Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: disable circleci audit-licenses and license-scan #54

Merged
merged 1 commit into from
Mar 9, 2021
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
70 changes: 36 additions & 34 deletions .circleci/config.yml
Original file line number Diff line number Diff line change
Expand Up @@ -35,11 +35,12 @@ defaults_awsCliDependencies: &defaults_awsCliDependencies |
mailcap
pip3 install --upgrade pip awscli==1.14.5 s3cmd==2.0.1 python-magic

defaults_license_scanner: &defaults_license_scanner
name: Install and set up license-scanner
command: |
git clone https://github.com/mojaloop/license-scanner /tmp/license-scanner
cd /tmp/license-scanner && make build default-files set-up
# temporarily disabled as api-snippets is not compatible with existing license policy
# defaults_license_scanner: &defaults_license_scanner
# name: Install and set up license-scanner
# command: |
# git clone https://github.com/mojaloop/license-scanner /tmp/license-scanner
# cd /tmp/license-scanner && make build default-files set-up

##
# Executors
Expand Down Expand Up @@ -260,7 +261,7 @@ jobs:
- store_artifacts:
path: ./audit/results

# temporarily disbaled as api-snippets is not compatible with existing license policy
# temporarily disabled as api-snippets is not compatible with existing license policy
# audit-licenses:
# executor: default-docker
# steps:
Expand Down Expand Up @@ -399,22 +400,23 @@ jobs:
fail_only: true
webhook: "$SLACK_WEBHOOK_ANNOUNCMENT_CI_CD"
failure_message: 'Publishing docker image failed for: \`"${DOCKER_ORG}/${CIRCLE_PROJECT_REPONAME}:${CIRCLE_TAG}"\`'

license-scan:
executor: default-machine
steps:
- attach_workspace:
at: /tmp
- run:
name: Load the pre-built docker-image.tar local image from workspace
command: docker load -i /tmp/docker-image.tar
- run:
<<: *defaults_license_scanner
- run:
name: Run the license-scanner
command: cd /tmp/license-scanner && mode=docker dockerImages=$DOCKER_ORG/$CIRCLE_PROJECT_REPONAME:local make run
- store_artifacts:
path: /tmp/license-scanner/results

# temporarily disabled as api-snippets is not compatible with existing license policy
# license-scan:
# executor: default-machine
# steps:
# - attach_workspace:
# at: /tmp
# - run:
# name: Load the pre-built docker-image.tar local image from workspace
# command: docker load -i /tmp/docker-image.tar
# - run:
# <<: *defaults_license_scanner
# - run:
# name: Run the license-scanner
# command: cd /tmp/license-scanner && mode=docker dockerImages=$DOCKER_ORG/$CIRCLE_PROJECT_REPONAME:local make run
# - store_artifacts:
# path: /tmp/license-scanner/results

image-scan:
executor: anchore/anchore_engine
Expand Down Expand Up @@ -550,16 +552,16 @@ workflows:
tags:
only: /.*/

- license-scan:
context: org-global
requires:
- build-local
filters:
tags:
only: /.*/
branches:
only:
- master
# - license-scan:
# context: org-global
# requires:
# - build-local
# filters:
# tags:
# only: /.*/
# branches:
# only:
# - master

# TODO: redis related vulnerabilities found
# they are related to external dependency so there is a need for proper action, more info here:
Expand Down Expand Up @@ -588,7 +590,7 @@ workflows:
- linting-check
- vulnerability-check
# - image-scan
- license-scan
# - license-scan
filters:
branches:
only:
Expand All @@ -608,7 +610,7 @@ workflows:
- publish:
context: org-global
requires:
- license-scan
# - license-scan
# - image-scan
- test-unit
- test-coverage
Expand Down