mbox series

[isar-cip-core,v2,0/3] Generate CVE-reports only with manual trigger

Message ID 20240118175942.1052089-1-Sai.Sathujoda@toshiba-tsip.com (mailing list archive)
Headers show
Series Generate CVE-reports only with manual trigger | expand

Message

Sai.Sathujoda@toshiba-tsip.com Jan. 18, 2024, 5:59 p.m. UTC 
From: Sai Sathujoda <Sai.Sathujoda@toshiba-tsip.com>

This series of patches enables generation of CVE-reports from a latest copy of
dpkg-status files stored in CIP project's s3 bucket only when they are manually
started in the pipeline.

The cve-checker.py script in debian-cve-checker repository [1] is used to generate
the CVE-reports from the dpkg-status of repsective targets.

[1] https://gitlab.com/cip-playground/debian-cve-checker

Sai Sathujoda (3):
  scripts/run-cve-checks.sh: Add script to generate CVE report
  scripts/deploy-cip-core.sh: Upload dpkg-status files to aws s3 bucket
  .gitlab-ci.yml: Run cve-checks job only when it is manually triggered
    in the pipeline

 .gitlab-ci.yml             | 14 +++++++++++++
 scripts/deploy-cip-core.sh | 12 ++++++++++++
 scripts/run-cve-checks.sh  | 40 ++++++++++++++++++++++++++++++++++++++
 3 files changed, 66 insertions(+)
 create mode 100755 scripts/run-cve-checks.sh

Comments

Jan Kiszka Jan. 18, 2024, 6:20 p.m. UTC | #1 
On 18.01.24 18:59, Sai.Sathujoda@toshiba-tsip.com wrote:
> From: Sai Sathujoda <Sai.Sathujoda@toshiba-tsip.com>
> 
> This series of patches enables generation of CVE-reports from a latest copy of
> dpkg-status files stored in CIP project's s3 bucket only when they are manually
> started in the pipeline.
> 
> The cve-checker.py script in debian-cve-checker repository [1] is used to generate
> the CVE-reports from the dpkg-status of repsective targets.
> 
> [1] https://gitlab.com/cip-playground/debian-cve-checker
> 
> Sai Sathujoda (3):
>   scripts/run-cve-checks.sh: Add script to generate CVE report
>   scripts/deploy-cip-core.sh: Upload dpkg-status files to aws s3 bucket
>   .gitlab-ci.yml: Run cve-checks job only when it is manually triggered
>     in the pipeline
> 
>  .gitlab-ci.yml             | 14 +++++++++++++
>  scripts/deploy-cip-core.sh | 12 ++++++++++++
>  scripts/run-cve-checks.sh  | 40 ++++++++++++++++++++++++++++++++++++++
>  3 files changed, 66 insertions(+)
>  create mode 100755 scripts/run-cve-checks.sh
> 

Thanks, applied - with warning fixes. Please check next branch.

Jan