Draft: Move ci-files.py remote files from S3 to GitLab Artifacts
Description
Addresses issue 963
Updates the clamav-scan
and openscap-compliance
jobs to retrieve the CVDs and OVAL definitions, respectively, from GitLab artifacts instead of S3. Leverages GitLab's needs:project
CI/CD keyword to access artifacts from ci-files
pipeline.
Dependencies
- Requires the ci-files project to be in place first and has a successful pipeline run.
- Container group/project needs to be added to "CI/CD job token allowist" in the
ci-files
project (Settings > CI/CD > Job Token Permissions)
Risk
The clamav-scan
and openscap-compliance
jobs can fail if they're unable to retrieve their needed CVDs and OVAL definitions.
Rollback Plan
Revert to previous method of retrieving the CVDs and OVAL definitions from S3.
Testing
Closes #963
Edited by Matthew Scott