Skip to content

Conversation

@fetsko
Copy link
Contributor

@fetsko fetsko commented Feb 18, 2025

Description

  • updates the sbom action to use the Silkbomb 2.0 image

sbom/action.yml Outdated
run: |
set -eux
if [ -n "${{ inputs.kondukto_sub_project }}" ]; then
KONDUKTO_BRANCH="${GITHUB_REF_NAME}_${{ inputs.kondukto_sub_project }}"
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

append kondukto_sub_project to the branch name if set

sbom/action.yml Outdated
KONDUKTO_BRANCH="${GITHUB_REF_NAME}"
fi
podman run --platform="linux/amd64" -it --rm -v ${RELEASE_ASSETS}:/pwd \
--env-file=${SILKBOMB_ENVFILE} \
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

assumption here is that KONDUKTO_TOKEN is set in the environment file

sbom/action.yml Outdated
name: Augment the SBOM
description: Augments the SBOM for the project
inputs:
# no longer used
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm not familiar w/ GHA, but I assume that removing it would be breaking

@blink1073
Copy link
Member

blink1073 commented Feb 19, 2025

Testing:

@blink1073 blink1073 changed the title Silkbomb 2.0 updates PYTHON-5141 Update SBOM usage for Kondukto Feb 19, 2025
@blink1073 blink1073 requested a review from alcaeus February 19, 2025 17:13
@blink1073 blink1073 marked this pull request as ready for review February 19, 2025 17:13
@blink1073 blink1073 marked this pull request as draft February 19, 2025 17:16
@blink1073 blink1073 marked this pull request as ready for review February 19, 2025 18:45
@jyemin jyemin requested a review from blink1073 February 19, 2025 22:17
@baileympearson
Copy link
Collaborator

Passing in the Node driver: https://github.com/mongodb/node-mongodb-native/actions/runs/13441306933/job/37556182447
Passing in mongodb-client-encryption (which has bundled dependencies. ignore the failing publish step, this is unrelated.): https://github.com/mongodb-js/mongodb-client-encryption/actions/runs/13441413178/job/37557181157

@blink1073 blink1073 merged commit 46329d5 into mongodb-labs:main Feb 20, 2025
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants