UNCLASSIFIED
Skip to content
GitLab
Projects
Groups
Snippets
Help
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in
Toggle navigation
Open sidebar
Ironbank Tools
ironbank-plugins-pipeline
Commits
2bfa0535
Commit
2bfa0535
authored
May 26, 2021
by
David Freeman
Browse files
update job and stage names and remove tags
parent
be193752
Changes
10
Hide whitespace changes
Inline
Side-by-side
Showing
10 changed files
with
21 additions
and
35 deletions
+21
-35
stages/build/base.yaml
stages/build/base.yaml
+3
-5
stages/import-artifacts/base.yaml
stages/import-artifacts/base.yaml
+3
-5
stages/preflight/base.yaml
stages/preflight/base.yaml
+2
-4
stages/preprocess/base.yaml
stages/preprocess/base.yaml
+0
-2
stages/preprocess/load-scripts.yaml
stages/preprocess/load-scripts.yaml
+1
-1
stages/publish/base.yaml
stages/publish/base.yaml
+0
-2
stages/publish/upload_to_s3.yaml
stages/publish/upload_to_s3.yaml
+5
-5
stages/report-generation/base.yaml
stages/report-generation/base.yaml
+5
-7
stages/scanning/anchore.yaml
stages/scanning/anchore.yaml
+2
-2
stages/scanning/base.yaml
stages/scanning/base.yaml
+0
-2
No files found.
stages/build/base.yaml
View file @
2bfa0535
build
:
stage
:
build
tags
:
-
ironbank-plugins-isolated
dependencies
:
-
import
artifacts
-
load
scripts
-
plugins
manifest
-
import
-
artifacts
-
load
-
scripts
-
plugins
-
manifest
variables
:
ARTIFACT_DIR
:
"
${ARTIFACT_STORAGE}/build"
script
:
...
...
stages/import-artifacts/base.yaml
View file @
2bfa0535
import artifacts
:
stage
:
import artifacts
tags
:
-
ironbank-plugins
import-artifacts
:
stage
:
import-artifacts
dependencies
:
-
load
scripts
-
load
-
scripts
# - preflight
variables
:
ARTIFACT_DIR
:
"
${ARTIFACT_STORAGE}/import-artifacts"
...
...
stages/preflight/base.yaml
View file @
2bfa0535
.preflight
:
stage
:
preflight
tags
:
-
ironbank-plugins
folder
structure
:
folder
-
structure
:
extends
:
.preflight
variables
:
ARTIFACT_DIR
:
"
${ARTIFACT_STORAGE}/folder_structure"
...
...
@@ -17,7 +15,7 @@ folder structure:
dotenv
:
"
${ARTIFACT_DIR}/build_source.env"
# Comment out until schema is in place
plugins
manifest
:
plugins
-
manifest
:
extends
:
.preflight
variables
:
ARTIFACT_DIR
:
"
${ARTIFACT_STORAGE}/preflight"
...
...
stages/preprocess/base.yaml
View file @
2bfa0535
.preprocess
:
stage
:
.pre
tags
:
-
ironbank-plugins
except
:
refs
:
-
tags
...
...
stages/preprocess/load-scripts.yaml
View file @
2bfa0535
...
...
@@ -2,7 +2,7 @@ include:
-
local
:
stages/preprocess/base.yaml
# clone templates repo as an artifact so it can be used with other jobs
load
scripts
:
load
-
scripts
:
extends
:
.preprocess
cache
:
{}
script
:
...
...
stages/publish/base.yaml
View file @
2bfa0535
...
...
@@ -3,7 +3,5 @@
# todo: uncomment for prod
# only:
# - master
tags
:
-
ironbank-plugins
include
:
-
local
:
/stages/publish/upload_to_s3.yaml
stages/publish/upload_to_s3.yaml
View file @
2bfa0535
upload
to
s3
:
upload
-
to
-
s3
:
extends
:
.publish
resource_group
:
s3_phase
variables
:
...
...
@@ -9,10 +9,10 @@ upload to s3:
BASE_BUCKET_DIRECTORY
:
testing/plugins-scan-reports
REPORT_TAR_NAME
:
"
${PLUGIN_NAME}-${REPORT_DATE}_plugin_scan_result.tar.gz"
dependencies
:
-
load
scripts
-
load
-
scripts
-
build
-
anchore
scan
-
report
generation
-
plugins
manifest
-
anchore
-
scan
-
report
-
generation
-
plugins
-
manifest
script
:
-
'
"${PIPELINE_REPO_DIR}/stages/publish/upload-to-s3-run.sh"'
stages/report-generation/base.yaml
View file @
2bfa0535
report generation
:
stage
:
report generation
tags
:
-
ironbank-plugins
report-generation
:
stage
:
report-generation
dependencies
:
-
load
scripts
-
plugins
manifest
-
anchore
scan
-
load
-
scripts
-
plugins
-
manifest
-
anchore
-
scan
-
build
variables
:
# Put generated csv report in the scan-results folder
...
...
stages/scanning/anchore.yaml
View file @
2bfa0535
...
...
@@ -19,13 +19,13 @@
# IMAGE_ID=<id> python3 anchore_scan.py
#
anchore
scan
:
anchore
-
scan
:
extends
:
.scanning
image
:
"
${BASE_REGISTRY}/anchore/cli/cli:0.8.2"
stage
:
scanning
# Load in the IMG_VERSION variable from load scripts env
dependencies
:
-
load
scripts
-
load
-
scripts
-
build
variables
:
# put all scan outputs in the scan-results folder
...
...
stages/scanning/base.yaml
View file @
2bfa0535
#scanning:
.scanning
:
stage
:
scanning
tags
:
-
ironbank-plugins
include
:
-
local
:
stages/scanning/anchore.yaml
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment