Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: stepactions for secure push to OCI registry #76

Merged
merged 3 commits into from
Dec 11, 2024

Conversation

psturc
Copy link
Member

@psturc psturc commented Dec 10, 2024

JIRA

https://issues.redhat.com/browse/KFLUXDP-6

Description

This PR introduces 2 new stepactions:

  • secure-push-oci, that scans the content of the specified directory, removes files that contain leaked information and pushes the directory content to the new/existing OCI artifact in quay.io, including the log from the leaktk CLI scan
  • fail-if-any-step-failed - which purpose is to exit with non-zero code, if any of the steps executed as a part of the tekton Task exited with non-zero code. This is useful in Tasks, where we want to save artifacts that were produced by a step, where the error was purposely ignored (using error: continue field), but still want to fail the Task in the end, to give the user the correct job results

Additional comments

  • it also contains a commit from this PR, that was reverted after merge due to missing updates in quay.io/konflux-qe-incubator/konflux-qe-tools:latest image - it was updated and now it is save to merge it

Verification

  • fully tested in this PR, artifacts from that test run are available here

@ascerra ascerra merged commit 51aa5e2 into konflux-ci:main Dec 11, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants