600f3a7a3c
Some checks failed
AOC Guard CI / aoc-guard (push) Has been cancelled
AOC Guard CI / aoc-verify (push) Has been cancelled
Concelier Attestation Tests / attestation-tests (push) Has been cancelled
Docs CI / lint-and-preview (push) Has been cancelled
Console CI / console-ci (push) Has been cancelled
Export Center CI / export-ci (push) Has been cancelled
- Added graph.inspect.v1 documentation outlining payload structure and determinism rules. - Created JSON schema for graph.inspect.v1 to enforce payload validation. - Defined mapping rules for graph relationships, advisories, and VEX statements. feat(notifications): establish remediation blueprint for gaps NR1-NR10 - Documented requirements, evidence, and tests for Notifier runtime. - Specified deliverables and next steps for addressing identified gaps. docs(notifications): organize operations and schemas documentation - Created README files for operations, schemas, and security notes to clarify deliverables and policies. feat(advisory): implement PostgreSQL caching for Link-Not-Merge linksets - Created database schema for advisory linkset cache. - Developed repository for managing advisory linkset cache operations. - Added tests to ensure correct functionality of the AdvisoryLinksetCacheRepository.
83 lines
2.7 KiB
YAML
83 lines
2.7 KiB
YAML
name: Export Center CI
|
|
|
|
on:
|
|
push:
|
|
branches: [ main ]
|
|
paths:
|
|
- 'src/ExportCenter/**'
|
|
- 'ops/devops/export/**'
|
|
- '.gitea/workflows/export-ci.yml'
|
|
- 'docs/modules/devops/export-ci-contract.md'
|
|
pull_request:
|
|
branches: [ main, develop ]
|
|
paths:
|
|
- 'src/ExportCenter/**'
|
|
- 'ops/devops/export/**'
|
|
- '.gitea/workflows/export-ci.yml'
|
|
- 'docs/modules/devops/export-ci-contract.md'
|
|
|
|
jobs:
|
|
export-ci:
|
|
runs-on: ubuntu-22.04
|
|
env:
|
|
DOTNET_VERSION: '10.0.100-rc.1.25451.107'
|
|
MINIO_ACCESS_KEY: exportci
|
|
MINIO_SECRET_KEY: exportci123
|
|
BUCKET: export-ci
|
|
ARTIFACT_DIR: ${{ github.workspace }}/.artifacts
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Export OpenSSL 1.1 shim for Mongo2Go
|
|
run: scripts/enable-openssl11-shim.sh
|
|
|
|
- name: Set up .NET SDK
|
|
uses: actions/setup-dotnet@v4
|
|
with:
|
|
dotnet-version: ${{ env.DOTNET_VERSION }}
|
|
include-prerelease: true
|
|
|
|
- name: Restore
|
|
run: dotnet restore src/ExportCenter/StellaOps.ExportCenter.WebService/StellaOps.ExportCenter.WebService.csproj
|
|
|
|
- name: Bring up MinIO
|
|
run: |
|
|
docker compose -f ops/devops/export/minio-compose.yml up -d
|
|
sleep 5
|
|
MINIO_ENDPOINT=http://localhost:9000 ops/devops/export/seed-minio.sh
|
|
|
|
- name: Build
|
|
run: dotnet build src/ExportCenter/StellaOps.ExportCenter.WebService/StellaOps.ExportCenter.WebService.csproj -c Release /p:ContinuousIntegrationBuild=true
|
|
|
|
- name: Test
|
|
run: |
|
|
mkdir -p $ARTIFACT_DIR
|
|
dotnet test src/ExportCenter/__Tests/StellaOps.ExportCenter.Tests/StellaOps.ExportCenter.Tests.csproj -c Release --logger "trx;LogFileName=export-tests.trx" --results-directory $ARTIFACT_DIR
|
|
|
|
- name: Trivy/OCI smoke
|
|
run: ops/devops/export/trivy-smoke.sh
|
|
|
|
- name: Schema lint
|
|
run: |
|
|
python -m json.tool docs/modules/export-center/schemas/export-profile.schema.json >/dev/null
|
|
python -m json.tool docs/modules/export-center/schemas/export-manifest.schema.json >/dev/null
|
|
|
|
- name: Offline kit verify (fixtures)
|
|
run: bash docs/modules/export-center/operations/verify-export-kit.sh src/ExportCenter/__fixtures/export-kit
|
|
|
|
- name: SBOM
|
|
run: syft dir:src/ExportCenter -o spdx-json=$ARTIFACT_DIR/exportcenter.spdx.json
|
|
|
|
- name: Upload artifacts
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: export-ci-artifacts
|
|
path: ${{ env.ARTIFACT_DIR }}
|
|
|
|
- name: Teardown MinIO
|
|
if: always()
|
|
run: docker compose -f ops/devops/export/minio-compose.yml down -v
|