"interruptible": true,
|
|
1944
|
+
"needs": [
|
|
1945
|
+
"www ๐งพ sbom | review ",
|
|
1946
|
+
],
|
|
1947
|
+
"retry": {
|
|
1948
|
+
"max": 2,
|
|
1949
|
+
"when": [
|
|
1950
|
+
"runner_system_failure",
|
|
1951
|
+
"stuck_or_timeout_failure",
|
|
1952
|
+
],
|
|
1953
|
+
},
|
|
1954
|
+
"script": [
|
|
1955
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/www" "review" "__sbom.json" vex.json",
|
|
1956
|
+
],
|
|
1957
|
+
"stage": "verify",
|
|
1958
|
+
"variables": {},
|
|
1959
|
+
},
|
|
1960
|
+
"www ๐งพ sbom | review ": {
|
|
1961
|
+
"allow_failure": true,
|
|
1962
|
+
"artifacts": {
|
|
1963
|
+
"paths": [
|
|
1964
|
+
"__sbom.json",
|
|
1965
|
+
],
|
|
1966
|
+
},
|
|
1967
|
+
"cache": undefined,
|
|
1968
|
+
"environment": undefined,
|
|
1969
|
+
"image": "aquasec/trivy:0.38.3",
|
|
1970
|
+
"interruptible": true,
|
|
1971
|
+
"needs": [
|
|
1972
|
+
"www ๐ Deploy | review ",
|
|
1973
|
+
],
|
|
1974
|
+
"retry": {
|
|
1975
|
+
"max": 2,
|
|
1976
|
+
"when": [
|
|
1977
|
+
"runner_system_failure",
|
|
1978
|
+
"stuck_or_timeout_failure",
|
|
1979
|
+
],
|
|
1980
|
+
},
|
|
1981
|
+
"script": [
|
|
1982
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
|
|
1983
|
+
],
|
|
1984
|
+
"stage": "verify",
|
|
1985
|
+
"variables": {},
|
|
1986
|
+
},
|
|
1791
1987
|
},
|
|
1792
1988
|
"stages": [
|
|
1793
1989
|
"setup",
|
|
@@ -2508,6 +2704,104 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","HOST","ROOT_URL","HOST_CA
|
|
|
2508
2704
|
"KUBERNETES_MEMORY_REQUEST": "200Mi",
|
|
2509
2705
|
},
|
|
2510
2706
|
},
|
|
2707
|
+
"api ๐งพ sbom upload | prod ": {
|
|
2708
|
+
"allow_failure": true,
|
|
2709
|
+
"cache": undefined,
|
|
2710
|
+
"environment": undefined,
|
|
2711
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
2712
|
+
"interruptible": true,
|
|
2713
|
+
"needs": [
|
|
2714
|
+
"api ๐งพ sbom | prod ",
|
|
2715
|
+
],
|
|
2716
|
+
"retry": {
|
|
2717
|
+
"max": 2,
|
|
2718
|
+
"when": [
|
|
2719
|
+
"runner_system_failure",
|
|
2720
|
+
"stuck_or_timeout_failure",
|
|
2721
|
+
],
|
|
2722
|
+
},
|
|
2723
|
+
"script": [
|
|
2724
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/api" "prod" "__sbom.json" vex.json",
|
|
2725
|
+
],
|
|
2726
|
+
"stage": "verify",
|
|
2727
|
+
"variables": {},
|
|
2728
|
+
},
|
|
2729
|
+
"api ๐งพ sbom upload | stage ": {
|
|
2730
|
+
"allow_failure": true,
|
|
2731
|
+
"cache": undefined,
|
|
2732
|
+
"environment": undefined,
|
|
2733
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
2734
|
+
"interruptible": true,
|
|
2735
|
+
"needs": [
|
|
2736
|
+
"api ๐งพ sbom | stage ",
|
|
2737
|
+
],
|
|
2738
|
+
"retry": {
|
|
2739
|
+
"max": 2,
|
|
2740
|
+
"when": [
|
|
2741
|
+
"runner_system_failure",
|
|
2742
|
+
"stuck_or_timeout_failure",
|
|
2743
|
+
],
|
|
2744
|
+
},
|
|
2745
|
+
"script": [
|
|
2746
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/api" "stage" "__sbom.json" vex.json",
|
|
2747
|
+
],
|
|
2748
|
+
"stage": "verify",
|
|
2749
|
+
"variables": {},
|
|
2750
|
+
},
|
|
2751
|
+
"api ๐งพ sbom | prod ": {
|
|
2752
|
+
"allow_failure": true,
|
|
2753
|
+
"artifacts": {
|
|
2754
|
+
"paths": [
|
|
2755
|
+
"__sbom.json",
|
|
2756
|
+
],
|
|
2757
|
+
},
|
|
2758
|
+
"cache": undefined,
|
|
2759
|
+
"environment": undefined,
|
|
2760
|
+
"image": "aquasec/trivy:0.38.3",
|
|
2761
|
+
"interruptible": true,
|
|
2762
|
+
"needs": [
|
|
2763
|
+
"api ๐ Deploy | prod ",
|
|
2764
|
+
],
|
|
2765
|
+
"retry": {
|
|
2766
|
+
"max": 2,
|
|
2767
|
+
"when": [
|
|
2768
|
+
"runner_system_failure",
|
|
2769
|
+
"stuck_or_timeout_failure",
|
|
2770
|
+
],
|
|
2771
|
+
},
|
|
2772
|
+
"script": [
|
|
2773
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
|
|
2774
|
+
],
|
|
2775
|
+
"stage": "verify",
|
|
2776
|
+
"variables": {},
|
|
2777
|
+
},
|
|
2778
|
+
"api ๐งพ sbom | stage ": {
|
|
2779
|
+
"allow_failure": true,
|
|
2780
|
+
"artifacts": {
|
|
2781
|
+
"paths": [
|
|
2782
|
+
"__sbom.json",
|
|
2783
|
+
],
|
|
2784
|
+
},
|
|
2785
|
+
"cache": undefined,
|
|
2786
|
+
"environment": undefined,
|
|
2787
|
+
"image": "aquasec/trivy:0.38.3",
|
|
2788
|
+
"interruptible": true,
|
|
2789
|
+
"needs": [
|
|
2790
|
+
"api ๐ Deploy | stage ",
|
|
2791
|
+
],
|
|
2792
|
+
"retry": {
|
|
2793
|
+
"max": 2,
|
|
2794
|
+
"when": [
|
|
2795
|
+
"runner_system_failure",
|
|
2796
|
+
"stuck_or_timeout_failure",
|
|
2797
|
+
],
|
|
2798
|
+
},
|
|
2799
|
+
"script": [
|
|
2800
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
|
|
2801
|
+
],
|
|
2802
|
+
"stage": "verify",
|
|
2803
|
+
"variables": {},
|
|
2804
|
+
},
|
|
2511
2805
|
"www ๐จ app | prod ": {
|
|
2512
2806
|
"artifacts": {
|
|
2513
2807
|
"paths": [
|
|
@@ -3070,6 +3364,104 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","HOST","ROOT_URL","HOST_CA
|
|
|
3070
3364
|
"KUBERNETES_MEMORY_REQUEST": "200Mi",
|
|
3071
3365
|
},
|
|
3072
3366
|
},
|
|
3367
|
+
"www ๐งพ sbom upload | prod ": {
|
|
3368
|
+
"allow_failure": true,
|
|
3369
|
+
"cache": undefined,
|
|
3370
|
+
"environment": undefined,
|
|
3371
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
3372
|
+
"interruptible": true,
|
|
3373
|
+
"needs": [
|
|
3374
|
+
"www ๐งพ sbom | prod ",
|
|
3375
|
+
],
|
|
3376
|
+
"retry": {
|
|
3377
|
+
"max": 2,
|
|
3378
|
+
"when": [
|
|
3379
|
+
"runner_system_failure",
|
|
3380
|
+
"stuck_or_timeout_failure",
|
|
3381
|
+
],
|
|
3382
|
+
},
|
|
3383
|
+
"script": [
|
|
3384
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/www" "prod" "__sbom.json" vex.json",
|
|
3385
|
+
],
|
|
3386
|
+
"stage": "verify",
|
|
3387
|
+
"variables": {},
|
|
3388
|
+
},
|
|
3389
|
+
"www ๐งพ sbom upload | stage ": {
|
|
3390
|
+
"allow_failure": true,
|
|
3391
|
+
"cache": undefined,
|
|
3392
|
+
"environment": undefined,
|
|
3393
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
3394
|
+
"interruptible": true,
|
|
3395
|
+
"needs": [
|
|
3396
|
+
"www ๐งพ sbom | stage ",
|
|
3397
|
+
],
|
|
3398
|
+
"retry": {
|
|
3399
|
+
"max": 2,
|
|
3400
|
+
"when": [
|
|
3401
|
+
"runner_system_failure",
|
|
3402
|
+
"stuck_or_timeout_failure",
|
|
3403
|
+
],
|
|
3404
|
+
},
|
|
3405
|
+
"script": [
|
|
3406
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/www" "stage" "__sbom.json" vex.json",
|
|
3407
|
+
],
|
|
3408
|
+
"stage": "verify",
|
|
3409
|
+
"variables": {},
|
|
3410
|
+
},
|
|
3411
|
+
"www ๐งพ sbom | prod ": {
|
|
3412
|
+
"allow_failure": true,
|
|
3413
|
+
"artifacts": {
|
|
3414
|
+
"paths": [
|
|
3415
|
+
"__sbom.json",
|
|
3416
|
+
],
|
|
3417
|
+
},
|
|
3418
|
+
"cache": undefined,
|
|
3419
|
+
"environment": undefined,
|
|
3420
|
+
"image": "aquasec/trivy:0.38.3",
|
|
3421
|
+
"interruptible": true,
|
|
3422
|
+
"needs": [
|
|
3423
|
+
"www ๐ Deploy | prod ",
|
|
3424
|
+
],
|
|
3425
|
+
"retry": {
|
|
3426
|
+
"max": 2,
|
|
3427
|
+
"when": [
|
|
3428
|
+
"runner_system_failure",
|
|
3429
|
+
"stuck_or_timeout_failure",
|
|
3430
|
+
],
|
|
3431
|
+
},
|
|
3432
|
+
"script": [
|
|
3433
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
|
|
3434
|
+
],
|
|
3435
|
+
"stage": "verify",
|
|
3436
|
+
"variables": {},
|
|
3437
|
+
},
|
|
3438
|
+
"www ๐งพ sbom | stage ": {
|
|
3439
|
+
"allow_failure": true,
|
|
3440
|
+
"artifacts": {
|
|
3441
|
+
"paths": [
|
|
3442
|
+
"__sbom.json",
|
|
3443
|
+
],
|
|
3444
|
+
},
|
|
3445
|
+
"cache": undefined,
|
|
3446
|
+
"environment": undefined,
|
|
3447
|
+
"image": "aquasec/trivy:0.38.3",
|
|
3448
|
+
"interruptible": true,
|
|
3449
|
+
"needs": [
|
|
3450
|
+
"www ๐ Deploy | stage ",
|
|
3451
|
+
],
|
|
3452
|
+
"retry": {
|
|
3453
|
+
"max": 2,
|
|
3454
|
+
"when": [
|
|
3455
|
+
"runner_system_failure",
|
|
3456
|
+
"stuck_or_timeout_failure",
|
|
3457
|
+
],
|
|
3458
|
+
},
|
|
3459
|
+
"script": [
|
|
3460
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
|
|
3461
|
+
],
|
|
3462
|
+
"stage": "verify",
|
|
3463
|
+
"variables": {},
|
|
3464
|
+
},
|
|
3073
3465
|
},
|
|
3074
3466
|
"stages": [
|
|
3075
3467
|
"setup",
|
|
@@ -364,6 +364,55 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","HOST","ROOT_URL","HOST_CA
|
|
|
364
364
|
"KUBERNETES_MEMORY_REQUEST": "2Gi",
|
|
365
365
|
},
|
|
366
366
|
},
|
|
367
|
+
"www ๐งพ sbom upload | dev ": {
|
|
368
|
+
"allow_failure": true,
|
|
369
|
+
"cache": undefined,
|
|
370
|
+
"environment": undefined,
|
|
371
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
372
|
+
"interruptible": true,
|
|
373
|
+
"needs": [
|
|
374
|
+
"www ๐งพ sbom | dev ",
|
|
375
|
+
],
|
|
376
|
+
"retry": {
|
|
377
|
+
"max": 2,
|
|
378
|
+
"when": [
|
|
379
|
+
"runner_system_failure",
|
|
380
|
+
"stuck_or_timeout_failure",
|
|
381
|
+
],
|
|
382
|
+
},
|
|
383
|
+
"script": [
|
|
384
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/www" "dev" "__sbom.json" vex.json",
|
|
385
|
+
],
|
|
386
|
+
"stage": "verify",
|
|
387
|
+
"variables": {},
|
|
388
|
+
},
|
|
389
|
+
"www ๐งพ sbom | dev ": {
|
|
390
|
+
"allow_failure": true,
|
|
391
|
+
"artifacts": {
|
|
392
|
+
"paths": [
|
|
393
|
+
"__sbom.json",
|
|
394
|
+
],
|
|
395
|
+
},
|
|
396
|
+
"cache": undefined,
|
|
397
|
+
"environment": undefined,
|
|
398
|
+
"image": "aquasec/trivy:0.38.3",
|
|
399
|
+
"interruptible": true,
|
|
400
|
+
"needs": [
|
|
401
|
+
"www ๐ Deploy | dev ",
|
|
402
|
+
],
|
|
403
|
+
"retry": {
|
|
404
|
+
"max": 2,
|
|
405
|
+
"when": [
|
|
406
|
+
"runner_system_failure",
|
|
407
|
+
"stuck_or_timeout_failure",
|
|
408
|
+
],
|
|
409
|
+
},
|
|
410
|
+
"script": [
|
|
411
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
|
|
412
|
+
],
|
|
413
|
+
"stage": "verify",
|
|
414
|
+
"variables": {},
|
|
415
|
+
},
|
|
367
416
|
},
|
|
368
417
|
"stages": [
|
|
369
418
|
"setup",
|
|
@@ -795,6 +844,55 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","HOST","ROOT_URL","HOST_CA
|
|
|
795
844
|
"KUBERNETES_MEMORY_REQUEST": "2Gi",
|
|
796
845
|
},
|
|
797
846
|
},
|
|
847
|
+
"www ๐งพ sbom upload | review ": {
|
|
848
|
+
"allow_failure": true,
|
|
849
|
+
"cache": undefined,
|
|
850
|
+
"environment": undefined,
|
|
851
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
852
|
+
"interruptible": true,
|
|
853
|
+
"needs": [
|
|
854
|
+
"www ๐งพ sbom | review ",
|
|
855
|
+
],
|
|
856
|
+
"retry": {
|
|
857
|
+
"max": 2,
|
|
858
|
+
"when": [
|
|
859
|
+
"runner_system_failure",
|
|
860
|
+
"stuck_or_timeout_failure",
|
|
861
|
+
],
|
|
862
|
+
},
|
|
863
|
+
"script": [
|
|
864
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/www" "review" "__sbom.json" vex.json",
|
|
865
|
+
],
|
|
866
|
+
"stage": "verify",
|
|
867
|
+
"variables": {},
|
|
868
|
+
},
|
|
869
|
+
"www ๐งพ sbom | review ": {
|
|
870
|
+
"allow_failure": true,
|
|
871
|
+
"artifacts": {
|
|
872
|
+
"paths": [
|
|
873
|
+
"__sbom.json",
|
|
874
|
+
],
|
|
875
|
+
},
|
|
876
|
+
"cache": undefined,
|
|
877
|
+
"environment": undefined,
|
|
878
|
+
"image": "aquasec/trivy:0.38.3",
|
|
879
|
+
"interruptible": true,
|
|
880
|
+
"needs": [
|
|
881
|
+
"www ๐ Deploy | review ",
|
|
882
|
+
],
|
|
883
|
+
"retry": {
|
|
884
|
+
"max": 2,
|
|
885
|
+
"when": [
|
|
886
|
+
"runner_system_failure",
|
|
887
|
+
"stuck_or_timeout_failure",
|
|
888
|
+
],
|
|
889
|
+
},
|
|
890
|
+
"script": [
|
|
891
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
|
|
892
|
+
],
|
|
893
|
+
"stage": "verify",
|
|
894
|
+
"variables": {},
|
|
895
|
+
},
|
|
798
896
|
},
|
|
799
897
|
"stages": [
|
|
800
898
|
"setup",
|
|
@@ -1361,6 +1459,104 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","HOST","ROOT_URL","HOST_CA
|
|
|
1361
1459
|
"KUBERNETES_MEMORY_REQUEST": "200Mi",
|
|
1362
1460
|
},
|
|
1363
1461
|
},
|
|
1462
|
+
"www ๐งพ sbom upload | prod ": {
|
|
1463
|
+
"allow_failure": true,
|
|
1464
|
+
"cache": undefined,
|
|
1465
|
+
"environment": undefined,
|
|
1466
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
1467
|
+
"interruptible": true,
|
|
1468
|
+
"needs": [
|
|
1469
|
+
"www ๐งพ sbom | prod ",
|
|
1470
|
+
],
|
|
1471
|
+
"retry": {
|
|
1472
|
+
"max": 2,
|
|
1473
|
+
"when": [
|
|
1474
|
+
"runner_system_failure",
|
|
1475
|
+
"stuck_or_timeout_failure",
|
|
1476
|
+
],
|
|
1477
|
+
},
|
|
1478
|
+
"script": [
|
|
1479
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/www" "prod" "__sbom.json" vex.json",
|
|
1480
|
+
],
|
|
1481
|
+
"stage": "verify",
|
|
1482
|
+
"variables": {},
|
|
1483
|
+
},
|
|
1484
|
+
"www ๐งพ sbom upload | stage ": {
|
|
1485
|
+
"allow_failure": true,
|
|
1486
|
+
"cache": undefined,
|
|
1487
|
+
"environment": undefined,
|
|
1488
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
1489
|
+
"interruptible": true,
|
|
1490
|
+
"needs": [
|
|
1491
|
+
"www ๐งพ sbom | stage ",
|
|
1492
|
+
],
|
|
1493
|
+
"retry": {
|
|
1494
|
+
"max": 2,
|
|
1495
|
+
"when": [
|
|
1496
|
+
"runner_system_failure",
|
|
1497
|
+
"stuck_or_timeout_failure",
|
|
1498
|
+
],
|
|
1499
|
+
},
|
|
1500
|
+
"script": [
|
|
1501
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/www" "stage" "__sbom.json" vex.json",
|
|
1502
|
+
],
|
|
1503
|
+
"stage": "verify",
|
|
1504
|
+
"variables": {},
|
|
1505
|
+
},
|
|
1506
|
+
"www ๐งพ sbom | prod ": {
|
|
1507
|
+
"allow_failure": true,
|
|
1508
|
+
"artifacts": {
|
|
1509
|
+
"paths": [
|
|
1510
|
+
"__sbom.json",
|
|
1511
|
+
],
|
|
1512
|
+
},
|
|
1513
|
+
"cache": undefined,
|
|
1514
|
+
"environment": undefined,
|
|
1515
|
+
"image": "aquasec/trivy:0.38.3",
|
|
1516
|
+
"interruptible": true,
|
|
1517
|
+
"needs": [
|
|
1518
|
+
"www ๐ Deploy | prod ",
|
|
1519
|
+
],
|
|
1520
|
+
"retry": {
|
|
1521
|
+
"max": 2,
|
|
1522
|
+
"when": [
|
|
1523
|
+
"runner_system_failure",
|
|
1524
|
+
"stuck_or_timeout_failure",
|
|
1525
|
+
],
|
|
1526
|
+
},
|
|
1527
|
+
"script": [
|
|
1528
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
|
|
1529
|
+
],
|
|
1530
|
+
"stage": "verify",
|
|
1531
|
+
"variables": {},
|
|
1532
|
+
},
|
|
1533
|
+
"www ๐งพ sbom | stage ": {
|
|
1534
|
+
"allow_failure": true,
|
|
1535
|
+
"artifacts": {
|
|
1536
|
+
"paths": [
|
|
1537
|
+
"__sbom.json",
|
|
1538
|
+
],
|
|
1539
|
+
},
|
|
1540
|
+
"cache": undefined,
|
|
1541
|
+
"environment": undefined,
|
|
1542
|
+
"image": "aquasec/trivy:0.38.3",
|
|
1543
|
+
"interruptible": true,
|
|
1544
|
+
"needs": [
|
|
1545
|
+
"www ๐ Deploy | stage ",
|
|
1546
|
+
],
|
|
1547
|
+
"retry": {
|
|
1548
|
+
"max": 2,
|
|
1549
|
+
"when": [
|
|
1550
|
+
"runner_system_failure",
|
|
1551
|
+
"stuck_or_timeout_failure",
|
|
1552
|
+
],
|
|
1553
|
+
},
|
|
1554
|
+
"script": [
|
|
1555
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
|
|
1556
|
+
],
|
|
1557
|
+
"stage": "verify",
|
|
1558
|
+
"variables": {},
|
|
1559
|
+
},
|
|
1364
1560
|
},
|
|
1365
1561
|
"stages": [
|
|
1366
1562
|
"setup",
|