Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement OpenScanHub integration prototype #2463

Closed
4 tasks
lbarcziova opened this issue Jul 11, 2024 · 0 comments · Fixed by #2472
Closed
4 tasks

Implement OpenScanHub integration prototype #2463

lbarcziova opened this issue Jul 11, 2024 · 0 comments · Fixed by #2472
Assignees
Labels
area/fedora Related to Fedora ecosystem complexity/single-task Regular task, should be done within days. gain/high This brings a lot of value to (not strictly a lot of) users. impact/low This issue impacts only a few users. kind/feature New feature or a request for enhancement.

Comments

@lbarcziova
Copy link
Member

lbarcziova commented Jul 11, 2024

  • after successful RPM build for rawhide only (somewhere here), call the previously mentioned functionality if there is a job with job:copr_build, trigger:commit, branch: <target branch of the PR> in the config (and if the new config option is set to True)
    • from this job obtain the Copr project name and from that the project's latest SRPM build
  • report the submission of the scan via one new check run/commit status with a successful state and provide the URL of the scan
  • (optionally) post a comment with link to docs/blogpost about this functionality, the comments should not be too intrusive
    • maybe have some limit on the comments, e.g., once per PR or project

For the purposes of the prototype, we don't have to store anything in DB, but the first step can be extending SRPMBuildTargetModel with URL to scan and the final solution would require a more complex DB design (referencing both SRPMs, URL to scan, datetime, ..).

Followup of #2454


Part of #2107

@lbarcziova lbarcziova added kind/feature New feature or a request for enhancement. area/fedora Related to Fedora ecosystem complexity/single-task Regular task, should be done within days. impact/low This issue impacts only a few users. gain/high This brings a lot of value to (not strictly a lot of) users. labels Jul 11, 2024
@lbarcziova lbarcziova self-assigned this Jul 22, 2024
lbarcziova added a commit to lbarcziova/packit-service that referenced this issue Jul 23, 2024
lbarcziova added a commit to lbarcziova/packit-service that referenced this issue Jul 23, 2024
lbarcziova added a commit to lbarcziova/packit-service that referenced this issue Jul 23, 2024
lbarcziova added a commit to lbarcziova/packit-service that referenced this issue Jul 23, 2024
lbarcziova added a commit to lbarcziova/packit-service that referenced this issue Jul 24, 2024
lbarcziova added a commit to lbarcziova/packit-service that referenced this issue Jul 24, 2024
lbarcziova added a commit to lbarcziova/packit-service that referenced this issue Jul 24, 2024
lbarcziova added a commit to lbarcziova/packit-service that referenced this issue Jul 24, 2024
lbarcziova added a commit to lbarcziova/packit-service that referenced this issue Jul 24, 2024
lbarcziova added a commit to lbarcziova/packit-service that referenced this issue Jul 24, 2024
lbarcziova added a commit to lbarcziova/packit-service that referenced this issue Jul 25, 2024
softwarefactory-project-zuul bot added a commit that referenced this issue Jul 25, 2024
Implement OpenScanHub prototype

Fixes #2454
Fixes #2463
TODO:

 docs
 better error handling
 better marketing - adding to news footer,.. - this can be done as a followup after running in prod for a week to see if everything works as expected

RELEASE NOTES BEGIN
We have added the initial version of functionality for running scans in OpenScanHub. You can read more about this functionality
here.
RELEASE NOTES END

Reviewed-by: Siteshwar Vashisht
Reviewed-by: Laura Barcziová
Reviewed-by: Nikola Forró
Reviewed-by: Matej Focko
Reviewed-by: František Lachman <[email protected]>
mfocko added a commit to packit/deployment that referenced this issue Jul 29, 2024
Add the configuration needed for OpenScanHub integration and adjust the
packit-config volume so that the config is being mounted in the
subdirectory along the existing secrets.

Followup of packit/packit-service#2463

This now runs on staging and works.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/fedora Related to Fedora ecosystem complexity/single-task Regular task, should be done within days. gain/high This brings a lot of value to (not strictly a lot of) users. impact/low This issue impacts only a few users. kind/feature New feature or a request for enhancement.
Projects
Archived in project
Development

Successfully merging a pull request may close this issue.

1 participant