119 lines
3.4 KiB
YAML
119 lines
3.4 KiB
YAML
stages:
|
|
- generate-api-clients
|
|
- build
|
|
|
|
variables:
|
|
REGISTRY: devnexus.krohne.com:18079/repository/docker-krohne
|
|
IMAGE_NAME: $REGISTRY/$CI_PROJECT_NAME
|
|
DTRACK_API_URL: https://dtrack-api-rd.krohne.com
|
|
DEFECTDOJO_API_URL: https://defectdojo-rd.krohne.com
|
|
KROHNE_CA_URL: https://devwiki.krohnegroup.com/lib/exe/fetch.php?media=krohne-ca.crt
|
|
KROHNE_CA_CHECKSUM: a921e440a742f1e67c7714306e2c0d76
|
|
|
|
.generate-api:
|
|
stage: generate-api-clients
|
|
image: openapitools/openapi-generator-cli:v7.12.0
|
|
tags:
|
|
- linux
|
|
- docker
|
|
- bash
|
|
rules:
|
|
- if: '$CI_COMMIT_BRANCH == "main"'
|
|
- if: '$CI_COMMIT_TAG'
|
|
before_script:
|
|
- curl --insecure $KROHNE_CA_URL -o krohne-ca.crt
|
|
- echo "$KROHNE_CA_CHECKSUM krohne-ca.crt" | md5sum -c
|
|
- mv krohne-ca.crt /usr/local/share/ca-certificates
|
|
- update-ca-certificates
|
|
|
|
|
|
generate-dtrack-api:
|
|
extends: .generate-api
|
|
artifacts:
|
|
paths:
|
|
- dependencytrack-client
|
|
expire_in: 1 week
|
|
script:
|
|
- curl ${DTRACK_API_URL}/api/openapi.json > dependencytrack-openapi.json
|
|
- |
|
|
docker-entrypoint.sh \
|
|
author template \
|
|
-g python \
|
|
-o dependencytrack-openapi-custom-template
|
|
- sed -i 's/import re/import regex as re/' dependencytrack-openapi-custom-template/model_anyof.mustache
|
|
- sed -i 's/import re/import regex as re/' dependencytrack-openapi-custom-template/model_generic.mustache
|
|
- |
|
|
docker-entrypoint.sh \
|
|
generate \
|
|
-i dependencytrack-openapi.json \
|
|
-g python \
|
|
-o dependencytrack-client \
|
|
--package-name dependencytrack_api \
|
|
-t dependencytrack-openapi-custom-template
|
|
|
|
|
|
generate-defectdojo-api:
|
|
extends: .generate-api
|
|
artifacts:
|
|
paths:
|
|
- defectdojo-client
|
|
expire_in: 1 week
|
|
script:
|
|
- curl ${DEFECTDOJO_API_URL}/api/v2/oa3/schema/?format=json > defectdojo-openapi.json
|
|
- |
|
|
docker-entrypoint.sh \
|
|
generate \
|
|
-i defectdojo-openapi.json \
|
|
-g python \
|
|
-o defectdojo-client \
|
|
--package-name defectdojo_api
|
|
|
|
dockerize:
|
|
stage: build
|
|
image: devnexus.krohne.com:18079/repository/docker-krohne/krohnedockerbash:0.5
|
|
tags:
|
|
- linux
|
|
- docker
|
|
- bash
|
|
rules:
|
|
- if: '$CI_COMMIT_TAG'
|
|
script:
|
|
- docker build --build-arg ADDITIONAL_CA_URL="$KROHNE_CA_URL"
|
|
--build-arg ADDITIONAL_CA_CHECKSUM=$KROHNE_CA_CHECKSUM
|
|
--tag $IMAGE_NAME:latest
|
|
--tag $IMAGE_NAME:$CI_COMMIT_SHA
|
|
--tag $IMAGE_NAME:$CI_COMMIT_TAG
|
|
.
|
|
- docker login -u $NEXUS_USER -p $NEXUS_PASSWORD $REGISTRY
|
|
- docker push $IMAGE_NAME:latest
|
|
- docker push $IMAGE_NAME:$CI_COMMIT_SHA
|
|
- docker push $IMAGE_NAME:$CI_COMMIT_TAG
|
|
|
|
build-windows-binary:
|
|
stage: build
|
|
tags:
|
|
- windows
|
|
- pwsh
|
|
- python3.13
|
|
rules:
|
|
- if: '$CI_COMMIT_TAG'
|
|
artifacts:
|
|
paths:
|
|
- sbom-dt-dd.exe
|
|
script:
|
|
- dir
|
|
- |
|
|
cd src
|
|
mv dependencytrack-client .\src
|
|
mv defectdojo-client .\src
|
|
& 'C:\Program Files\Python313\python.exe' -m venv venv
|
|
.\venv\Scripts\pip.exe install --upgrade pip
|
|
.\venv\Scripts\pip.exe install -r requirements.txt
|
|
.\venv\Scripts\pip.exe install -r dependencytrack-client\requirements.txt
|
|
.\venv\Scripts\pip.exe install -r defectdojo-client\requirements.txt
|
|
.\venv\Scripts\pip.exe install pyinstaller
|
|
.\venv\Scripts\pyinstaller.exe --onefile sbom-dt-dd.py
|
|
mv dist\sbom-dt-dd.exe ..
|
|
|
|
|