Skip to content

Remove assertion doc from CI #8422

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Oct 14, 2025
Merged

Remove assertion doc from CI #8422

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
43c2020
Remove assertion doc from CI
AlexFenlon Oct 13, 2025
fa2f9b7
Merge branch 'main' into chore/remove-assertion-doc
AlexFenlon Oct 14, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
136 changes: 68 additions & 68 deletions .github/workflows/build-artifacts.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -115,80 +115,80 @@ jobs:
key: nginx-ingress-${{ inputs.go-md5 }}
if: ${{ inputs.force }}

generate-assertion-doc:
if: ${{ github.event_name != 'pull_request' }}
name: Assertion Doc ${{ matrix.nic.arch }}
needs: [binaries]
runs-on: ${{ inputs.runner }}
permissions:
contents: read
id-token: write # for compliance-rules action to sign assertion doc
strategy:
fail-fast: false
matrix:
nic: ${{ fromJSON( needs.binaries.outputs.json ) }}
steps:
- name: Checkout Repository
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
with:
ref: ${{ inputs.branch }}
# generate-assertion-doc:
# if: ${{ github.event_name != 'pull_request' }}
# name: Assertion Doc ${{ matrix.nic.arch }}
# needs: [binaries]
# runs-on: ${{ inputs.runner }}
# permissions:
# contents: read
# id-token: write # for compliance-rules action to sign assertion doc
# strategy:
# fail-fast: false
# matrix:
# nic: ${{ fromJSON( needs.binaries.outputs.json ) }}
# steps:
# - name: Checkout Repository
# uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
# with:
# ref: ${{ inputs.branch }}

- name: Setup Golang Environment
uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
with:
go-version-file: go.mod
# - name: Setup Golang Environment
# uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
# with:
# go-version-file: go.mod

- name: Setup netrc
run: |
cat <<EOF > $HOME/.netrc
machine azr.artifactory.f5net.com
login ${{ secrets.ARTIFACTORY_USER }}
password ${{ secrets.ARTIFACTORY_TOKEN }}
EOF
chmod 600 $HOME/.netrc
# - name: Setup netrc
# run: |
# cat <<EOF > $HOME/.netrc
# machine azr.artifactory.f5net.com
# login ${{ secrets.ARTIFACTORY_USER }}
# password ${{ secrets.ARTIFACTORY_TOKEN }}
# EOF
# chmod 600 $HOME/.netrc

- name: Fetch Cached Artifacts
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
with:
path: ${{ github.workspace }}/dist
key: nginx-ingress-${{ inputs.go-md5 }}
fail-on-cache-miss: true
# - name: Fetch Cached Artifacts
# uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
# with:
# path: ${{ github.workspace }}/dist
# key: nginx-ingress-${{ inputs.go-md5 }}
# fail-on-cache-miss: true

- name: List packages in Go binary
id: godeps
env:
GOPATH: ${{ inputs.go-path }}
GOPROXY: ${{ inputs.go-proxy }}
run: |
go version -m ${{ matrix.nic.path }} > go_version_out_${{ github.run_id }}_${{ github.run_number }}.txt
echo "go_version_out=$(find -type f -name "go_version_out*.txt" | head -n 1)" >> $GITHUB_OUTPUT
echo "artifact_digest=$(openssl dgst -sha256 -r ${{ matrix.nic.path }} | cut -d ' ' -f 1)" >> $GITHUB_OUTPUT
cat $GITHUB_OUTPUT
# - name: List packages in Go binary
# id: godeps
# env:
# GOPATH: ${{ inputs.go-path }}
# GOPROXY: ${{ inputs.go-proxy }}
# run: |
# go version -m ${{ matrix.nic.path }} > go_version_out_${{ github.run_id }}_${{ github.run_number }}.txt
# echo "go_version_out=$(find -type f -name "go_version_out*.txt" | head -n 1)" >> $GITHUB_OUTPUT
# echo "artifact_digest=$(openssl dgst -sha256 -r ${{ matrix.nic.path }} | cut -d ' ' -f 1)" >> $GITHUB_OUTPUT
# cat $GITHUB_OUTPUT

- name: Generate Assertion Document
id: assertiondoc
uses: nginxinc/compliance-rules/.github/actions/assertion@83e452166aaf0ad8f07caf91a4f1f903b3dea1e6 # v0.3.0
with:
artifact-name: "${{ github.event.repository.name }}_${{ github.sha }}_${{ github.run_number }}_${{ matrix.nic.os }}_${{ matrix.nic.arch }}"
artifact-digest: ${{ steps.godeps.outputs.artifact_digest }}
build-type: "github.com"
builder-id: "github"
builder-version: v0.1.0
started-on: ${{ github.event.head_commit.timestamp || github.event.created_at }}
finished-on: ${{ github.event.head_commit.timestamp || github.event.created_at }}
invocation-id: ${{ github.run_id }}.${{ github.run_number }}.${{ github.run_attempt }}
artifactory-user: ${{ secrets.ARTIFACTORY_USER }}
artifactory-api-token: ${{ secrets.ARTIFACTORY_TOKEN }}
artifactory-url: ${{ secrets.ARTIFACTORY_URL }}
artifactory-repo: 'f5-nginx-go-local-approved-dependency'
assertion-doc-file: assertion_${{ github.event.repository.name }}_${{ github.sha }}_${{ github.run_id }}_${{ github.run_number }}_${{ matrix.nic.os }}_${{ matrix.nic.arch }}.json
build-content-path: ${{ steps.godeps.outputs.go_version_out }}
# - name: Generate Assertion Document
# id: assertiondoc
# uses: nginxinc/compliance-rules/.github/actions/assertion@83e452166aaf0ad8f07caf91a4f1f903b3dea1e6 # v0.3.0
# with:
# artifact-name: "${{ github.event.repository.name }}_${{ github.sha }}_${{ github.run_number }}_${{ matrix.nic.os }}_${{ matrix.nic.arch }}"
# artifact-digest: ${{ steps.godeps.outputs.artifact_digest }}
# build-type: "github.com"
# builder-id: "github"
# builder-version: v0.1.0
# started-on: ${{ github.event.head_commit.timestamp || github.event.created_at }}
# finished-on: ${{ github.event.head_commit.timestamp || github.event.created_at }}
# invocation-id: ${{ github.run_id }}.${{ github.run_number }}.${{ github.run_attempt }}
# artifactory-user: ${{ secrets.ARTIFACTORY_USER }}
# artifactory-api-token: ${{ secrets.ARTIFACTORY_TOKEN }}
# artifactory-url: ${{ secrets.ARTIFACTORY_URL }}
# artifactory-repo: 'f5-nginx-go-local-approved-dependency'
# assertion-doc-file: assertion_${{ github.event.repository.name }}_${{ github.sha }}_${{ github.run_id }}_${{ github.run_number }}_${{ matrix.nic.os }}_${{ matrix.nic.arch }}.json
# build-content-path: ${{ steps.godeps.outputs.go_version_out }}

- name: Sign and Store Assertion Document
id: sign
uses: nginxinc/compliance-rules/.github/actions/sign@83e452166aaf0ad8f07caf91a4f1f903b3dea1e6 # v0.3.0
with:
assertion-doc: ${{ steps.assertiondoc.outputs.assertion-document-path }}
# - name: Sign and Store Assertion Document
# id: sign
# uses: nginxinc/compliance-rules/.github/actions/sign@83e452166aaf0ad8f07caf91a4f1f903b3dea1e6 # v0.3.0
# with:
# assertion-doc: ${{ steps.assertiondoc.outputs.assertion-document-path }}

build-docker:
name: Build Docker OSS
Expand Down
Loading