Skip to content

fix(build): check for CVEs before merge #6869

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
domsolutions merged 68 commits into from
Oct 23, 2025
Merged

fix(build): check for CVEs before merge #6869

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
68 commits
Select commit Hold shift + click to select a range
cf53b30
test locally built img
domsolutions Oct 10, 2025
e5c85b6
fix action
domsolutions Oct 10, 2025
77ea736
fix env var
domsolutions Oct 10, 2025
2e3ca34
docker file context
domsolutions Oct 10, 2025
2cc3015
docker file context
domsolutions Oct 10, 2025
9fca806
remove comments
domsolutions Oct 10, 2025
889f27e
fail when issues found
domsolutions Oct 13, 2025
99a67ab
change env var
domsolutions Oct 13, 2025
db73921
fix potential colliding env var
domsolutions Oct 13, 2025
a4a81e3
typo
domsolutions Oct 13, 2025
09dc0db
test old vulnerable image
domsolutions Oct 13, 2025
14c0fa5
test remove docker file
domsolutions Oct 13, 2025
32c878a
test no level check
domsolutions Oct 13, 2025
803a542
test disable sarif
domsolutions Oct 13, 2025
f4b95c4
fall on all
domsolutions Oct 13, 2025
8599e19
run via CLI
domsolutions Oct 13, 2025
d426ef5
test exit 1 fails pipeline
domsolutions Oct 13, 2025
96824d6
test latest version
domsolutions Oct 13, 2025
352a9ae
fail on all
domsolutions Oct 13, 2025
071cc22
run from executor dir
domsolutions Oct 13, 2025
fbd12ce
fail on everything
domsolutions Oct 13, 2025
81458d7
re-instate snyk action
domsolutions Oct 13, 2025
a84dd58
wip
domsolutions Oct 14, 2025
6cf8570
Test building base python image and scanning image w/o pushing to repo
domsolutions Oct 20, 2025
c4a8fda
fix tag
domsolutions Oct 20, 2025
2473731
fix tag
domsolutions Oct 20, 2025
7bd0e9a
fix tag
domsolutions Oct 20, 2025
e34a55c
fix tag
domsolutions Oct 20, 2025
edf7a0d
fix tag
domsolutions Oct 20, 2025
f4e3a89
scan sklearn
domsolutions Oct 20, 2025
90bb2f5
fix build
domsolutions Oct 20, 2025
26c2671
fix env var
domsolutions Oct 20, 2025
5224311
fix env var rclone
domsolutions Oct 20, 2025
9e36383
fix tag
domsolutions Oct 20, 2025
97602e4
fix tag
domsolutions Oct 20, 2025
6a303ac
fix perms
domsolutions Oct 20, 2025
867ccb1
run as root
domsolutions Oct 20, 2025
1d7d7e9
fix: run as root
domsolutions Oct 20, 2025
7f87f32
comment out to speed up
domsolutions Oct 20, 2025
dae0ef0
fix root
domsolutions Oct 20, 2025
fa39a82
revert
domsolutions Oct 20, 2025
9f9a551
clean up images to fix out of disk space
domsolutions Oct 20, 2025
5579cf4
remove tox to fix out of space
domsolutions Oct 21, 2025
44334db
upload images to artifactory
domsolutions Oct 21, 2025
8c49972
v4
domsolutions Oct 21, 2025
7ad908b
fix tag
domsolutions Oct 21, 2025
9f4484d
reduce docker image size
domsolutions Oct 21, 2025
1fac61d
check scan results and scan conda image
domsolutions Oct 21, 2025
93e87a8
run PR actions against temp branch, should revert before merging to m…
domsolutions Oct 21, 2025
25b4b97
TODO
domsolutions Oct 21, 2025
f9103d8
trigger build
domsolutions Oct 21, 2025
9e4001d
check rclone failure explicitly
domsolutions Oct 22, 2025
1bd1266
remove obsolete file
domsolutions Oct 22, 2025
5f28476
fail on all
domsolutions Oct 22, 2025
1546d60
fix not reporting failure
domsolutions Oct 22, 2025
e4f6378
fix not reporting failure
domsolutions Oct 22, 2025
c19840f
Fix indentation in security_tests_v1.yml
domsolutions Oct 22, 2025
635c63c
Enhance Snyk scan with SARIF output and upload
domsolutions Oct 22, 2025
ca386a9
Refactor RCLONE_IMAGE_TAG and Snyk scan options
domsolutions Oct 22, 2025
d85aec3
run docker directly to fix mis-reporting
domsolutions Oct 22, 2025
4870dbf
Log return code after Snyk container test
domsolutions Oct 22, 2025
c138946
Add debug flag to Snyk container test command
domsolutions Oct 22, 2025
899edd2
Change Snyk command from container test to test
domsolutions Oct 22, 2025
194d70d
Update Snyk command for container testing
domsolutions Oct 22, 2025
1397e71
fix rclone not reporting fixable CVEs
domsolutions Oct 22, 2025
5d70ea7
Fix syntax error in security_tests_v1.yml
domsolutions Oct 22, 2025
0a30037
Fix syntax error in security_tests_v1.yml
domsolutions Oct 22, 2025
2957902
Fix CVE rclone
domsolutions Oct 22, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion .github/workflows/alibidetect_tests.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,8 @@ on:
push:
branches: [ master ]
pull_request:
branches: [ master ]
# TODO revert before merge to master
branches: [ fix/core-1-CVEs ]

jobs:
lint:
Expand Down
3 changes: 2 additions & 1 deletion .github/workflows/alibiexplainer_tests.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,8 @@ on:
push:
branches: [ master ]
pull_request:
branches: [ master ]
# TODO revert before merge to master
branches: [ fix/core-1-CVEs ]

jobs:
lint:
Expand Down
3 changes: 2 additions & 1 deletion .github/workflows/python_lint.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,8 @@ on:
push:
branches: [ master ]
pull_request:
branches: [ master ]
# TODO revert before merge to master
branches: [ fix/core-1-CVEs ]

jobs:
python-lint:
Expand Down
3 changes: 2 additions & 1 deletion .github/workflows/python_tests.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,8 @@ on:
push:
branches: [ master ]
pull_request:
branches: [ master ]
# TODO revert before merge to master
branches: [ fix/core-1-CVEs ]

jobs:
python-tests:
Expand Down
112 changes: 0 additions & 112 deletions .github/workflows/security_image_tests_v1.yml
View file
Open in desktop

This file was deleted.

Loading
Loading