Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

EPIC: Add a Post-Build job and Sign-SBOM job #610

Open
1 of 4 tasks
andrew-m-leonard opened this issue Feb 8, 2023 · 3 comments · May be fixed by #739
Open
1 of 4 tasks

EPIC: Add a Post-Build job and Sign-SBOM job #610

andrew-m-leonard opened this issue Feb 8, 2023 · 3 comments · May be fixed by #739
Assignees
@andrew-m-leonard
Labels
enhancement Sbom issue related to Sbom secure-dev

Comments

@andrew-m-leonard
Copy link
Contributor

andrew-m-leonard commented Feb 8, 2023 •
edited
Loading

Create a new job "Post-Build" which implements issue, this encompasses all post-build tasks. To this job we will then run a new job "Sign-SBOM" on the "signing node", with the available RSA key.

Publishes Artifacts:

  • Signed SBOM artifact

Tasks:
@andrew-m-leonard andrew-m-leonard self-assigned this Feb 8, 2023
@andrew-m-leonard andrew-m-leonard added the Sbom issue related to Sbom label Feb 8, 2023
@andrew-m-leonard andrew-m-leonard removed their assignment Feb 9, 2023
@andrew-m-leonard andrew-m-leonard self-assigned this Mar 1, 2023
@andrew-m-leonard andrew-m-leonard mentioned this issue Mar 1, 2023
Open
@andrew-m-leonard andrew-m-leonard removed their assignment Mar 14, 2023
@sophia-guo sophia-guo self-assigned this May 30, 2023
@smlambert smlambert mentioned this issue Jun 14, 2023
Closed
@sophia-guo sophia-guo mentioned this issue Jun 16, 2023
Merged
@sophia-guo sophia-guo linked a pull request Jul 6, 2023 that will close this issue
Draft
@sophia-guo sophia-guo mentioned this issue Aug 8, 2023
Open
@smlambert
Copy link
Contributor

Additional post build tasks to consider hanging off of this job:

  • Triggering release notes job
  • Auto-creation of draft PR for next release blog post (to use to capture 'featured' items ahead of time)

@smlambert
Copy link
Contributor

smlambert commented Mar 29, 2024 •
edited
Loading

Additional Post-build task

  • EclipseMirror activity (currently a job on TC Jenkins) to backup release tarballs (job runs on TC Jenkins server, but potentially can be remotely triggered from this Post-build job to consolidate triggering of various tasks in one spot)

@smlambert smlambert mentioned this issue Mar 29, 2024
Closed
9 tasks
@sxa
Copy link
Member

sxa commented May 8, 2024 •
edited
Loading

Also download testing as per adoptium/temurin-build#3506 which includes SBoM validation.

This is currently performed by the standalone download_and_sbom_validation job which uses the release_download_test.sh script

@andrew-m-leonard andrew-m-leonard changed the title Add a Post-Build job and Sign-SBOM job EPIC: Add a Post-Build job and Sign-SBOM job Sep 5, 2024
@andrew-m-leonard andrew-m-leonard mentioned this issue Sep 23, 2024
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@andrew-m-leonard andrew-m-leonard

Labels
enhancement Sbom issue related to Sbom secure-dev
Projects
2024 3Q Adoptium Plan
Status: Todo
2024 4Q Adoptium Plan
Status: Todo
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Add a post build stage sophia-guo/ci-jenkins-pipelines
4 participants
@smlambert @sxa @sophia-guo @andrew-m-leonard