From 569ccb035d820675ab965dffe08605985ac63c4a Mon Sep 17 00:00:00 2001 From: nickshoust-wf Date: Wed, 3 Apr 2024 14:54:22 -0400 Subject: [PATCH 1/4] produce SBOM at end of job --- .github/workflows/dart_ci.yml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/.github/workflows/dart_ci.yml b/.github/workflows/dart_ci.yml index 0a25145..1c5f3d2 100644 --- a/.github/workflows/dart_ci.yml +++ b/.github/workflows/dart_ci.yml @@ -5,10 +5,13 @@ on: branches: - 'master' - 'test_consume_*' + tags: + - '**' pull_request: branches: - '**' + jobs: build: runs-on: ubuntu-latest @@ -34,3 +37,9 @@ jobs: - name: Tests run: dart test --chain-stack-traces + + - name: Generate SBOM + uses: anchore/sbom-action@v0 + with: + path: ./ + format: cyclonedx-json From c6d6853c89024123236bc872b9bde8136fc78ddf Mon Sep 17 00:00:00 2001 From: nickshoust-wf Date: Wed, 3 Apr 2024 14:54:54 -0400 Subject: [PATCH 2/4] remove skynet in favor of GHA status will be required before merging --- skynet.yaml | 13 ------------- 1 file changed, 13 deletions(-) delete mode 100644 skynet.yaml diff --git a/skynet.yaml b/skynet.yaml deleted file mode 100644 index 24e2f10..0000000 --- a/skynet.yaml +++ /dev/null @@ -1,13 +0,0 @@ -name: verify-github-actions -description: Verify that the github actions run passed, this is needed to make pipelines pass without manual intervention -contact: 'Frontend Frameworks Architecture / #support-frontend-architecture' -image: drydock.workiva.net/workiva/skynet-images:3728345 # Uses the image from this branch: https://github.com/Workiva/skynet-images/pull/127 -size: small -timeout: 600 - -env: -# encrypted github token used for requests to api.github.com - - secure: CBiX26J/qZcwLrRYy/wpgb3ZAvyi13w7Xt6S1ds5Zw0o4UcsMFE6JSpqDkMugGQgVM3P+noD5NAUVc/10BnQR5QOv1g= - -scripts: - - python3 /actions/verify_github_actions.py From 875a6582dffb405a718c37f9113d7c352558dd2e Mon Sep 17 00:00:00 2001 From: nickshoust-wf Date: Wed, 3 Apr 2024 14:55:09 -0400 Subject: [PATCH 3/4] deletes dockerfile in favor of GHA --- Dockerfile | 5 ----- 1 file changed, 5 deletions(-) delete mode 100644 Dockerfile diff --git a/Dockerfile b/Dockerfile deleted file mode 100644 index eaf4560..0000000 --- a/Dockerfile +++ /dev/null @@ -1,5 +0,0 @@ -FROM drydock-prod.workiva.net/workiva/dart2_base_image:2 -WORKDIR /build/ -ADD pubspec.yaml . -RUN dart pub get -FROM scratch From e53f4d20ea91d5fe327cd03567871a77d83a02ab Mon Sep 17 00:00:00 2001 From: nickshoust-wf Date: Wed, 3 Apr 2024 15:28:11 -0400 Subject: [PATCH 4/4] slap a newline in for good measure and also to remove the WKB status --- .github/workflows/dart_ci.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/dart_ci.yml b/.github/workflows/dart_ci.yml index 1c5f3d2..81ce290 100644 --- a/.github/workflows/dart_ci.yml +++ b/.github/workflows/dart_ci.yml @@ -43,3 +43,4 @@ jobs: with: path: ./ format: cyclonedx-json +