Commit 1a138de0 authored by Heinrich Lee Yu's avatar Heinrich Lee Yu

Merge branch 'improve-secure-binaries-tmpl' into 'master'

Include improvements suggested by @xlgmokha

See merge request gitlab-org/gitlab!30409
parents 271faee6 68ac73dd
...@@ -44,9 +44,8 @@ variables: ...@@ -44,9 +44,8 @@ variables:
- mkdir -p output/$(dirname ${CI_JOB_NAME}) - mkdir -p output/$(dirname ${CI_JOB_NAME})
- | - |
if [ "$SECURE_BINARIES_SAVE_ARTIFACTS" = "true" ]; then if [ "$SECURE_BINARIES_SAVE_ARTIFACTS" = "true" ]; then
docker save ${SECURE_BINARIES_IMAGE} -o output/${CI_JOB_NAME}_${SECURE_BINARIES_ANALYZER_VERSION}.tar docker save ${SECURE_BINARIES_IMAGE} | gzip > output/${CI_JOB_NAME}_${SECURE_BINARIES_ANALYZER_VERSION}.tar.gz
gzip output/${CI_JOB_NAME}_${SECURE_BINARIES_ANALYZER_VERSION}.tar sha256sum output/${CI_JOB_NAME}_${SECURE_BINARIES_ANALYZER_VERSION}.tar.gz > output/${CI_JOB_NAME}_${SECURE_BINARIES_ANALYZER_VERSION}.tar.gz.sha256sum
sha256sum output/${CI_JOB_NAME}_${SECURE_BINARIES_ANALYZER_VERSION}.tar.gz > output/${CI_JOB_NAME}_${SECURE_BINARIES_ANALYZER_VERSION}.tag.gz.sha256sum
fi fi
- | - |
if [ "$SECURE_BINARIES_PUSH_IMAGES" = "true" ]; then if [ "$SECURE_BINARIES_PUSH_IMAGES" = "true" ]; then
...@@ -86,9 +85,6 @@ analyzers/gosec: ...@@ -86,9 +85,6 @@ analyzers/gosec:
analyzers/spotbugs: analyzers/spotbugs:
extends: .download_images extends: .download_images
variables:
# TODO: Spotbugs is > 1GB, disabling for now
SECURE_BINARIES_SAVE_ARTIFACTS: "false"
only: only:
variables: variables:
- $SECURE_BINARIES_DOWNLOAD_IMAGES == "true" && - $SECURE_BINARIES_DOWNLOAD_IMAGES == "true" &&
...@@ -231,8 +227,6 @@ license-management: ...@@ -231,8 +227,6 @@ license-management:
extends: .download_images extends: .download_images
variables: variables:
SECURE_BINARIES_ANALYZER_VERSION: "3" SECURE_BINARIES_ANALYZER_VERSION: "3"
# TODO: license-management is > 1GB, disabling for now
SECURE_BINARIES_SAVE_ARTIFACTS: "false"
only: only:
variables: variables:
- $SECURE_BINARIES_DOWNLOAD_IMAGES == "true" && - $SECURE_BINARIES_DOWNLOAD_IMAGES == "true" &&
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment