Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

EPIC: Add a Post-Build job and Sign-SBOM job #610

Open
2 of 4 tasks
andrew-m-leonard opened this issue Feb 8, 2023 · 3 comments · May be fixed by #739
Open
2 of 4 tasks

EPIC: Add a Post-Build job and Sign-SBOM job #610

andrew-m-leonard opened this issue Feb 8, 2023 · 3 comments · May be fixed by #739
Assignees
@andrew-m-leonard
Labels
enhancement Sbom issue related to Sbom secure-dev

Comments

@andrew-m-leonard
Copy link
Contributor

andrew-m-leonard commented Feb 8, 2023 •
edited
Loading

Create a new job "Post-Build" which implements issue, this encompasses all post-build tasks. To this job we will then run a new job "Sign-SBOM" on the "signing node", with the available RSA key.

Publishes Artifacts:

  • Signed SBOM artifact

Tasks:
@andrew-m-leonard andrew-m-leonard self-assigned this Feb 8, 2023
@andrew-m-leonard andrew-m-leonard added the Sbom issue related to Sbom label Feb 8, 2023
@andrew-m-leonard andrew-m-leonard removed their assignment Feb 9, 2023
@andrew-m-leonard andrew-m-leonard self-assigned this Mar 1, 2023
@andrew-m-leonard andrew-m-leonard mentioned this issue Mar 1, 2023
Open
@andrew-m-leonard andrew-m-leonard removed their assignment Mar 14, 2023
@sophia-guo sophia-guo self-assigned this May 30, 2023
@smlambert smlambert mentioned this issue Jun 14, 2023
Closed
@sophia-guo sophia-guo moved this from Todo to In Progress in Adoptium 2Q 2023 Plan Jun 16, 2023
@sophia-guo sophia-guo mentioned this issue Jun 16, 2023
Merged
@sophia-guo sophia-guo moved this to In Progress in Adoptium 3Q 2023 Plan Jul 11, 2023
@smlambert smlambert moved this from In Progress to Todo in Adoptium 3Q 2023 Plan Jul 11, 2023
@sophia-guo sophia-guo moved this from Todo to In Progress in Adoptium 3Q 2023 Plan Jul 11, 2023
@sophia-guo sophia-guo linked a pull request Jul 6, 2023 that will close this issue
Draft
@sophia-guo sophia-guo mentioned this issue Aug 8, 2023
Open
@sophia-guo sophia-guo moved this to In Progress in Adoptium 4Q 2023 Plan Sep 25, 2023
@smlambert
Copy link
Contributor

Additional post build tasks to consider hanging off of this job:

  • Triggering release notes job
  • Auto-creation of draft PR for next release blog post (to use to capture 'featured' items ahead of time)

@smlambert smlambert moved this to In Progress in 2024 1Q Adoptium Plan Jan 8, 2024
@smlambert
Copy link
Contributor

smlambert commented Mar 29, 2024 •
edited
Loading

Additional Post-build task

  • EclipseMirror activity (currently a job on TC Jenkins) to backup release tarballs (job runs on TC Jenkins server, but potentially can be remotely triggered from this Post-build job to consolidate triggering of various tasks in one spot)

@smlambert smlambert mentioned this issue Mar 29, 2024
Closed
9 tasks
@sxa
Copy link
Member

sxa commented May 8, 2024 •
edited
Loading

Also download testing as per adoptium/temurin-build#3506 which includes SBoM validation.

This is currently performed by the standalone download_and_sbom_validation job which uses the release_download_test.sh script

@smlambert smlambert moved this to In Progress in 2024 2Q Adoptium Plan May 8, 2024
@andrew-m-leonard andrew-m-leonard changed the title Add a Post-Build job and Sign-SBOM job EPIC: Add a Post-Build job and Sign-SBOM job Sep 5, 2024
@andrew-m-leonard andrew-m-leonard mentioned this issue Sep 23, 2024
Open
@smlambert smlambert moved this from Todo to In Progress in Adoptium Backlog Nov 7, 2024
@sxa sxa mentioned this issue Nov 7, 2024
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@andrew-m-leonard andrew-m-leonard

Labels
enhancement Sbom issue related to Sbom secure-dev
Projects
Adoptium Backlog
Status: In Progress
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Add a post build stage sophia-guo/ci-jenkins-pipelines
4 participants
@smlambert @sxa @sophia-guo @andrew-m-leonard