@catladder/pipeline 1.97.2 โ 1.98.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/build/types.d.ts +10 -0
- package/dist/bundles/catladder-gitlab/index.js +1 -1
- package/dist/constants.js +1 -1
- package/dist/pipeline/createJobsForComponent.js +3 -1
- package/dist/tsconfig.tsbuildinfo +1 -1
- package/dist/verify/reporting.d.ts +3 -0
- package/dist/verify/reporting.js +48 -0
- package/examples/__snapshots__/cloud-run-memory-limit.ts.snap +196 -0
- package/examples/__snapshots__/cloud-run-no-cpu-throttling.ts.snap +196 -0
- package/examples/__snapshots__/cloud-run-non-public.ts.snap +196 -0
- package/examples/__snapshots__/cloud-run-with-sql-reuse-db.ts.snap +392 -0
- package/examples/__snapshots__/cloud-run-with-sql.ts.snap +392 -0
- package/examples/__snapshots__/custom-build-job-with-tests.ts.snap +196 -0
- package/examples/__snapshots__/custom-build-job.ts.snap +196 -0
- package/examples/__snapshots__/custom-deploy.ts.snap +196 -0
- package/examples/__snapshots__/custom-sbom-java.ts.snap +1386 -0
- package/examples/__snapshots__/kubernetes-application-customization.ts.snap +196 -0
- package/examples/__snapshots__/kubernetes-with-cloud-sql-legacy.ts.snap +196 -0
- package/examples/__snapshots__/kubernetes-with-cloud-sql.ts.snap +196 -0
- package/examples/__snapshots__/kubernetes-with-jobs.ts.snap +392 -0
- package/examples/__snapshots__/rails-k8s-with-worker.ts.snap +196 -0
- package/examples/__snapshots__/wait-for-other-deploy.ts.snap +392 -0
- package/examples/custom-sbom-java.ts +34 -0
- package/package.json +1 -1
- package/src/build/types.ts +13 -0
- package/src/pipeline/createJobsForComponent.ts +3 -1
- package/src/verify/reporting.ts +69 -0
|
@@ -581,6 +581,55 @@ application:
|
|
|
581
581
|
"KUBERNETES_MEMORY_REQUEST": "2Gi",
|
|
582
582
|
},
|
|
583
583
|
},
|
|
584
|
+
"api ๐งพ sbom upload | dev ": {
|
|
585
|
+
"allow_failure": true,
|
|
586
|
+
"cache": undefined,
|
|
587
|
+
"environment": undefined,
|
|
588
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
589
|
+
"interruptible": true,
|
|
590
|
+
"needs": [
|
|
591
|
+
"api ๐งพ sbom | dev ",
|
|
592
|
+
],
|
|
593
|
+
"retry": {
|
|
594
|
+
"max": 2,
|
|
595
|
+
"when": [
|
|
596
|
+
"runner_system_failure",
|
|
597
|
+
"stuck_or_timeout_failure",
|
|
598
|
+
],
|
|
599
|
+
},
|
|
600
|
+
"script": [
|
|
601
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/api" "dev" "__sbom.json" vex.json",
|
|
602
|
+
],
|
|
603
|
+
"stage": "verify",
|
|
604
|
+
"variables": {},
|
|
605
|
+
},
|
|
606
|
+
"api ๐งพ sbom | dev ": {
|
|
607
|
+
"allow_failure": true,
|
|
608
|
+
"artifacts": {
|
|
609
|
+
"paths": [
|
|
610
|
+
"__sbom.json",
|
|
611
|
+
],
|
|
612
|
+
},
|
|
613
|
+
"cache": undefined,
|
|
614
|
+
"environment": undefined,
|
|
615
|
+
"image": "aquasec/trivy:0.38.3",
|
|
616
|
+
"interruptible": true,
|
|
617
|
+
"needs": [
|
|
618
|
+
"api ๐ Deploy | dev ",
|
|
619
|
+
],
|
|
620
|
+
"retry": {
|
|
621
|
+
"max": 2,
|
|
622
|
+
"when": [
|
|
623
|
+
"runner_system_failure",
|
|
624
|
+
"stuck_or_timeout_failure",
|
|
625
|
+
],
|
|
626
|
+
},
|
|
627
|
+
"script": [
|
|
628
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
|
|
629
|
+
],
|
|
630
|
+
"stage": "verify",
|
|
631
|
+
"variables": {},
|
|
632
|
+
},
|
|
584
633
|
},
|
|
585
634
|
"stages": [
|
|
586
635
|
"setup",
|
|
@@ -1229,6 +1278,55 @@ application:
|
|
|
1229
1278
|
"KUBERNETES_MEMORY_REQUEST": "2Gi",
|
|
1230
1279
|
},
|
|
1231
1280
|
},
|
|
1281
|
+
"api ๐งพ sbom upload | review ": {
|
|
1282
|
+
"allow_failure": true,
|
|
1283
|
+
"cache": undefined,
|
|
1284
|
+
"environment": undefined,
|
|
1285
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
1286
|
+
"interruptible": true,
|
|
1287
|
+
"needs": [
|
|
1288
|
+
"api ๐งพ sbom | review ",
|
|
1289
|
+
],
|
|
1290
|
+
"retry": {
|
|
1291
|
+
"max": 2,
|
|
1292
|
+
"when": [
|
|
1293
|
+
"runner_system_failure",
|
|
1294
|
+
"stuck_or_timeout_failure",
|
|
1295
|
+
],
|
|
1296
|
+
},
|
|
1297
|
+
"script": [
|
|
1298
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/api" "review" "__sbom.json" vex.json",
|
|
1299
|
+
],
|
|
1300
|
+
"stage": "verify",
|
|
1301
|
+
"variables": {},
|
|
1302
|
+
},
|
|
1303
|
+
"api ๐งพ sbom | review ": {
|
|
1304
|
+
"allow_failure": true,
|
|
1305
|
+
"artifacts": {
|
|
1306
|
+
"paths": [
|
|
1307
|
+
"__sbom.json",
|
|
1308
|
+
],
|
|
1309
|
+
},
|
|
1310
|
+
"cache": undefined,
|
|
1311
|
+
"environment": undefined,
|
|
1312
|
+
"image": "aquasec/trivy:0.38.3",
|
|
1313
|
+
"interruptible": true,
|
|
1314
|
+
"needs": [
|
|
1315
|
+
"api ๐ Deploy | review ",
|
|
1316
|
+
],
|
|
1317
|
+
"retry": {
|
|
1318
|
+
"max": 2,
|
|
1319
|
+
"when": [
|
|
1320
|
+
"runner_system_failure",
|
|
1321
|
+
"stuck_or_timeout_failure",
|
|
1322
|
+
],
|
|
1323
|
+
},
|
|
1324
|
+
"script": [
|
|
1325
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
|
|
1326
|
+
],
|
|
1327
|
+
"stage": "verify",
|
|
1328
|
+
"variables": {},
|
|
1329
|
+
},
|
|
1232
1330
|
},
|
|
1233
1331
|
"stages": [
|
|
1234
1332
|
"setup",
|
|
@@ -2207,6 +2305,104 @@ application:
|
|
|
2207
2305
|
"_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","HOST","ROOT_URL","KUBE_NAMESPACE","KUBE_APP_NAME","KUBE_APP_NAME_PREFIX","HOST_CANONICAL"]",
|
|
2208
2306
|
},
|
|
2209
2307
|
},
|
|
2308
|
+
"api ๐งพ sbom upload | prod ": {
|
|
2309
|
+
"allow_failure": true,
|
|
2310
|
+
"cache": undefined,
|
|
2311
|
+
"environment": undefined,
|
|
2312
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
2313
|
+
"interruptible": true,
|
|
2314
|
+
"needs": [
|
|
2315
|
+
"api ๐งพ sbom | prod ",
|
|
2316
|
+
],
|
|
2317
|
+
"retry": {
|
|
2318
|
+
"max": 2,
|
|
2319
|
+
"when": [
|
|
2320
|
+
"runner_system_failure",
|
|
2321
|
+
"stuck_or_timeout_failure",
|
|
2322
|
+
],
|
|
2323
|
+
},
|
|
2324
|
+
"script": [
|
|
2325
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/api" "prod" "__sbom.json" vex.json",
|
|
2326
|
+
],
|
|
2327
|
+
"stage": "verify",
|
|
2328
|
+
"variables": {},
|
|
2329
|
+
},
|
|
2330
|
+
"api ๐งพ sbom upload | stage ": {
|
|
2331
|
+
"allow_failure": true,
|
|
2332
|
+
"cache": undefined,
|
|
2333
|
+
"environment": undefined,
|
|
2334
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
2335
|
+
"interruptible": true,
|
|
2336
|
+
"needs": [
|
|
2337
|
+
"api ๐งพ sbom | stage ",
|
|
2338
|
+
],
|
|
2339
|
+
"retry": {
|
|
2340
|
+
"max": 2,
|
|
2341
|
+
"when": [
|
|
2342
|
+
"runner_system_failure",
|
|
2343
|
+
"stuck_or_timeout_failure",
|
|
2344
|
+
],
|
|
2345
|
+
},
|
|
2346
|
+
"script": [
|
|
2347
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/api" "stage" "__sbom.json" vex.json",
|
|
2348
|
+
],
|
|
2349
|
+
"stage": "verify",
|
|
2350
|
+
"variables": {},
|
|
2351
|
+
},
|
|
2352
|
+
"api ๐งพ sbom | prod ": {
|
|
2353
|
+
"allow_failure": true,
|
|
2354
|
+
"artifacts": {
|
|
2355
|
+
"paths": [
|
|
2356
|
+
"__sbom.json",
|
|
2357
|
+
],
|
|
2358
|
+
},
|
|
2359
|
+
"cache": undefined,
|
|
2360
|
+
"environment": undefined,
|
|
2361
|
+
"image": "aquasec/trivy:0.38.3",
|
|
2362
|
+
"interruptible": true,
|
|
2363
|
+
"needs": [
|
|
2364
|
+
"api ๐ Deploy | prod ",
|
|
2365
|
+
],
|
|
2366
|
+
"retry": {
|
|
2367
|
+
"max": 2,
|
|
2368
|
+
"when": [
|
|
2369
|
+
"runner_system_failure",
|
|
2370
|
+
"stuck_or_timeout_failure",
|
|
2371
|
+
],
|
|
2372
|
+
},
|
|
2373
|
+
"script": [
|
|
2374
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
|
|
2375
|
+
],
|
|
2376
|
+
"stage": "verify",
|
|
2377
|
+
"variables": {},
|
|
2378
|
+
},
|
|
2379
|
+
"api ๐งพ sbom | stage ": {
|
|
2380
|
+
"allow_failure": true,
|
|
2381
|
+
"artifacts": {
|
|
2382
|
+
"paths": [
|
|
2383
|
+
"__sbom.json",
|
|
2384
|
+
],
|
|
2385
|
+
},
|
|
2386
|
+
"cache": undefined,
|
|
2387
|
+
"environment": undefined,
|
|
2388
|
+
"image": "aquasec/trivy:0.38.3",
|
|
2389
|
+
"interruptible": true,
|
|
2390
|
+
"needs": [
|
|
2391
|
+
"api ๐ Deploy | stage ",
|
|
2392
|
+
],
|
|
2393
|
+
"retry": {
|
|
2394
|
+
"max": 2,
|
|
2395
|
+
"when": [
|
|
2396
|
+
"runner_system_failure",
|
|
2397
|
+
"stuck_or_timeout_failure",
|
|
2398
|
+
],
|
|
2399
|
+
},
|
|
2400
|
+
"script": [
|
|
2401
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
|
|
2402
|
+
],
|
|
2403
|
+
"stage": "verify",
|
|
2404
|
+
"variables": {},
|
|
2405
|
+
},
|
|
2210
2406
|
},
|
|
2211
2407
|
"stages": [
|
|
2212
2408
|
"setup",
|
|
@@ -571,6 +571,55 @@ cloudsql:
|
|
|
571
571
|
"KUBERNETES_MEMORY_REQUEST": "2Gi",
|
|
572
572
|
},
|
|
573
573
|
},
|
|
574
|
+
"api ๐งพ sbom upload | dev ": {
|
|
575
|
+
"allow_failure": true,
|
|
576
|
+
"cache": undefined,
|
|
577
|
+
"environment": undefined,
|
|
578
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
579
|
+
"interruptible": true,
|
|
580
|
+
"needs": [
|
|
581
|
+
"api ๐งพ sbom | dev ",
|
|
582
|
+
],
|
|
583
|
+
"retry": {
|
|
584
|
+
"max": 2,
|
|
585
|
+
"when": [
|
|
586
|
+
"runner_system_failure",
|
|
587
|
+
"stuck_or_timeout_failure",
|
|
588
|
+
],
|
|
589
|
+
},
|
|
590
|
+
"script": [
|
|
591
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/api" "dev" "__sbom.json" vex.json",
|
|
592
|
+
],
|
|
593
|
+
"stage": "verify",
|
|
594
|
+
"variables": {},
|
|
595
|
+
},
|
|
596
|
+
"api ๐งพ sbom | dev ": {
|
|
597
|
+
"allow_failure": true,
|
|
598
|
+
"artifacts": {
|
|
599
|
+
"paths": [
|
|
600
|
+
"__sbom.json",
|
|
601
|
+
],
|
|
602
|
+
},
|
|
603
|
+
"cache": undefined,
|
|
604
|
+
"environment": undefined,
|
|
605
|
+
"image": "aquasec/trivy:0.38.3",
|
|
606
|
+
"interruptible": true,
|
|
607
|
+
"needs": [
|
|
608
|
+
"api ๐ Deploy | dev ",
|
|
609
|
+
],
|
|
610
|
+
"retry": {
|
|
611
|
+
"max": 2,
|
|
612
|
+
"when": [
|
|
613
|
+
"runner_system_failure",
|
|
614
|
+
"stuck_or_timeout_failure",
|
|
615
|
+
],
|
|
616
|
+
},
|
|
617
|
+
"script": [
|
|
618
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
|
|
619
|
+
],
|
|
620
|
+
"stage": "verify",
|
|
621
|
+
"variables": {},
|
|
622
|
+
},
|
|
574
623
|
},
|
|
575
624
|
"stages": [
|
|
576
625
|
"setup",
|
|
@@ -1209,6 +1258,55 @@ cloudsql:
|
|
|
1209
1258
|
"KUBERNETES_MEMORY_REQUEST": "2Gi",
|
|
1210
1259
|
},
|
|
1211
1260
|
},
|
|
1261
|
+
"api ๐งพ sbom upload | review ": {
|
|
1262
|
+
"allow_failure": true,
|
|
1263
|
+
"cache": undefined,
|
|
1264
|
+
"environment": undefined,
|
|
1265
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
1266
|
+
"interruptible": true,
|
|
1267
|
+
"needs": [
|
|
1268
|
+
"api ๐งพ sbom | review ",
|
|
1269
|
+
],
|
|
1270
|
+
"retry": {
|
|
1271
|
+
"max": 2,
|
|
1272
|
+
"when": [
|
|
1273
|
+
"runner_system_failure",
|
|
1274
|
+
"stuck_or_timeout_failure",
|
|
1275
|
+
],
|
|
1276
|
+
},
|
|
1277
|
+
"script": [
|
|
1278
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/api" "review" "__sbom.json" vex.json",
|
|
1279
|
+
],
|
|
1280
|
+
"stage": "verify",
|
|
1281
|
+
"variables": {},
|
|
1282
|
+
},
|
|
1283
|
+
"api ๐งพ sbom | review ": {
|
|
1284
|
+
"allow_failure": true,
|
|
1285
|
+
"artifacts": {
|
|
1286
|
+
"paths": [
|
|
1287
|
+
"__sbom.json",
|
|
1288
|
+
],
|
|
1289
|
+
},
|
|
1290
|
+
"cache": undefined,
|
|
1291
|
+
"environment": undefined,
|
|
1292
|
+
"image": "aquasec/trivy:0.38.3",
|
|
1293
|
+
"interruptible": true,
|
|
1294
|
+
"needs": [
|
|
1295
|
+
"api ๐ Deploy | review ",
|
|
1296
|
+
],
|
|
1297
|
+
"retry": {
|
|
1298
|
+
"max": 2,
|
|
1299
|
+
"when": [
|
|
1300
|
+
"runner_system_failure",
|
|
1301
|
+
"stuck_or_timeout_failure",
|
|
1302
|
+
],
|
|
1303
|
+
},
|
|
1304
|
+
"script": [
|
|
1305
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
|
|
1306
|
+
],
|
|
1307
|
+
"stage": "verify",
|
|
1308
|
+
"variables": {},
|
|
1309
|
+
},
|
|
1212
1310
|
},
|
|
1213
1311
|
"stages": [
|
|
1214
1312
|
"setup",
|
|
@@ -2167,6 +2265,104 @@ cloudsql:
|
|
|
2167
2265
|
"cloudsqlProxyCredentials": "$CL_stage_api_cloudsqlProxyCredentials",
|
|
2168
2266
|
},
|
|
2169
2267
|
},
|
|
2268
|
+
"api ๐งพ sbom upload | prod ": {
|
|
2269
|
+
"allow_failure": true,
|
|
2270
|
+
"cache": undefined,
|
|
2271
|
+
"environment": undefined,
|
|
2272
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
2273
|
+
"interruptible": true,
|
|
2274
|
+
"needs": [
|
|
2275
|
+
"api ๐งพ sbom | prod ",
|
|
2276
|
+
],
|
|
2277
|
+
"retry": {
|
|
2278
|
+
"max": 2,
|
|
2279
|
+
"when": [
|
|
2280
|
+
"runner_system_failure",
|
|
2281
|
+
"stuck_or_timeout_failure",
|
|
2282
|
+
],
|
|
2283
|
+
},
|
|
2284
|
+
"script": [
|
|
2285
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/api" "prod" "__sbom.json" vex.json",
|
|
2286
|
+
],
|
|
2287
|
+
"stage": "verify",
|
|
2288
|
+
"variables": {},
|
|
2289
|
+
},
|
|
2290
|
+
"api ๐งพ sbom upload | stage ": {
|
|
2291
|
+
"allow_failure": true,
|
|
2292
|
+
"cache": undefined,
|
|
2293
|
+
"environment": undefined,
|
|
2294
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
2295
|
+
"interruptible": true,
|
|
2296
|
+
"needs": [
|
|
2297
|
+
"api ๐งพ sbom | stage ",
|
|
2298
|
+
],
|
|
2299
|
+
"retry": {
|
|
2300
|
+
"max": 2,
|
|
2301
|
+
"when": [
|
|
2302
|
+
"runner_system_failure",
|
|
2303
|
+
"stuck_or_timeout_failure",
|
|
2304
|
+
],
|
|
2305
|
+
},
|
|
2306
|
+
"script": [
|
|
2307
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/api" "stage" "__sbom.json" vex.json",
|
|
2308
|
+
],
|
|
2309
|
+
"stage": "verify",
|
|
2310
|
+
"variables": {},
|
|
2311
|
+
},
|
|
2312
|
+
"api ๐งพ sbom | prod ": {
|
|
2313
|
+
"allow_failure": true,
|
|
2314
|
+
"artifacts": {
|
|
2315
|
+
"paths": [
|
|
2316
|
+
"__sbom.json",
|
|
2317
|
+
],
|
|
2318
|
+
},
|
|
2319
|
+
"cache": undefined,
|
|
2320
|
+
"environment": undefined,
|
|
2321
|
+
"image": "aquasec/trivy:0.38.3",
|
|
2322
|
+
"interruptible": true,
|
|
2323
|
+
"needs": [
|
|
2324
|
+
"api ๐ Deploy | prod ",
|
|
2325
|
+
],
|
|
2326
|
+
"retry": {
|
|
2327
|
+
"max": 2,
|
|
2328
|
+
"when": [
|
|
2329
|
+
"runner_system_failure",
|
|
2330
|
+
"stuck_or_timeout_failure",
|
|
2331
|
+
],
|
|
2332
|
+
},
|
|
2333
|
+
"script": [
|
|
2334
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
|
|
2335
|
+
],
|
|
2336
|
+
"stage": "verify",
|
|
2337
|
+
"variables": {},
|
|
2338
|
+
},
|
|
2339
|
+
"api ๐งพ sbom | stage ": {
|
|
2340
|
+
"allow_failure": true,
|
|
2341
|
+
"artifacts": {
|
|
2342
|
+
"paths": [
|
|
2343
|
+
"__sbom.json",
|
|
2344
|
+
],
|
|
2345
|
+
},
|
|
2346
|
+
"cache": undefined,
|
|
2347
|
+
"environment": undefined,
|
|
2348
|
+
"image": "aquasec/trivy:0.38.3",
|
|
2349
|
+
"interruptible": true,
|
|
2350
|
+
"needs": [
|
|
2351
|
+
"api ๐ Deploy | stage ",
|
|
2352
|
+
],
|
|
2353
|
+
"retry": {
|
|
2354
|
+
"max": 2,
|
|
2355
|
+
"when": [
|
|
2356
|
+
"runner_system_failure",
|
|
2357
|
+
"stuck_or_timeout_failure",
|
|
2358
|
+
],
|
|
2359
|
+
},
|
|
2360
|
+
"script": [
|
|
2361
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
|
|
2362
|
+
],
|
|
2363
|
+
"stage": "verify",
|
|
2364
|
+
"variables": {},
|
|
2365
|
+
},
|
|
2170
2366
|
},
|
|
2171
2367
|
"stages": [
|
|
2172
2368
|
"setup",
|
|
@@ -574,6 +574,55 @@ cloudsql:
|
|
|
574
574
|
"KUBERNETES_MEMORY_REQUEST": "2Gi",
|
|
575
575
|
},
|
|
576
576
|
},
|
|
577
|
+
"api ๐งพ sbom upload | dev ": {
|
|
578
|
+
"allow_failure": true,
|
|
579
|
+
"cache": undefined,
|
|
580
|
+
"environment": undefined,
|
|
581
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
582
|
+
"interruptible": true,
|
|
583
|
+
"needs": [
|
|
584
|
+
"api ๐งพ sbom | dev ",
|
|
585
|
+
],
|
|
586
|
+
"retry": {
|
|
587
|
+
"max": 2,
|
|
588
|
+
"when": [
|
|
589
|
+
"runner_system_failure",
|
|
590
|
+
"stuck_or_timeout_failure",
|
|
591
|
+
],
|
|
592
|
+
},
|
|
593
|
+
"script": [
|
|
594
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/api" "dev" "__sbom.json" vex.json",
|
|
595
|
+
],
|
|
596
|
+
"stage": "verify",
|
|
597
|
+
"variables": {},
|
|
598
|
+
},
|
|
599
|
+
"api ๐งพ sbom | dev ": {
|
|
600
|
+
"allow_failure": true,
|
|
601
|
+
"artifacts": {
|
|
602
|
+
"paths": [
|
|
603
|
+
"__sbom.json",
|
|
604
|
+
],
|
|
605
|
+
},
|
|
606
|
+
"cache": undefined,
|
|
607
|
+
"environment": undefined,
|
|
608
|
+
"image": "aquasec/trivy:0.38.3",
|
|
609
|
+
"interruptible": true,
|
|
610
|
+
"needs": [
|
|
611
|
+
"api ๐ Deploy | dev ",
|
|
612
|
+
],
|
|
613
|
+
"retry": {
|
|
614
|
+
"max": 2,
|
|
615
|
+
"when": [
|
|
616
|
+
"runner_system_failure",
|
|
617
|
+
"stuck_or_timeout_failure",
|
|
618
|
+
],
|
|
619
|
+
},
|
|
620
|
+
"script": [
|
|
621
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
|
|
622
|
+
],
|
|
623
|
+
"stage": "verify",
|
|
624
|
+
"variables": {},
|
|
625
|
+
},
|
|
577
626
|
},
|
|
578
627
|
"stages": [
|
|
579
628
|
"setup",
|
|
@@ -1215,6 +1264,55 @@ cloudsql:
|
|
|
1215
1264
|
"KUBERNETES_MEMORY_REQUEST": "2Gi",
|
|
1216
1265
|
},
|
|
1217
1266
|
},
|
|
1267
|
+
"api ๐งพ sbom upload | review ": {
|
|
1268
|
+
"allow_failure": true,
|
|
1269
|
+
"cache": undefined,
|
|
1270
|
+
"environment": undefined,
|
|
1271
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
1272
|
+
"interruptible": true,
|
|
1273
|
+
"needs": [
|
|
1274
|
+
"api ๐งพ sbom | review ",
|
|
1275
|
+
],
|
|
1276
|
+
"retry": {
|
|
1277
|
+
"max": 2,
|
|
1278
|
+
"when": [
|
|
1279
|
+
"runner_system_failure",
|
|
1280
|
+
"stuck_or_timeout_failure",
|
|
1281
|
+
],
|
|
1282
|
+
},
|
|
1283
|
+
"script": [
|
|
1284
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/api" "review" "__sbom.json" vex.json",
|
|
1285
|
+
],
|
|
1286
|
+
"stage": "verify",
|
|
1287
|
+
"variables": {},
|
|
1288
|
+
},
|
|
1289
|
+
"api ๐งพ sbom | review ": {
|
|
1290
|
+
"allow_failure": true,
|
|
1291
|
+
"artifacts": {
|
|
1292
|
+
"paths": [
|
|
1293
|
+
"__sbom.json",
|
|
1294
|
+
],
|
|
1295
|
+
},
|
|
1296
|
+
"cache": undefined,
|
|
1297
|
+
"environment": undefined,
|
|
1298
|
+
"image": "aquasec/trivy:0.38.3",
|
|
1299
|
+
"interruptible": true,
|
|
1300
|
+
"needs": [
|
|
1301
|
+
"api ๐ Deploy | review ",
|
|
1302
|
+
],
|
|
1303
|
+
"retry": {
|
|
1304
|
+
"max": 2,
|
|
1305
|
+
"when": [
|
|
1306
|
+
"runner_system_failure",
|
|
1307
|
+
"stuck_or_timeout_failure",
|
|
1308
|
+
],
|
|
1309
|
+
},
|
|
1310
|
+
"script": [
|
|
1311
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
|
|
1312
|
+
],
|
|
1313
|
+
"stage": "verify",
|
|
1314
|
+
"variables": {},
|
|
1315
|
+
},
|
|
1218
1316
|
},
|
|
1219
1317
|
"stages": [
|
|
1220
1318
|
"setup",
|
|
@@ -2179,6 +2277,104 @@ cloudsql:
|
|
|
2179
2277
|
"cloudsqlProxyCredentials": "$CL_stage_api_cloudsqlProxyCredentials",
|
|
2180
2278
|
},
|
|
2181
2279
|
},
|
|
2280
|
+
"api ๐งพ sbom upload | prod ": {
|
|
2281
|
+
"allow_failure": true,
|
|
2282
|
+
"cache": undefined,
|
|
2283
|
+
"environment": undefined,
|
|
2284
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
2285
|
+
"interruptible": true,
|
|
2286
|
+
"needs": [
|
|
2287
|
+
"api ๐งพ sbom | prod ",
|
|
2288
|
+
],
|
|
2289
|
+
"retry": {
|
|
2290
|
+
"max": 2,
|
|
2291
|
+
"when": [
|
|
2292
|
+
"runner_system_failure",
|
|
2293
|
+
"stuck_or_timeout_failure",
|
|
2294
|
+
],
|
|
2295
|
+
},
|
|
2296
|
+
"script": [
|
|
2297
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/api" "prod" "__sbom.json" vex.json",
|
|
2298
|
+
],
|
|
2299
|
+
"stage": "verify",
|
|
2300
|
+
"variables": {},
|
|
2301
|
+
},
|
|
2302
|
+
"api ๐งพ sbom upload | stage ": {
|
|
2303
|
+
"allow_failure": true,
|
|
2304
|
+
"cache": undefined,
|
|
2305
|
+
"environment": undefined,
|
|
2306
|
+
"image": "git.panter.ch:5001/open-source/dependency-track-uploader:dtrackuploader-v0.2.1",
|
|
2307
|
+
"interruptible": true,
|
|
2308
|
+
"needs": [
|
|
2309
|
+
"api ๐งพ sbom | stage ",
|
|
2310
|
+
],
|
|
2311
|
+
"retry": {
|
|
2312
|
+
"max": 2,
|
|
2313
|
+
"when": [
|
|
2314
|
+
"runner_system_failure",
|
|
2315
|
+
"stuck_or_timeout_failure",
|
|
2316
|
+
],
|
|
2317
|
+
},
|
|
2318
|
+
"script": [
|
|
2319
|
+
"/dtrackuploader https://dep.panter.dev/ "$DT_KEY" upload "pan-test-app/api" "stage" "__sbom.json" vex.json",
|
|
2320
|
+
],
|
|
2321
|
+
"stage": "verify",
|
|
2322
|
+
"variables": {},
|
|
2323
|
+
},
|
|
2324
|
+
"api ๐งพ sbom | prod ": {
|
|
2325
|
+
"allow_failure": true,
|
|
2326
|
+
"artifacts": {
|
|
2327
|
+
"paths": [
|
|
2328
|
+
"__sbom.json",
|
|
2329
|
+
],
|
|
2330
|
+
},
|
|
2331
|
+
"cache": undefined,
|
|
2332
|
+
"environment": undefined,
|
|
2333
|
+
"image": "aquasec/trivy:0.38.3",
|
|
2334
|
+
"interruptible": true,
|
|
2335
|
+
"needs": [
|
|
2336
|
+
"api ๐ Deploy | prod ",
|
|
2337
|
+
],
|
|
2338
|
+
"retry": {
|
|
2339
|
+
"max": 2,
|
|
2340
|
+
"when": [
|
|
2341
|
+
"runner_system_failure",
|
|
2342
|
+
"stuck_or_timeout_failure",
|
|
2343
|
+
],
|
|
2344
|
+
},
|
|
2345
|
+
"script": [
|
|
2346
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
|
|
2347
|
+
],
|
|
2348
|
+
"stage": "verify",
|
|
2349
|
+
"variables": {},
|
|
2350
|
+
},
|
|
2351
|
+
"api ๐งพ sbom | stage ": {
|
|
2352
|
+
"allow_failure": true,
|
|
2353
|
+
"artifacts": {
|
|
2354
|
+
"paths": [
|
|
2355
|
+
"__sbom.json",
|
|
2356
|
+
],
|
|
2357
|
+
},
|
|
2358
|
+
"cache": undefined,
|
|
2359
|
+
"environment": undefined,
|
|
2360
|
+
"image": "aquasec/trivy:0.38.3",
|
|
2361
|
+
"interruptible": true,
|
|
2362
|
+
"needs": [
|
|
2363
|
+
"api ๐ Deploy | stage ",
|
|
2364
|
+
],
|
|
2365
|
+
"retry": {
|
|
2366
|
+
"max": 2,
|
|
2367
|
+
"when": [
|
|
2368
|
+
"runner_system_failure",
|
|
2369
|
+
"stuck_or_timeout_failure",
|
|
2370
|
+
],
|
|
2371
|
+
},
|
|
2372
|
+
"script": [
|
|
2373
|
+
"trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
|
|
2374
|
+
],
|
|
2375
|
+
"stage": "verify",
|
|
2376
|
+
"variables": {},
|
|
2377
|
+
},
|
|
2182
2378
|
},
|
|
2183
2379
|
"stages": [
|
|
2184
2380
|
"setup",
|