UNCLASSIFIED - NO CUI

Skip to content

Draft: Move ci-files.py remote files from S3 to GitLab Artifacts

Matthew Scott requested to merge 963-remote-ci-files into master

Description

Addresses issue 963

Updates the clamav-scan and openscap-compliance jobs to retrieve the CVDs and OVAL definitions, respectively, from GitLab artifacts instead of S3. Leverages GitLab's needs:project CI/CD keyword to access artifacts from ci-files pipeline.

Dependencies

  • Requires the ci-files project to be in place first and has a successful pipeline run.
  • Container group/project needs to be added to "CI/CD job token allowist" in the ci-files project (Settings > CI/CD > Job Token Permissions)
    image

Risk

The clamav-scan and openscap-compliance jobs can fail if they're unable to retrieve their needed CVDs and OVAL definitions.

Rollback Plan

Revert to previous method of retrieving the CVDs and OVAL definitions from S3.

Testing

Closes #963

Edited by Matthew Scott

Merge request reports

Loading