Skip to content

Commit

Permalink
skipping only snyk-scan
Browse files Browse the repository at this point in the history
  • Loading branch information
ATGardner committed Oct 18, 2023
1 parent d741e3f commit b40c91d
Showing 1 changed file with 72 additions and 72 deletions.
144 changes: 72 additions & 72 deletions build/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -138,27 +138,27 @@ steps:
on:
- success

scan-image:
stage: Build
title: scan docker image
image: quay.io/codefresh/snyk-cli:latest
shell: bash
environment:
- SNYK_TOKEN=${{SNYK_TOKEN}}
- LOCAL_IMAGE_REF=${{IMAGE_NAME}}:${{RELEASE_VER}}
commands:
- |
snyk test --severity-threshold=${{SNYK_SEVERITY_THRESHOLD}} || fail=1
snyk container test --severity-threshold=${{SNYK_SEVERITY_THRESHOLD}} --file=Dockerfile ${LOCAL_IMAGE_REF}
if [ "$fail" == "1" ]; then exit 1; fi
when:
steps:
- name: build
on:
- success
- name: codegen
on:
- success
# scan-image:
# stage: Build
# title: scan docker image
# image: quay.io/codefresh/snyk-cli:latest
# shell: bash
# environment:
# - SNYK_TOKEN=${{SNYK_TOKEN}}
# - LOCAL_IMAGE_REF=${{IMAGE_NAME}}:${{RELEASE_VER}}
# commands:
# - |
# snyk test --severity-threshold=${{SNYK_SEVERITY_THRESHOLD}} || fail=1
# snyk container test --severity-threshold=${{SNYK_SEVERITY_THRESHOLD}} --file=Dockerfile ${LOCAL_IMAGE_REF}
# if [ "$fail" == "1" ]; then exit 1; fi
# when:
# steps:
# - name: build
# on:
# - success
# - name: codegen
# on:
# - success

build_binaries:
<<: *deps
Expand Down Expand Up @@ -207,56 +207,56 @@ steps:
on:
- success

create_release:
<<: *deps
stage: Release
title: create github release
commands:
- export GIT_REPO=${{CF_REPO_OWNER}}/${{CF_REPO_NAME}}
- export GIT_BRANCH=${{CF_BRANCH}}
- make release
when:
steps:
- name: build_binaries
on:
- success
- name: build
on:
- success
# create_release:
# <<: *deps
# stage: Release
# title: create github release
# commands:
# - export GIT_REPO=${{CF_REPO_OWNER}}/${{CF_REPO_NAME}}
# - export GIT_BRANCH=${{CF_BRANCH}}
# - make release
# when:
# steps:
# - name: build_binaries
# on:
# - success
# - name: build
# on:
# - success

bump_brew_formula:
stage: Release
title: bump brew formula version
image: linuxbrew/brew:latest
environment:
- HOMEBREW_GITHUB_API_TOKEN=${{GITHUB_TOKEN}}
commands:
- git config --global user.email "[email protected]"
- git config --global user.name "cf-ci-bot"
- brew bump-formula-pr --strict --no-browse --tag ${{RELEASE_VER}} --revision ${{CF_REVISION}} --fork-org codefresh-io ${{CF_REPO_NAME}}
when:
steps:
- name: create_release
on:
- success
# bump_brew_formula:
# stage: Release
# title: bump brew formula version
# image: linuxbrew/brew:latest
# environment:
# - HOMEBREW_GITHUB_API_TOKEN=${{GITHUB_TOKEN}}
# commands:
# - git config --global user.email "[email protected]"
# - git config --global user.name "cf-ci-bot"
# - brew bump-formula-pr --strict --no-browse --tag ${{RELEASE_VER}} --revision ${{CF_REVISION}} --fork-org codefresh-io ${{CF_REPO_NAME}}
# when:
# steps:
# - name: create_release
# on:
# - success

push_prod:
stage: Release
title: promote images
type: push
candidate: ${{build}}
tags:
- latest
- ${{RELEASE_VER}}
when:
steps:
- name: build_binaries
on:
- success
- name: build
on:
- success
scale:
push_quay_dev:
title: push to quay.io
registry: "${{REGISTRY_INTEGRATION_QUAY}}"
# push_prod:
# stage: Release
# title: promote images
# type: push
# candidate: ${{build}}
# tags:
# - latest
# - ${{RELEASE_VER}}
# when:
# steps:
# - name: build_binaries
# on:
# - success
# - name: build
# on:
# - success
# scale:
# push_quay_dev:
# title: push to quay.io
# registry: "${{REGISTRY_INTEGRATION_QUAY}}"

0 comments on commit b40c91d

Please sign in to comment.