502: Adding samples to periodic scan of last release (#516)

* 502: Adding samples to periodic scan of last release

* 502: Make sample app scan work for all builds

---------

Co-authored-by: David T. Adcox <[email protected]>

Author: dtadcox

.one-pipeline.yaml

@@ -279,6 +279,10 @@ containerize:
       make setup-go GO_RELEASE_VERSION=$(get_env go-version)
       export PATH=$PATH:/usr/local/go/bin
       yum -y -q update
+      if [[ ! -z "$PERIODIC_SCAN" && "$PERIODIC_SCAN" != "false" && "$PERIODIC_SCAN" != "no"  ]]; then
+        sudo snap install yq 
+        sudo snap install jq 
+      fi
 
       export RELEASE_TARGET=$(get_env branch)
       
@@ -424,6 +428,22 @@ containerize:
       fi
     done
 
+
+    if [[ ! -z "$PERIODIC_SCAN" && "$PERIODIC_SCAN" != "false" && "$PERIODIC_SCAN" != "no"  ]]; then
+      CSV_URL="https://raw.githubusercontent.com/WASdev/websphere-liberty-operator/$RELEASE_TARGET/bundle/manifests/ibm-websphere-liberty.clusterserviceversion.yaml"
+      echo "CSV URL: ${CSV_URL}"
+      MANIFEST=$(curl $CSV_URL | yq '.spec.relatedImages[] | select (.name = "liberty-sample-app") | .image')
+    else
+      MANIFEST=$(cat bundle/manifests/ibm-websphere-liberty.clusterserviceversion.yaml | yq '.spec.relatedImages[] | select (.name = "liberty-sample-app") | .image')
+    fi    
+    IMAGE="${MANIFEST%%@*}"
+    for row in $(docker manifest inspect $MANIFEST | jq -c '.manifests[]'); do
+      DIGEST=$(echo "${row}" | jq -r '.digest')
+      ARCH=$(echo "${row}" | jq -r '.platform.architecture')
+      echo "Saving artifact sample-$RELEASE_TARGET type=image name=$IMAGE digest=$DIGEST arch=$ARCH"
+      save_artifact sample-$RELEASE_TARGET type=image name="$IMAGE" "digest=$DIGEST" "arch=$ARCH"
+    done
+    
     echo "MEND unified agent scan"
     chmod +x "${COMMONS_PATH}/whitesource/whitesource_unified_agent_scan.sh"
     source "${COMMONS_PATH}/whitesource/whitesource_unified_agent_scan.sh"

scripts/pipeline/ci_to_secure_pipeline_scan.sh

@@ -9,11 +9,13 @@ if which list_artifacts >/dev/null; then
     IMAGE_NAME="$(load_artifact "$ARTIFACT_IMAGE" "name" 2>/dev/null)"
     IMAGE_TYPE="$(load_artifact "$ARTIFACT_IMAGE" "type" 2>/dev/null)"
 
-    # Ensure "cp." is in front of image name
-    if [[ ${IMAGE_NAME%%"."*} != "cp" ]]; then
-        IMAGE_NAME="cp.${IMAGE_NAME}"
+    # Ensure "cp." is in front of image name, except in samples case
+    if [[ ${IMAGE_NAME} != *"samples"* ]];then
+        if [[ ${IMAGE_NAME%%"."*} != "cp" ]]; then
+            IMAGE_NAME="cp.${IMAGE_NAME}"
+        fi
     fi
-    
+       
     if [[ -z "${IMAGE_NAME}" || "$(echo "$IMAGE_TYPE" | tr '[:upper:]' '[:lower:]')" != "image" ]]; then 
         continue
     else