@catladder/pipeline 1.97.2 โ 1.98.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/build/types.d.ts +10 -0
- package/dist/bundles/catladder-gitlab/index.js +1 -1
- package/dist/constants.js +1 -1
- package/dist/pipeline/createJobsForComponent.js +3 -1
- package/dist/tsconfig.tsbuildinfo +1 -1
- package/dist/verify/reporting.d.ts +3 -0
- package/dist/verify/reporting.js +48 -0
- package/examples/__snapshots__/cloud-run-memory-limit.ts.snap +196 -0
- package/examples/__snapshots__/cloud-run-no-cpu-throttling.ts.snap +196 -0
- package/examples/__snapshots__/cloud-run-non-public.ts.snap +196 -0
- package/examples/__snapshots__/cloud-run-with-sql-reuse-db.ts.snap +392 -0
- package/examples/__snapshots__/cloud-run-with-sql.ts.snap +392 -0
- package/examples/__snapshots__/custom-build-job-with-tests.ts.snap +196 -0
- package/examples/__snapshots__/custom-build-job.ts.snap +196 -0
- package/examples/__snapshots__/custom-deploy.ts.snap +196 -0
- package/examples/__snapshots__/custom-sbom-java.ts.snap +1386 -0
- package/examples/__snapshots__/kubernetes-application-customization.ts.snap +196 -0
- package/examples/__snapshots__/kubernetes-with-cloud-sql-legacy.ts.snap +196 -0
- package/examples/__snapshots__/kubernetes-with-cloud-sql.ts.snap +196 -0
- package/examples/__snapshots__/kubernetes-with-jobs.ts.snap +392 -0
- package/examples/__snapshots__/rails-k8s-with-worker.ts.snap +196 -0
- package/examples/__snapshots__/wait-for-other-deploy.ts.snap +392 -0
- package/examples/custom-sbom-java.ts +34 -0
- package/package.json +1 -1
- package/src/build/types.ts +13 -0
- package/src/pipeline/createJobsForComponent.ts +3 -1
- package/src/verify/reporting.ts +69 -0
|
@@ -245,6 +245,55 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","HOST","ROOT_URL","HOST_CA
|
|
|
245
245
|
"KUBERNETES_MEMORY_REQUEST": "200Mi",
|
|
246
246
|
},
|
|
247
247
|
},
|
|
248
|
+
"www ๐งพ sbom upload | dev ": {
|
|
249
|
+
"allow_failure": true,
|
|
250
|
+
"cache": undefined,
|
|
251
|
+
"environment": undefined,
|
|
252
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
253
|
+
"interruptible": true,
|
|
254
|
+
"needs": [
|
|
255
|
+
"www ๐งพ sbom | dev ",
|
|
256
|
+
],
|
|
257
|
+
"retry": {
|
|
258
|
+
"max": 2,
|
|
259
|
+
"when": [
|
|
260
|
+
"runner_system_failure",
|
|
261
|
+
"stuck_or_timeout_failure",
|
|
262
|
+
],
|
|
263
|
+
},
|
|
264
|
+
"script": [
|
|
265
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/www" "dev" "__sbom.json" vex.json",
|
|
266
|
+
],
|
|
267
|
+
"stage": "verify",
|
|
268
|
+
"variables": {},
|
|
269
|
+
},
|
|
270
|
+
"www ๐งพ sbom | dev ": {
|
|
271
|
+
"allow_failure": true,
|
|
272
|
+
"artifacts": {
|
|
273
|
+
"paths": [
|
|
274
|
+
"__sbom.json",
|
|
275
|
+
],
|
|
276
|
+
},
|
|
277
|
+
"cache": undefined,
|
|
278
|
+
"environment": undefined,
|
|
279
|
+
"image": "aquasec/trivy:0.38.3",
|
|
280
|
+
"interruptible": true,
|
|
281
|
+
"needs": [
|
|
282
|
+
"www ๐ Deploy | dev ",
|
|
283
|
+
],
|
|
284
|
+
"retry": {
|
|
285
|
+
"max": 2,
|
|
286
|
+
"when": [
|
|
287
|
+
"runner_system_failure",
|
|
288
|
+
"stuck_or_timeout_failure",
|
|
289
|
+
],
|
|
290
|
+
},
|
|
291
|
+
"script": [
|
|
292
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
|
|
293
|
+
],
|
|
294
|
+
"stage": "verify",
|
|
295
|
+
"variables": {},
|
|
296
|
+
},
|
|
248
297
|
},
|
|
249
298
|
"stages": [
|
|
250
299
|
"setup",
|
|
@@ -557,6 +606,55 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","HOST","ROOT_URL","HOST_CA
|
|
|
557
606
|
"KUBERNETES_MEMORY_REQUEST": "200Mi",
|
|
558
607
|
},
|
|
559
608
|
},
|
|
609
|
+
"www ๐งพ sbom upload | review ": {
|
|
610
|
+
"allow_failure": true,
|
|
611
|
+
"cache": undefined,
|
|
612
|
+
"environment": undefined,
|
|
613
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
614
|
+
"interruptible": true,
|
|
615
|
+
"needs": [
|
|
616
|
+
"www ๐งพ sbom | review ",
|
|
617
|
+
],
|
|
618
|
+
"retry": {
|
|
619
|
+
"max": 2,
|
|
620
|
+
"when": [
|
|
621
|
+
"runner_system_failure",
|
|
622
|
+
"stuck_or_timeout_failure",
|
|
623
|
+
],
|
|
624
|
+
},
|
|
625
|
+
"script": [
|
|
626
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/www" "review" "__sbom.json" vex.json",
|
|
627
|
+
],
|
|
628
|
+
"stage": "verify",
|
|
629
|
+
"variables": {},
|
|
630
|
+
},
|
|
631
|
+
"www ๐งพ sbom | review ": {
|
|
632
|
+
"allow_failure": true,
|
|
633
|
+
"artifacts": {
|
|
634
|
+
"paths": [
|
|
635
|
+
"__sbom.json",
|
|
636
|
+
],
|
|
637
|
+
},
|
|
638
|
+
"cache": undefined,
|
|
639
|
+
"environment": undefined,
|
|
640
|
+
"image": "aquasec/trivy:0.38.3",
|
|
641
|
+
"interruptible": true,
|
|
642
|
+
"needs": [
|
|
643
|
+
"www ๐ Deploy | review ",
|
|
644
|
+
],
|
|
645
|
+
"retry": {
|
|
646
|
+
"max": 2,
|
|
647
|
+
"when": [
|
|
648
|
+
"runner_system_failure",
|
|
649
|
+
"stuck_or_timeout_failure",
|
|
650
|
+
],
|
|
651
|
+
},
|
|
652
|
+
"script": [
|
|
653
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
|
|
654
|
+
],
|
|
655
|
+
"stage": "verify",
|
|
656
|
+
"variables": {},
|
|
657
|
+
},
|
|
560
658
|
},
|
|
561
659
|
"stages": [
|
|
562
660
|
"setup",
|
|
@@ -1109,6 +1207,104 @@ _ALL_ENV_VAR_KEYS: '["ENV_SHORT","APP_DIR","ENV_TYPE","HOST","ROOT_URL","HOST_CA
|
|
|
1109
1207
|
"KUBERNETES_MEMORY_REQUEST": "200Mi",
|
|
1110
1208
|
},
|
|
1111
1209
|
},
|
|
1210
|
+
"www ๐งพ sbom upload | prod ": {
|
|
1211
|
+
"allow_failure": true,
|
|
1212
|
+
"cache": undefined,
|
|
1213
|
+
"environment": undefined,
|
|
1214
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
1215
|
+
"interruptible": true,
|
|
1216
|
+
"needs": [
|
|
1217
|
+
"www ๐งพ sbom | prod ",
|
|
1218
|
+
],
|
|
1219
|
+
"retry": {
|
|
1220
|
+
"max": 2,
|
|
1221
|
+
"when": [
|
|
1222
|
+
"runner_system_failure",
|
|
1223
|
+
"stuck_or_timeout_failure",
|
|
1224
|
+
],
|
|
1225
|
+
},
|
|
1226
|
+
"script": [
|
|
1227
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/www" "prod" "__sbom.json" vex.json",
|
|
1228
|
+
],
|
|
1229
|
+
"stage": "verify",
|
|
1230
|
+
"variables": {},
|
|
1231
|
+
},
|
|
1232
|
+
"www ๐งพ sbom upload | stage ": {
|
|
1233
|
+
"allow_failure": true,
|
|
1234
|
+
"cache": undefined,
|
|
1235
|
+
"environment": undefined,
|
|
1236
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
1237
|
+
"interruptible": true,
|
|
1238
|
+
"needs": [
|
|
1239
|
+
"www ๐งพ sbom | stage ",
|
|
1240
|
+
],
|
|
1241
|
+
"retry": {
|
|
1242
|
+
"max": 2,
|
|
1243
|
+
"when": [
|
|
1244
|
+
"runner_system_failure",
|
|
1245
|
+
"stuck_or_timeout_failure",
|
|
1246
|
+
],
|
|
1247
|
+
},
|
|
1248
|
+
"script": [
|
|
1249
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/www" "stage" "__sbom.json" vex.json",
|
|
1250
|
+
],
|
|
1251
|
+
"stage": "verify",
|
|
1252
|
+
"variables": {},
|
|
1253
|
+
},
|
|
1254
|
+
"www ๐งพ sbom | prod ": {
|
|
1255
|
+
"allow_failure": true,
|
|
1256
|
+
"artifacts": {
|
|
1257
|
+
"paths": [
|
|
1258
|
+
"__sbom.json",
|
|
1259
|
+
],
|
|
1260
|
+
},
|
|
1261
|
+
"cache": undefined,
|
|
1262
|
+
"environment": undefined,
|
|
1263
|
+
"image": "aquasec/trivy:0.38.3",
|
|
1264
|
+
"interruptible": true,
|
|
1265
|
+
"needs": [
|
|
1266
|
+
"www ๐ Deploy | prod ",
|
|
1267
|
+
],
|
|
1268
|
+
"retry": {
|
|
1269
|
+
"max": 2,
|
|
1270
|
+
"when": [
|
|
1271
|
+
"runner_system_failure",
|
|
1272
|
+
"stuck_or_timeout_failure",
|
|
1273
|
+
],
|
|
1274
|
+
},
|
|
1275
|
+
"script": [
|
|
1276
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
|
|
1277
|
+
],
|
|
1278
|
+
"stage": "verify",
|
|
1279
|
+
"variables": {},
|
|
1280
|
+
},
|
|
1281
|
+
"www ๐งพ sbom | stage ": {
|
|
1282
|
+
"allow_failure": true,
|
|
1283
|
+
"artifacts": {
|
|
1284
|
+
"paths": [
|
|
1285
|
+
"__sbom.json",
|
|
1286
|
+
],
|
|
1287
|
+
},
|
|
1288
|
+
"cache": undefined,
|
|
1289
|
+
"environment": undefined,
|
|
1290
|
+
"image": "aquasec/trivy:0.38.3",
|
|
1291
|
+
"interruptible": true,
|
|
1292
|
+
"needs": [
|
|
1293
|
+
"www ๐ Deploy | stage ",
|
|
1294
|
+
],
|
|
1295
|
+
"retry": {
|
|
1296
|
+
"max": 2,
|
|
1297
|
+
"when": [
|
|
1298
|
+
"runner_system_failure",
|
|
1299
|
+
"stuck_or_timeout_failure",
|
|
1300
|
+
],
|
|
1301
|
+
},
|
|
1302
|
+
"script": [
|
|
1303
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
|
|
1304
|
+
],
|
|
1305
|
+
"stage": "verify",
|
|
1306
|
+
"variables": {},
|
|
1307
|
+
},
|
|
1112
1308
|
},
|
|
1113
1309
|
"stages": [
|
|
1114
1310
|
"setup",
|
|
@@ -357,6 +357,55 @@ COPY --chown=node:node www/yarn.lock /app/www/yarn.lock",
|
|
|
357
357
|
"KUBERNETES_MEMORY_REQUEST": "2Gi",
|
|
358
358
|
},
|
|
359
359
|
},
|
|
360
|
+
"www ๐งพ sbom upload | dev ": {
|
|
361
|
+
"allow_failure": true,
|
|
362
|
+
"cache": undefined,
|
|
363
|
+
"environment": undefined,
|
|
364
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
365
|
+
"interruptible": true,
|
|
366
|
+
"needs": [
|
|
367
|
+
"www ๐งพ sbom | dev ",
|
|
368
|
+
],
|
|
369
|
+
"retry": {
|
|
370
|
+
"max": 2,
|
|
371
|
+
"when": [
|
|
372
|
+
"runner_system_failure",
|
|
373
|
+
"stuck_or_timeout_failure",
|
|
374
|
+
],
|
|
375
|
+
},
|
|
376
|
+
"script": [
|
|
377
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/www" "dev" "__sbom.json" vex.json",
|
|
378
|
+
],
|
|
379
|
+
"stage": "verify",
|
|
380
|
+
"variables": {},
|
|
381
|
+
},
|
|
382
|
+
"www ๐งพ sbom | dev ": {
|
|
383
|
+
"allow_failure": true,
|
|
384
|
+
"artifacts": {
|
|
385
|
+
"paths": [
|
|
386
|
+
"__sbom.json",
|
|
387
|
+
],
|
|
388
|
+
},
|
|
389
|
+
"cache": undefined,
|
|
390
|
+
"environment": undefined,
|
|
391
|
+
"image": "aquasec/trivy:0.38.3",
|
|
392
|
+
"interruptible": true,
|
|
393
|
+
"needs": [
|
|
394
|
+
"www ๐ Deploy | dev ",
|
|
395
|
+
],
|
|
396
|
+
"retry": {
|
|
397
|
+
"max": 2,
|
|
398
|
+
"when": [
|
|
399
|
+
"runner_system_failure",
|
|
400
|
+
"stuck_or_timeout_failure",
|
|
401
|
+
],
|
|
402
|
+
},
|
|
403
|
+
"script": [
|
|
404
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
|
|
405
|
+
],
|
|
406
|
+
"stage": "verify",
|
|
407
|
+
"variables": {},
|
|
408
|
+
},
|
|
360
409
|
},
|
|
361
410
|
"stages": [
|
|
362
411
|
"setup",
|
|
@@ -781,6 +830,55 @@ COPY --chown=node:node www/yarn.lock /app/www/yarn.lock",
|
|
|
781
830
|
"KUBERNETES_MEMORY_REQUEST": "2Gi",
|
|
782
831
|
},
|
|
783
832
|
},
|
|
833
|
+
"www ๐งพ sbom upload | review ": {
|
|
834
|
+
"allow_failure": true,
|
|
835
|
+
"cache": undefined,
|
|
836
|
+
"environment": undefined,
|
|
837
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
838
|
+
"interruptible": true,
|
|
839
|
+
"needs": [
|
|
840
|
+
"www ๐งพ sbom | review ",
|
|
841
|
+
],
|
|
842
|
+
"retry": {
|
|
843
|
+
"max": 2,
|
|
844
|
+
"when": [
|
|
845
|
+
"runner_system_failure",
|
|
846
|
+
"stuck_or_timeout_failure",
|
|
847
|
+
],
|
|
848
|
+
},
|
|
849
|
+
"script": [
|
|
850
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/www" "review" "__sbom.json" vex.json",
|
|
851
|
+
],
|
|
852
|
+
"stage": "verify",
|
|
853
|
+
"variables": {},
|
|
854
|
+
},
|
|
855
|
+
"www ๐งพ sbom | review ": {
|
|
856
|
+
"allow_failure": true,
|
|
857
|
+
"artifacts": {
|
|
858
|
+
"paths": [
|
|
859
|
+
"__sbom.json",
|
|
860
|
+
],
|
|
861
|
+
},
|
|
862
|
+
"cache": undefined,
|
|
863
|
+
"environment": undefined,
|
|
864
|
+
"image": "aquasec/trivy:0.38.3",
|
|
865
|
+
"interruptible": true,
|
|
866
|
+
"needs": [
|
|
867
|
+
"www ๐ Deploy | review ",
|
|
868
|
+
],
|
|
869
|
+
"retry": {
|
|
870
|
+
"max": 2,
|
|
871
|
+
"when": [
|
|
872
|
+
"runner_system_failure",
|
|
873
|
+
"stuck_or_timeout_failure",
|
|
874
|
+
],
|
|
875
|
+
},
|
|
876
|
+
"script": [
|
|
877
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
|
|
878
|
+
],
|
|
879
|
+
"stage": "verify",
|
|
880
|
+
"variables": {},
|
|
881
|
+
},
|
|
784
882
|
},
|
|
785
883
|
"stages": [
|
|
786
884
|
"setup",
|
|
@@ -1311,6 +1409,104 @@ COPY --chown=node:node www/yarn.lock /app/www/yarn.lock",
|
|
|
1311
1409
|
"KUBERNETES_MEMORY_REQUEST": "200Mi",
|
|
1312
1410
|
},
|
|
1313
1411
|
},
|
|
1412
|
+
"www ๐งพ sbom upload | prod ": {
|
|
1413
|
+
"allow_failure": true,
|
|
1414
|
+
"cache": undefined,
|
|
1415
|
+
"environment": undefined,
|
|
1416
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
1417
|
+
"interruptible": true,
|
|
1418
|
+
"needs": [
|
|
1419
|
+
"www ๐งพ sbom | prod ",
|
|
1420
|
+
],
|
|
1421
|
+
"retry": {
|
|
1422
|
+
"max": 2,
|
|
1423
|
+
"when": [
|
|
1424
|
+
"runner_system_failure",
|
|
1425
|
+
"stuck_or_timeout_failure",
|
|
1426
|
+
],
|
|
1427
|
+
},
|
|
1428
|
+
"script": [
|
|
1429
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/www" "prod" "__sbom.json" vex.json",
|
|
1430
|
+
],
|
|
1431
|
+
"stage": "verify",
|
|
1432
|
+
"variables": {},
|
|
1433
|
+
},
|
|
1434
|
+
"www ๐งพ sbom upload | stage ": {
|
|
1435
|
+
"allow_failure": true,
|
|
1436
|
+
"cache": undefined,
|
|
1437
|
+
"environment": undefined,
|
|
1438
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
1439
|
+
"interruptible": true,
|
|
1440
|
+
"needs": [
|
|
1441
|
+
"www ๐งพ sbom | stage ",
|
|
1442
|
+
],
|
|
1443
|
+
"retry": {
|
|
1444
|
+
"max": 2,
|
|
1445
|
+
"when": [
|
|
1446
|
+
"runner_system_failure",
|
|
1447
|
+
"stuck_or_timeout_failure",
|
|
1448
|
+
],
|
|
1449
|
+
},
|
|
1450
|
+
"script": [
|
|
1451
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/www" "stage" "__sbom.json" vex.json",
|
|
1452
|
+
],
|
|
1453
|
+
"stage": "verify",
|
|
1454
|
+
"variables": {},
|
|
1455
|
+
},
|
|
1456
|
+
"www ๐งพ sbom | prod ": {
|
|
1457
|
+
"allow_failure": true,
|
|
1458
|
+
"artifacts": {
|
|
1459
|
+
"paths": [
|
|
1460
|
+
"__sbom.json",
|
|
1461
|
+
],
|
|
1462
|
+
},
|
|
1463
|
+
"cache": undefined,
|
|
1464
|
+
"environment": undefined,
|
|
1465
|
+
"image": "aquasec/trivy:0.38.3",
|
|
1466
|
+
"interruptible": true,
|
|
1467
|
+
"needs": [
|
|
1468
|
+
"www ๐ Deploy | prod ",
|
|
1469
|
+
],
|
|
1470
|
+
"retry": {
|
|
1471
|
+
"max": 2,
|
|
1472
|
+
"when": [
|
|
1473
|
+
"runner_system_failure",
|
|
1474
|
+
"stuck_or_timeout_failure",
|
|
1475
|
+
],
|
|
1476
|
+
},
|
|
1477
|
+
"script": [
|
|
1478
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
|
|
1479
|
+
],
|
|
1480
|
+
"stage": "verify",
|
|
1481
|
+
"variables": {},
|
|
1482
|
+
},
|
|
1483
|
+
"www ๐งพ sbom | stage ": {
|
|
1484
|
+
"allow_failure": true,
|
|
1485
|
+
"artifacts": {
|
|
1486
|
+
"paths": [
|
|
1487
|
+
"__sbom.json",
|
|
1488
|
+
],
|
|
1489
|
+
},
|
|
1490
|
+
"cache": undefined,
|
|
1491
|
+
"environment": undefined,
|
|
1492
|
+
"image": "aquasec/trivy:0.38.3",
|
|
1493
|
+
"interruptible": true,
|
|
1494
|
+
"needs": [
|
|
1495
|
+
"www ๐ Deploy | stage ",
|
|
1496
|
+
],
|
|
1497
|
+
"retry": {
|
|
1498
|
+
"max": 2,
|
|
1499
|
+
"when": [
|
|
1500
|
+
"runner_system_failure",
|
|
1501
|
+
"stuck_or_timeout_failure",
|
|
1502
|
+
],
|
|
1503
|
+
},
|
|
1504
|
+
"script": [
|
|
1505
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
|
|
1506
|
+
],
|
|
1507
|
+
"stage": "verify",
|
|
1508
|
+
"variables": {},
|
|
1509
|
+
},
|
|
1314
1510
|
},
|
|
1315
1511
|
"stages": [
|
|
1316
1512
|
"setup",
|