From 30e6fd932abfabc1b45971da89d1d6cf4dd4e89e Mon Sep 17 00:00:00 2001 From: Fran Mulero Date: Wed, 7 Feb 2024 10:07:19 +0100 Subject: [PATCH] [bitnami/*] Remove SRP report (#23201) Signed-off-by: Fran Mulero --- .github/workflows/srp-report.yml | 53 -------------------------------- 1 file changed, 53 deletions(-) delete mode 100644 .github/workflows/srp-report.yml diff --git a/.github/workflows/srp-report.yml b/.github/workflows/srp-report.yml deleted file mode 100644 index bbff6cccb2..0000000000 --- a/.github/workflows/srp-report.yml +++ /dev/null @@ -1,53 +0,0 @@ -# Copyright VMware, Inc. -# SPDX-License-Identifier: APACHE-2.0 - -name: '[SRP] Secure Release Pipeline Report' -on: - schedule: - - cron: '0 7 * * *' - workflow_dispatch: -# Remove all permissions by default -permissions: {} -env: - BAC_SRP_ENDPOINT: https://apigw.vmware.com/v1/s1/api/helix-beta - BAC_SRP_CLIENT_ID: ${{ secrets.BAC_SRP_CLIENT_ID }} - BAC_SRP_CLIENT_SECRET: ${{ secrets.BAC_SRP_CLIENT_SECRET }} - -jobs: - report: - runs-on: ubuntu-latest - permissions: - actions: write - contents: read - steps: - - id: install-tool - name: Install and configure SRP Tool - run: | - curl -SsLfo /tmp/srp-cli.tgz https://srp-cli.s3.amazonaws.com/srp-cli-latest.tgz - sudo tar xf /tmp/srp-cli.tgz -C /usr/local/bin/ - srp config --srp-endpoint ${BAC_SRP_ENDPOINT} - srp config auth --client-id=${BAC_SRP_CLIENT_ID} --client-secret=${BAC_SRP_CLIENT_SECRET} - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 - name: Checkout Repository - with: - # No full history required - fetch-depth: 1 - submodules: true - - id: build-report - name: Build SRP report - run: | - export SRP_UID="uid.obj.build.github(instance='github.com',namespace='${GITHUB_REPOSITORY}',ref='${GITHUB_REF}',action='${GITHUB_ACTION}',build_id='${GITHUB_RUN_ID}_${GITHUB_RUN_ATTEMPT}')" - srp provenance source --verbose --scm-type git \ - --name "bac-charts" --path . --saveto ./source-provenance.json \ - --comp-uid "${SRP_UID}" --build-number "${GITHUB_RUN_ID}" \ - --version "1.0" --all-ephemeral true --build-type release - echo "uid=${SRP_UID}" >> $GITHUB_OUTPUT - - name: Archive SRP report - uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 - with: - name: source-provenance - path: source-provenance.json - - id: submit-report - name: Submit SRP report - run: | - srp metadata submit --verbose --path ./source-provenance.json --uid "uid.mtd.provenance_2_5.fragment(obj_uid=${{ steps.build-report.outputs.uid }},revision='')"