SpringCloud/stream-applications
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
1,527 Commits 10 Branches 0 Tags
main
Commit Graph

188 Commits

Author SHA1 Message Date
Chris Bono
6cc9cdde21 Update ivy version to 2.5.2 (#619) 
- Updates `org.apache.ivy:ivy` to version 2.5.2 to fix
CVE-2022-46751

- Adds 2 CVEs to trivyignore due to `debezium-supplier`
transitive dependencies.
 2025-01-24 10:09:49 -06:00
Chris Bono
e9afea157b [CI] Make Trivy scan fail build 
This makes Trivy fail the build when a CVE is encountered.
 2025-01-23 16:51:31 -06:00
Chris Bono
7e2d04fc68 [CI] Update upload-artifact to v4 2025-01-23 11:27:01 -06:00
Corneil du Plessis
0c843d9c09 Fix build-name / number from input. (#590) 
Updates JFROG_CLI_BUILD_NAME and JFROG_CLI_BUILD_NUMBER from input to workflow.
 2024-12-12 10:56:24 +02:00
Corneil du Plessis
0679da0ddf Fix reference to stream-applications-descriptors. 2024-12-11 14:20:32 +02:00
Corneil du Plessis
2e48f7c978 Fix reference to stream-applications-descriptors. 2024-12-11 14:19:17 +02:00
Corneil du Plessis
a4446f7547 Update jfrog to use JF_SERVER_ID 2024-12-11 13:02:32 +02:00
Corneil du Plessis
2e3d0a4d50 Start Release Train 2024.0.1 / 5.0.1 
Applied changes from 2022.0.x to ensure same files workflows are used as current branch.
 2024-11-29 10:37:50 +02:00
Corneil du Plessis
8411d0ff88 Move Trivy to single job (#580) 
Added scan job for Trivy and removed individual trivy scans for all application jobs.
 2024-11-19 15:50:18 +02:00
Corneil du Plessis
86ed0fa3b3 Update Trivy env in common.yml 
Added trivy env to each specific Trivy job step.
 2024-11-19 14:20:20 +02:00
Corneil du Plessis
0682b79208 Provide alternative Trivy repo 
Added enviromental variables with multiple trivy repos.
 2024-11-18 09:23:47 -06:00
Corneil du Plessis
f1b11d8885 Update env to setup-jfrog-cli to use JF_ARTIFACTORY_SPRING 2024-11-15 11:44:34 +02:00
Corneil du Plessis
b3375cec46 Expand feedback on configure-jfrog.sh. 2024-11-15 11:16:15 +02:00
Corneil du Plessis
4b93227dfb Update configure-jfrog.sh to use setup-jfrog-cli@v3 2024-11-15 10:49:21 +02:00
Corneil du Plessis
2fa05ffba0 Disable Trivy Scan by default 
Add a flag named `enableSecurityScan` to manage execution of trivy scan that will be `false` by default.
 2024-11-14 08:08:17 -06:00
Corneil du Plessis
7c29766ff0 Fix setup-java@v4 to use liberica only. 2024-11-14 14:41:21 +02:00
Corneil du Plessis
6d30494b8c Fix setup-java@v4 to use liberica only. 2024-11-14 14:34:30 +02:00
Corneil du Plessis
9e1369994d Fix common CI workflow (#572) 
Removes the extra github-token not required in setup_java@v4.
 2024-11-14 06:25:49 -05:00
Corneil du Plessis
89797e71b3 Update setup-java and setup-jfrog to v4 
Changes to setup-java@v4 requires distribution.
Specify specific version of Java
[skip ci]
 2024-11-08 10:03:15 -06:00
Corneil du Plessis
c674eaba63 Fix reference to output 2024-04-03 12:40:24 +02:00
Corneil du Plessis
0fa79d94b4 [CI] Update trivy installation. 2024-04-02 18:24:30 +02:00
Corneil du Plessis
db7cc81de5 [CI] Check sarif location 2024-04-02 18:08:14 +02:00
Corneil du Plessis
70c6d022b1 [CI] Check sarif location 2024-04-02 17:47:47 +02:00
Corneil du Plessis
2de2281f10 [CI] Fix sarif location. 2024-04-02 17:30:28 +02:00
Corneil du Plessis
bb002db99f Update scan-folders for trivy (#535) 
* Update Scan folders

* Update Scan folders
 2024-04-02 17:23:57 +02:00
Corneil du Plessis
40729c835c [CI] Fix common rerun-jobs. 2024-04-02 16:23:36 +02:00
Corneil du Plessis
97dd2ce7f8 update trivy scan (#534) 
* Reverting to snapshot to fix build with spring-functions-catalog 5.0.0-M2

* Update Trivy to scan built jars
 2024-04-02 16:20:08 +02:00
Chris Bono
7bc21c329d [CI] Remove previous debug attempts from Trivy scan 2024-04-01 16:05:02 -05:00
Chris Bono
ce6b01b50c [CI] Increase timeout for Trivy scan (take 6) 2024-04-01 14:34:41 -05:00
Chris Bono
d50fddaa5b [CI] Increase timeout for Trivy scan (take 5) 2024-04-01 13:48:11 -05:00
Chris Bono
9accbbded0 [CI] Increase timeout for Trivy scan (take 4) 2024-04-01 12:51:28 -05:00
Chris Bono
bf7b448433 [CI] Increase timeout for Trivy scan (take 3) 2024-04-01 12:18:43 -05:00
Chris Bono
3ae9a125cf [CI] Increase timeout for Trivy scan (take 2) 2024-04-01 10:43:50 -05:00
Chris Bono
df9f013f80 [CI] Increase timeout for Trivy scan 2024-04-01 10:19:04 -05:00
GitHub Actions Bot
4862eadea1 [CI] gh release points to release train version [skip ci] 2023-10-28 14:23:32 -05:00
Chris Bono
3b9e0d1760 [CI] Pass VERSION into common.yml 2023-10-27 18:10:06 -05:00
Corneil du Plessis
ed50263167 Fix build-folder.sh for jfrog 2023-10-24 12:48:21 +02:00
Corneil du Plessis
e7a0b3013c Added Print Build Info to Release Train step [skip ci] 2023-10-24 11:50:15 +02:00
Corneil du Plessis
906b6b6ea2 Update build for jfrog cli 2023-10-24 11:31:27 +02:00
Corneil du Plessis
a2a712787d Update CI to launch CI-IT when successful. 2023-10-23 16:01:05 +02:00
Corneil du Plessis
72e807b255 Update CI to launch CI-IT when successful. 2023-10-23 13:24:45 +02:00
Corneil du Plessis
9a631410eb Update CI to launch CI-IT when successful. 2023-10-23 12:09:54 +02:00
Chris Bono
379e82a4d5 [CI] Only do github release for version change 2023-10-18 23:11:24 -05:00
Chris Bono
8a6099f392 [CI] Derive build info env var values 2023-10-18 21:36:54 -05:00
Chris Bono
fddfc0997b [CI] Move build info env vars into step 2023-10-18 17:59:29 -05:00
Chris Bono
5dd9dd558c [CI] Add build info env vars 2023-10-18 17:54:18 -05:00
Chris Bono
e6a0e77af7 [CI] Add step to generate release notes 2023-10-17 16:19:12 -05:00
Corneil du Plessis
23cec881f2 [CI] Provide for Test reports 2023-10-16 16:45:45 +02:00
Corneil du Plessis
299eb08746 [CI] Fix secrets. 2023-10-12 17:22:37 +02:00
Corneil du Plessis
96520af0d8 [CI] Update common.yml for release train 2023-10-12 16:09:01 +02:00