blob: 0a412c2409e73207b14a659f0fe5f84ee0b68e38 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
|
---
# SPDX-license-identifier: Apache-2.0
########################
# Job configuration for opnfv-anteater (security audit)
########################
- project:
name: anteaterfw
project: anteaterfw
jobs:
- 'opnfv-security-audit-verify-{stream}'
- 'opnfv-security-audit-weekly-{stream}'
stream:
- master:
branch: '{stream}'
gs-pathname: ''
disabled: false
########################
# job templates
########################
- job-template:
name: 'opnfv-security-audit-weekly-{stream}'
disabled: '{obj:disabled}'
parameters:
- label:
name: SLAVE_LABEL
default: 'ericsson-build3'
description: 'Slave label on Jenkins'
- project-parameter:
project: releng
branch: '{branch}'
triggers:
- timed: '@weekly'
builders:
- anteater-security-audit-weekly
- job-template:
name: 'opnfv-security-audit-verify-{stream}'
disabled: '{obj:disabled}'
parameters:
- label:
name: SLAVE_LABEL
default: 'opnfv-build'
description: 'Slave label on Jenkins'
- project-parameter:
project: $GERRIT_PROJECT
branch: '{branch}'
- string:
name: GIT_BASE
default: https://gerrit.opnfv.org/gerrit/$PROJECT
# yamllint disable rule:line-length
description: "Used for overriding the GIT URL coming from Global Jenkins configuration in case if the stuff is done on none-LF HW."
# yamllint enable rule:line-length
scm:
- git-scm-gerrit
# yamllint disable rule:line-length
triggers:
- gerrit:
server-name: 'gerrit.opnfv.org'
trigger-on:
- patchset-created-event:
exclude-drafts: 'false'
exclude-trivial-rebase: 'false'
exclude-no-code-change: 'false'
- draft-published-event
- comment-added-contains-event:
comment-contains-value: 'recheck'
- comment-added-contains-event:
comment-contains-value: 'reverify'
projects:
- project-compare-type: 'REG_EXP'
project-pattern: 'apex|armband|bamboo|barometer|bottlenecks|calipso|compass4nfv|conductor|cooper|cperf|daisy|doctor|dovetail|dpacc|enfv|escalator|fds|fuel|functest|octopus|pharos|releng|sandbox|yardstick|infra|ipv6|kvmfornfv|lsoapi|models|moon|multisite|netready'
branches:
- branch-compare-type: 'ANT'
branch-pattern: '**/{branch}'
file-paths:
- compare-type: ANT
pattern: '**'
skip-vote:
successful: true
failed: true
unstable: true
notbuilt: true
# yamllint enable rule:line-length
builders:
- anteater-security-audit
- report-security-audit-result-to-gerrit
publishers:
- archive-artifacts:
artifacts: ".reports/*"
########################
# builder macros
########################
- builder:
name: anteater-security-audit
builders:
- shell:
!include-raw: ./anteater-security-audit.sh
- builder:
name: report-security-audit-result-to-gerrit
builders:
- shell:
!include-raw: ./anteater-report-to-gerrit.sh
# yamllint disable rule:indentation
- builder:
name: anteater-security-audit-weekly
builders:
- shell:
!include-raw:
- ./anteater-clone-all-repos.sh
- ./anteater-security-audit-weekly.sh
# yamllint enable rule:indentation
|
