Add SBOM jsf signing to openjdk_build_pipeline.groovy #1131
Conversation
Thank you for creating a pull request!Please check out the information below if you have not made a pull request here before (or if you need a reminder how things work). Code Quality and Contributing GuidelinesIf you have not done so already, please familiarise yourself with our Contributing Guidelines and Code Of Conduct, even if you have contributed before. TestsGithub actions will run a set of jobs against your PR that will lint and unit test your changes. Keep an eye out for the results from these on the latest commit you submitted. For more information, please see our testing documentation. In order to run the advanced pipeline tests (executing a set of mock pipelines), it requires an admin to post |
|
Could this be done at post build stage as initially we tried to do this in post stage but due to the PEM issue it's blocked. i.e, to sign all sbom files at the post stage. https://github.com/adoptium/ci-jenkins-pipelines/pull/739/files |
|
@Haroon-Khel linter failures |
| @@ -1054,6 +1054,49 @@ class Build { | |||
| } | |||
| } | |||
| } | |||
|
|
|||
| // Kick off the sign_temurin_jsf job to sign the SBOM | |||
There was a problem hiding this comment.
From the JSON vs XML discussion we've just had, we probably ought to call this job something slightly different... maybe simply sign_SBOM...
For the moment, we can have the XML discussion before we decide.
ref adoptium/temurin-build#3946
Code to run the (incomplete) https://ci.adoptium.net/job/build-scripts/job/release/job/sign_temurin_jsf/ job which signs the SBOM using https://github.com/adoptium/temurin-build/blob/master/cyclonedx-lib/sign_src/TemurinSignSBOM.java
On line 1866 it should archive the
temurin-sign-sbom.jarso that it can be used later to sign the SBOM on the eclipse worker node. The artifact should get copied over during the sign_temurin_jsf jobLines 1057 to 1094 is just the gpgSign() function repeated for the sign_temurin_jsf job
This pr is together with adoptium/temurin-build#4017