- Implemented `run-scanner-ci.sh` to build and run tests for the Scanner solution with a warmed NuGet cache. - Created `excititor-vex-traces.json` dashboard for monitoring Excititor VEX observations. - Added Docker Compose configuration for the OTLP span sink in `docker-compose.spansink.yml`. - Configured OpenTelemetry collector in `otel-spansink.yaml` to receive and process traces. - Developed `run-spansink.sh` script to run the OTLP span sink for Excititor traces. - Introduced `FileSystemRiskBundleObjectStore` for storing risk bundle artifacts in the filesystem. - Built `RiskBundleBuilder` for creating risk bundles with associated metadata and providers. - Established `RiskBundleJob` to execute the risk bundle creation and storage process. - Defined models for risk bundle inputs, entries, and manifests in `RiskBundleModels.cs`. - Implemented signing functionality for risk bundle manifests with `HmacRiskBundleManifestSigner`. - Created unit tests for `RiskBundleBuilder`, `RiskBundleJob`, and signing functionality to ensure correctness. - Added filesystem artifact reader tests to validate manifest parsing and artifact listing. - Included test manifests for egress scenarios in the task runner tests. - Developed timeline query service tests to verify tenant and event ID handling.
39 lines
1.1 KiB
YAML
39 lines
1.1 KiB
YAML
name: Attestor CI
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
push:
|
|
paths:
|
|
- 'src/Attestor/**'
|
|
- '.gitea/workflows/attestor-ci.yml'
|
|
- 'ops/devops/attestation/**'
|
|
|
|
jobs:
|
|
build-test:
|
|
runs-on: ubuntu-latest
|
|
env:
|
|
DOTNET_NOLOGO: 1
|
|
DOTNET_CLI_TELEMETRY_OPTOUT: 1
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- name: Setup .NET 10
|
|
uses: actions/setup-dotnet@v4
|
|
with:
|
|
dotnet-version: '10.0.x'
|
|
- name: Restore
|
|
run: dotnet restore src/Attestor/StellaOps.Attestor.sln
|
|
- name: Build
|
|
run: dotnet build --no-restore -c Release src/Attestor/StellaOps.Attestor.sln
|
|
- name: Test
|
|
run: dotnet test --no-build -c Release src/Attestor/StellaOps.Attestor.sln
|
|
- name: Publish artefacts
|
|
if: always()
|
|
run: |
|
|
mkdir -p out/ci/attestor
|
|
find src/Attestor -name '*.trx' -o -name '*.xml' | tar -czf out/ci/attestor/test-artifacts.tgz -T-
|
|
- name: Upload artefacts
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: attestor-ci-artifacts
|
|
path: out/ci/attestor/test-artifacts.tgz
|