Readjust order post scanlogic drop
- Merges the
post-build
andscan
stages.- Adjusts jobs to use the build job artifact to determine "IMAGE_TO_SCAN" and the image's SHA
- Moves scan_logic job and artifacts to the build job.
- Moves the manifest.sh script into the harbor job. (manifest and harbor job are now combined)/
- uses syft via anchorectl (no more create-sbom)
Example pipelines:
- https://code-ib-mario.staging.dso.mil/dsop/ironbank-pipelines/pipeline-runner-alpine/-/pipelines/82157
- https://code-ib-mario.staging.dso.mil/dsop/redhat/ubi/9.x/ubi9/-/pipelines/82158
- https://code-ib-mario.staging.dso.mil/dsop/rapidfort/ansible/-/pipelines/82159
Trigger run:
- NOTE: This trigger run set each projects CI/CD settings and TARGET_BRANCH to use readjust-order-post-scanlogic-drop so every pipeline in this trigger run tests this pipeline branch.
- https://code-ib-mario.staging.dso.mil/ironbank-tools/tools/trigger/-/jobs/386021
Edited by Jeffrey Wuebbles