From 43c202082c5d66d6d49a7286c1395163b0b771e4 Mon Sep 17 00:00:00 2001 From: Alex Fenlon Date: Mon, 13 Oct 2025 16:47:48 +0100 Subject: [PATCH] Remove assertion doc from CI --- .github/workflows/build-artifacts.yml | 136 +++++++++++++------------- 1 file changed, 68 insertions(+), 68 deletions(-) diff --git a/.github/workflows/build-artifacts.yml b/.github/workflows/build-artifacts.yml index 90eb113f87..c5144eec28 100644 --- a/.github/workflows/build-artifacts.yml +++ b/.github/workflows/build-artifacts.yml @@ -115,80 +115,80 @@ jobs: key: nginx-ingress-${{ inputs.go-md5 }} if: ${{ inputs.force }} - generate-assertion-doc: - if: ${{ github.event_name != 'pull_request' }} - name: Assertion Doc ${{ matrix.nic.arch }} - needs: [binaries] - runs-on: ${{ inputs.runner }} - permissions: - contents: read - id-token: write # for compliance-rules action to sign assertion doc - strategy: - fail-fast: false - matrix: - nic: ${{ fromJSON( needs.binaries.outputs.json ) }} - steps: - - name: Checkout Repository - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - with: - ref: ${{ inputs.branch }} + # generate-assertion-doc: + # if: ${{ github.event_name != 'pull_request' }} + # name: Assertion Doc ${{ matrix.nic.arch }} + # needs: [binaries] + # runs-on: ${{ inputs.runner }} + # permissions: + # contents: read + # id-token: write # for compliance-rules action to sign assertion doc + # strategy: + # fail-fast: false + # matrix: + # nic: ${{ fromJSON( needs.binaries.outputs.json ) }} + # steps: + # - name: Checkout Repository + # uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + # with: + # ref: ${{ inputs.branch }} - - name: Setup Golang Environment - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 - with: - go-version-file: go.mod + # - name: Setup Golang Environment + # uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 + # with: + # go-version-file: go.mod - - name: Setup netrc - run: | - cat < $HOME/.netrc - machine azr.artifactory.f5net.com - login ${{ secrets.ARTIFACTORY_USER }} - password ${{ secrets.ARTIFACTORY_TOKEN }} - EOF - chmod 600 $HOME/.netrc + # - name: Setup netrc + # run: | + # cat < $HOME/.netrc + # machine azr.artifactory.f5net.com + # login ${{ secrets.ARTIFACTORY_USER }} + # password ${{ secrets.ARTIFACTORY_TOKEN }} + # EOF + # chmod 600 $HOME/.netrc - - name: Fetch Cached Artifacts - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 - with: - path: ${{ github.workspace }}/dist - key: nginx-ingress-${{ inputs.go-md5 }} - fail-on-cache-miss: true + # - name: Fetch Cached Artifacts + # uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 + # with: + # path: ${{ github.workspace }}/dist + # key: nginx-ingress-${{ inputs.go-md5 }} + # fail-on-cache-miss: true - - name: List packages in Go binary - id: godeps - env: - GOPATH: ${{ inputs.go-path }} - GOPROXY: ${{ inputs.go-proxy }} - run: | - go version -m ${{ matrix.nic.path }} > go_version_out_${{ github.run_id }}_${{ github.run_number }}.txt - echo "go_version_out=$(find -type f -name "go_version_out*.txt" | head -n 1)" >> $GITHUB_OUTPUT - echo "artifact_digest=$(openssl dgst -sha256 -r ${{ matrix.nic.path }} | cut -d ' ' -f 1)" >> $GITHUB_OUTPUT - cat $GITHUB_OUTPUT + # - name: List packages in Go binary + # id: godeps + # env: + # GOPATH: ${{ inputs.go-path }} + # GOPROXY: ${{ inputs.go-proxy }} + # run: | + # go version -m ${{ matrix.nic.path }} > go_version_out_${{ github.run_id }}_${{ github.run_number }}.txt + # echo "go_version_out=$(find -type f -name "go_version_out*.txt" | head -n 1)" >> $GITHUB_OUTPUT + # echo "artifact_digest=$(openssl dgst -sha256 -r ${{ matrix.nic.path }} | cut -d ' ' -f 1)" >> $GITHUB_OUTPUT + # cat $GITHUB_OUTPUT - - name: Generate Assertion Document - id: assertiondoc - uses: nginxinc/compliance-rules/.github/actions/assertion@83e452166aaf0ad8f07caf91a4f1f903b3dea1e6 # v0.3.0 - with: - artifact-name: "${{ github.event.repository.name }}_${{ github.sha }}_${{ github.run_number }}_${{ matrix.nic.os }}_${{ matrix.nic.arch }}" - artifact-digest: ${{ steps.godeps.outputs.artifact_digest }} - build-type: "github.com" - builder-id: "github" - builder-version: v0.1.0 - started-on: ${{ github.event.head_commit.timestamp || github.event.created_at }} - finished-on: ${{ github.event.head_commit.timestamp || github.event.created_at }} - invocation-id: ${{ github.run_id }}.${{ github.run_number }}.${{ github.run_attempt }} - artifactory-user: ${{ secrets.ARTIFACTORY_USER }} - artifactory-api-token: ${{ secrets.ARTIFACTORY_TOKEN }} - artifactory-url: ${{ secrets.ARTIFACTORY_URL }} - artifactory-repo: 'f5-nginx-go-local-approved-dependency' - assertion-doc-file: assertion_${{ github.event.repository.name }}_${{ github.sha }}_${{ github.run_id }}_${{ github.run_number }}_${{ matrix.nic.os }}_${{ matrix.nic.arch }}.json - build-content-path: ${{ steps.godeps.outputs.go_version_out }} + # - name: Generate Assertion Document + # id: assertiondoc + # uses: nginxinc/compliance-rules/.github/actions/assertion@83e452166aaf0ad8f07caf91a4f1f903b3dea1e6 # v0.3.0 + # with: + # artifact-name: "${{ github.event.repository.name }}_${{ github.sha }}_${{ github.run_number }}_${{ matrix.nic.os }}_${{ matrix.nic.arch }}" + # artifact-digest: ${{ steps.godeps.outputs.artifact_digest }} + # build-type: "github.com" + # builder-id: "github" + # builder-version: v0.1.0 + # started-on: ${{ github.event.head_commit.timestamp || github.event.created_at }} + # finished-on: ${{ github.event.head_commit.timestamp || github.event.created_at }} + # invocation-id: ${{ github.run_id }}.${{ github.run_number }}.${{ github.run_attempt }} + # artifactory-user: ${{ secrets.ARTIFACTORY_USER }} + # artifactory-api-token: ${{ secrets.ARTIFACTORY_TOKEN }} + # artifactory-url: ${{ secrets.ARTIFACTORY_URL }} + # artifactory-repo: 'f5-nginx-go-local-approved-dependency' + # assertion-doc-file: assertion_${{ github.event.repository.name }}_${{ github.sha }}_${{ github.run_id }}_${{ github.run_number }}_${{ matrix.nic.os }}_${{ matrix.nic.arch }}.json + # build-content-path: ${{ steps.godeps.outputs.go_version_out }} - - name: Sign and Store Assertion Document - id: sign - uses: nginxinc/compliance-rules/.github/actions/sign@83e452166aaf0ad8f07caf91a4f1f903b3dea1e6 # v0.3.0 - with: - assertion-doc: ${{ steps.assertiondoc.outputs.assertion-document-path }} + # - name: Sign and Store Assertion Document + # id: sign + # uses: nginxinc/compliance-rules/.github/actions/sign@83e452166aaf0ad8f07caf91a4f1f903b3dea1e6 # v0.3.0 + # with: + # assertion-doc: ${{ steps.assertiondoc.outputs.assertion-document-path }} build-docker: name: Build Docker OSS