Skip to content

Adapt to CI with CVE scanning #2023

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 10 commits into
base: develop
Choose a base branch
from
Open

Adapt to CI with CVE scanning #2023

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
6b37012
adapt to CI with CVE scanning
DenKoren Oct 9, 2025
6500df4
trigger CI
DenKoren Oct 9, 2025
ec77519
adapt to clean CI workflow
DenKoren Oct 9, 2025
64a47b5
adapt to clean CI (step 3)
DenKoren Oct 9, 2025
944e4a9
check pl-pkg CVE scanning (again)
DenKoren Oct 9, 2025
0a6a533
update lockfile
DenKoren Oct 9, 2025
da91a76
Merge branch 'develop' into MILAB-4326_CVE_scan
DenKoren Oct 9, 2025
352aad0
actualise CI settings
DenKoren Oct 9, 2025
535e6ef
trigger CI
DenKoren Oct 14, 2025
9617b3f
trigger CI
DenKoren Oct 15, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 5 additions & 12 deletions .github/workflows/build.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -70,8 +70,7 @@ jobs:
dist-archive-s3: true
dist-archive-s3-add-sha: true

# Distribution sign
sign-dist-archive: ${{ github.event_name != 'schedule' }}
build-pl-package: ${{ github.event_name != 'schedule' }}

# CDN redirect
cdn-redirect-s3: true
Expand All @@ -96,22 +95,16 @@ jobs:

secrets:
env: |
{
"MI_LICENSE": ${{ toJSON(secrets.MI_LICENSE) }},
{ "MI_LICENSE": ${{ toJSON(secrets.MI_LICENSE) }},
"NPMJS_TOKEN": ${{ toJSON(secrets.NPMJS_TOKEN) }},
"QUAY_USERNAME": ${{ toJSON(secrets.QUAY_USERNAME) }},
"QUAY_ROBOT_TOKEN": ${{ toJSON(secrets.QUAY_ROBOT_TOKEN) }}
}
"QUAY_ROBOT_TOKEN": ${{ toJSON(secrets.QUAY_ROBOT_TOKEN) }} }

GRADLE_PROPERTIES: |
org.gradle.caching=true

TELEGRAM_NOTIFICATION_TARGET: ${{ secrets.TG_CHANNEL_MIBUILDS }}
TELEGRAM_API_TOKEN: ${{ secrets.TG_CI_BOT_TOKEN }}
SIGN_DIST_ARCHIVE_S3_IAM_ROLE_TO_ASSUME: ${{ secrets.REGISTRY_IAM_ROLE }}
SIGN_DIST_ARCHIVE_S3_BUCKET: ${{ secrets.REGISTRY_S3_BUCKET }}
SIGN_GCLOUD_KMS_WORKLOAD_IDENTITY_PROVIDER: ${{ secrets.GCLOUD_KMS_WORKLOAD_IDENTITY_PROVIDER }}
SIGN_GCLOUD_KMS_SERVICE_ACCOUNT: ${{ secrets.GCLOUD_KMS_SERVICE_ACCOUNT }}
SIGN_GCLOUD_KMS_KEYRING: ${{ secrets.GCLOUD_KMS_KEYRING }}
SIGN_GCLOUD_KMS_KEY_NAME: ${{ secrets.GCLOUD_KMS_KEY_NAME }}

BIN_REGISTRY_S3_BUCKET_URL: ${{ secrets.BIN_REGISTRY_S3_BUCKET_URL }}
BIN_REGISTRY_S3_IAM_ROLE: ${{ secrets.REGISTRY_IAM_ROLE }}
25 changes: 13 additions & 12 deletions pl-pkg/package-lock.json
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

7 changes: 4 additions & 3 deletions pl-pkg/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,9 +3,9 @@
"version": "1.0.0",
"description": "MiXCR software dependency for Platforma Backend",
"scripts": {
"build": "true",
"postinstall": "node ./scripts/unpack-ci.js",
"prepublishOnly": "pl-pkg build && pl-pkg prepublish"
"build": "pl-pkg build",
"prepublishOnly": "pl-pkg prepublish"
},
"block-software": {
"entrypoints": {
Expand Down Expand Up @@ -110,9 +110,10 @@
"dist/",
"scripts/unpack-ci.js"
],
"packageManager": "[email protected]",
"license": "UNLICENSED",
"devDependencies": {
"@platforma-sdk/package-builder": "^3.2.3",
"@platforma-sdk/package-builder": "^3.8.0",
"@platforma-open/milaboratories.runenv-java-corretto": "^1.1.5",
"unzipper": "^0.12.3"
}
Expand Down
Loading
Loading