Sps setup

.gitignore

@@ -33,4 +33,8 @@ Thumbs.db
 .vscode/settings.json
 
 # Development files
-.keep
+.keep
+
+venv/
+.ansible/
+tests/output/

.secrets.baseline

@@ -0,0 +1,142 @@
+{
+  "exclude": {
+    "files": "^.secrets.baseline$",
+    "lines": null
+  },
+  "generated_at": "2025-09-18T20:05:32Z",
+  "plugins_used": [
+    {
+      "name": "AWSKeyDetector"
+    },
+    {
+      "name": "ArtifactoryDetector"
+    },
+    {
+      "name": "AzureStorageKeyDetector"
+    },
+    {
+      "base64_limit": 4.5,
+      "name": "Base64HighEntropyString"
+    },
+    {
+      "name": "BasicAuthDetector"
+    },
+    {
+      "name": "BoxDetector"
+    },
+    {
+      "name": "CloudantDetector"
+    },
+    {
+      "ghe_instance": "github.ibm.com",
+      "name": "GheDetector"
+    },
+    {
+      "name": "GitHubTokenDetector"
+    },
+    {
+      "hex_limit": 3,
+      "name": "HexHighEntropyString"
+    },
+    {
+      "name": "IbmCloudIamDetector"
+    },
+    {
+      "name": "IbmCosHmacDetector"
+    },
+    {
+      "name": "JwtTokenDetector"
+    },
+    {
+      "keyword_exclude": null,
+      "name": "KeywordDetector"
+    },
+    {
+      "name": "MailchimpDetector"
+    },
+    {
+      "name": "NpmDetector"
+    },
+    {
+      "name": "PrivateKeyDetector"
+    },
+    {
+      "name": "SlackDetector"
+    },
+    {
+      "name": "SoftlayerDetector"
+    },
+    {
+      "name": "SquareOAuthDetector"
+    },
+    {
+      "name": "StripeDetector"
+    },
+    {
+      "name": "TwilioKeyDetector"
+    }
+  ],
+  "results": {
+    "tests/functional/modules/ims_dbd_gen/test_ims_dbd_gen_sample.py": [
+      {
+        "hashed_secret": "554bcaadae4eec006f6879e5e004f912368dec60",
+        "is_secret": false,
+        "is_verified": false,
+        "line_number": 37,
+        "type": "Hex High Entropy String",
+        "verified_result": null
+      }
+    ],
+    "tests/functional/modules/ims_dbd_gen/uss_file/test_valid_input.py": [
+      {
+        "hashed_secret": "554bcaadae4eec006f6879e5e004f912368dec60",
+        "is_secret": false,
+        "is_verified": false,
+        "line_number": 49,
+        "type": "Hex High Entropy String",
+        "verified_result": null
+      },
+      {
+        "hashed_secret": "6b1962e5dcedc40db2261be3ef4aa81543201b9f",
+        "is_secret": false,
+        "is_verified": false,
+        "line_number": 50,
+        "type": "Hex High Entropy String",
+        "verified_result": null
+      }
+    ],
+    "tests/functional/modules/ims_psb_gen/combination/test_valid_input.py": [
+      {
+        "hashed_secret": "49b555c7ab1dafa6685365938bd84b4b83bbdbb6",
+        "is_secret": false,
+        "is_verified": false,
+        "line_number": 96,
+        "type": "Hex High Entropy String",
+        "verified_result": null
+      }
+    ],
+    "tests/functional/modules/ims_psb_gen/uss_file/test_valid_input.py": [
+      {
+        "hashed_secret": "49b555c7ab1dafa6685365938bd84b4b83bbdbb6",
+        "is_secret": false,
+        "is_verified": false,
+        "line_number": 53,
+        "type": "Hex High Entropy String",
+        "verified_result": null
+      },
+      {
+        "hashed_secret": "7d42cec383d7ee66c627be6815812c4c9812d3b5",
+        "is_secret": false,
+        "is_verified": false,
+        "line_number": 56,
+        "type": "Hex High Entropy String",
+        "verified_result": null
+      }
+    ]
+  },
+  "version": "0.13.1+ibm.62.dss",
+  "word_list": {
+    "file": null,
+    "hash": null
+  }
+}

branch_protection_rules.json

@@ -0,0 +1,12 @@
+[{
+  "type": "branch-protection",
+  "name": "code-review",
+  "params": {
+    "checks": [
+      "tekton/code-branch-protection",
+      "tekton/code-unit-tests",
+      "tekton/code-vulnerability-scan",
+      "tekton/code-detect-secrets"
+    ]
+  }
+}]

galaxy.yml

@@ -83,3 +83,4 @@ build_ignore:
   - venv*
   - ansible_collections
   - '*.log'
+  - .venv

tests/conftest.py

@@ -44,7 +44,7 @@ def ansible_zos_module(request, z_python_interpreter):
     for host in hosts.values():
         host.vars['ansible_python_interpreter'] = interpreter
         host.vars['ansible_port'] = inventory["ansible_port"]
-        host.vars['ansible_ssh_private_key_file'] = "/home/jenkins/.ssh/id_rsa"
+        host.vars['ansible_ssh_private_key_file'] = inventory["ansible_ssh_private_key_file"]
         host.vars['ansible_ssh_extra_args'] = "-o StrictHostKeyChecking=no"
         host.vars['STEPLIB'] = ims_variables["STEPLIB"]
         host.vars['JOB_CARD'] = ims_variables["JOB_CARD"]

tests/helpers/ztest.py

@@ -143,7 +143,7 @@ def get_inventory_info(self):
         """ Returns dictionary containing basic info needed to generate a single-host inventory file. """
         inventory_info = {
             "user": self._user,
-            "inventory": "zdt-ims-cicd1.fyre.ibm.com,",
+            "inventory": f"{self._host},",
             "ansible_port": self._port
         }
         inventory_info.update(self._extra_args)

tests/requirements.txt

@@ -8,8 +8,9 @@ pytest==7.4.2
 shellescape==3.8.1
 pytest_mock==1.12.1
 mock==3.0.5
-# ansible-core==2.15.5
-# pytest-ansible==4.0.0
+ansible-core==2.15.5
+pytest-ansible==4.0.0
 voluptuous==0.12.1
 pylint>=3.0.0
 pycodestyle==2.7.0
+setuptools==60.8.2

yamllint.yaml

@@ -19,4 +19,3 @@ rules:
   new-lines: {type: unix}
   trailing-spaces: disable
   truthy: disable
-