Skip to content
Snippets Groups Projects
Verified Commit c7d2e849 authored by Stefan Hynek's avatar Stefan Hynek :drooling_face:
Browse files

ci(gitlab): remove "generate pipfile" and "generate app sbom" jobs

syft creates suffient container sboms including app dependencies

close #39
parent 5ee250b5
No related branches found
No related tags found
1 merge request!27Resolve "remove app sbom generation"
Pipeline #343731 passed
......@@ -77,36 +77,6 @@ build container image:
- if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
- if: $CI_COMMIT_TAG
generate pipfile:
stage: build
image: docker.io/python:3.8-alpine
before_script:
- pip install pipenv
script:
- pipenv lock
artifacts:
paths:
- Pipfile*
needs: []
rules:
- if: $CI_COMMIT_TAG
generate app sbom:
stage: deploy
image: docker.io/node:18.12
before_script:
- npm ci --ignore-scripts
script:
- npx cdxgen
--type python
--server-url https://deps.sub.uni-goettingen.de
--api-key ${DEPS_UPLOAD_TOKEN}
--project-name ${project_name}
--project-version ${CI_COMMIT_TAG}
needs: ["generate pipfile"]
rules:
- if: $CI_COMMIT_TAG
generate container sbom:
stage: deploy
image: docker.io/alpine:3.16
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment