Merge pull request #26 from lcarva/EC-644

Allow usage of the *-oci-ta Task variants
release-engineering · May 20, 2024 · 2b7eb0b · 2b7eb0b
2 parents 31b6ea2 + 18629ab
commit 2b7eb0b
Showing 1 changed file with 47 additions and 41 deletions.
diff --git a/data/required_tasks.yml b/data/required_tasks.yml
@@ -2,6 +2,16 @@
 # https://enterprisecontract.dev/docs/ec-policies/release_policy.html#tasks_package
 pipeline-required-tasks:
   fbc:
+    - effective_on: "2024-06-17T00:00:00Z"
+      tasks:
+        - [buildah, buildah-10gb, buildah-6gb, buildah-8gb, buildah-remote, buildah-oci-ta]
+        - deprecated-image-check
+        - fbc-related-image-check
+        - fbc-validation
+        - [git-clone, git-clone-oci-ta]
+        - init
+        - inspect-image
+        - show-sbom
     - effective_on: "2023-08-31T00:00:00Z"
       tasks:
         - [buildah, buildah-10gb, buildah-6gb, buildah-8gb, buildah-remote]
@@ -14,20 +24,19 @@ pipeline-required-tasks:
         - show-sbom
         - summary
   docker:
-    - effective_on: "2023-12-31T00:00:00Z"
+    - effective_on: "2024-06-17T00:00:00Z"
       tasks:
-        - [buildah, buildah-10gb, buildah-6gb, buildah-8gb, buildah-remote]
+        - [buildah, buildah-10gb, buildah-6gb, buildah-8gb, buildah-remote, buildah-oci-ta]
         - clair-scan
         - clamav-scan
         - deprecated-image-check
-        - git-clone
+        - [git-clone, git-clone-oci-ta]
         - init
-        - prefetch-dependencies
-        - sast-snyk-check
+        - [prefetch-dependencies, prefetch-dependencies-oci-ta]
+        - [sast-snyk-check, sast-snyk-check-oci-ta]
         - show-sbom
-        - source-build
-        - summary
-    - effective_on: "2023-11-11T00:00:00Z"
+        - [source-build, source-build-oci-ta]
+    - effective_on: "2023-12-31T00:00:00Z"
       tasks:
         - [buildah, buildah-10gb, buildah-6gb, buildah-8gb, buildah-remote]
         - clair-scan
@@ -37,24 +46,23 @@ pipeline-required-tasks:
         - init
         - prefetch-dependencies
         - sast-snyk-check
-        - sbom-json-check
         - show-sbom
+        - source-build
         - summary
   generic:
-    - effective_on: "2023-12-31T00:00:00Z"
+    - effective_on: "2024-06-17T00:00:00Z"
       tasks:
-        - [buildah, buildah-10gb, buildah-6gb, buildah-8gb, buildah-remote]
+        - [buildah, buildah-10gb, buildah-6gb, buildah-8gb, buildah-remote, buildah-oci-ta]
         - clair-scan
         - clamav-scan
         - deprecated-image-check
-        - git-clone
+        - [git-clone, git-clone-oci-ta]
         - init
-        - prefetch-dependencies
-        - sast-snyk-check
+        - [prefetch-dependencies, prefetch-dependencies-oci-ta]
+        - [sast-snyk-check, sast-snyk-check-oci-ta]
         - show-sbom
-        - source-build
-        - summary
-    - effective_on: "2023-08-31T00:00:00Z"
+        - [source-build, source-build-oci-ta]
+    - effective_on: "2023-12-31T00:00:00Z"
       tasks:
         - [buildah, buildah-10gb, buildah-6gb, buildah-8gb, buildah-remote]
         - clair-scan
@@ -64,24 +72,23 @@ pipeline-required-tasks:
         - init
         - prefetch-dependencies
         - sast-snyk-check
-        - sbom-json-check
         - show-sbom
+        - source-build
         - summary
   java:
-    - effective_on: "2023-12-31T00:00:00Z"
+    - effective_on: "2024-06-17T00:00:00Z"
       tasks:
         - clair-scan
         - clamav-scan
         - deprecated-image-check
-        - git-clone
+        - [git-clone, git-clone-oci-ta]
         - init
-        - prefetch-dependencies
+        - [prefetch-dependencies, prefetch-dependencies-oci-ta]
         - s2i-java
-        - sast-snyk-check
+        - [sast-snyk-check, sast-snyk-check-oci-ta]
         - show-sbom
-        - source-build
-        - summary
-    - effective_on: "2023-08-31T00:00:00Z"
+        - [source-build, source-build-oci-ta]
+    - effective_on: "2023-12-31T00:00:00Z"
       tasks:
         - clair-scan
         - clamav-scan
@@ -91,24 +98,23 @@ pipeline-required-tasks:
         - prefetch-dependencies
         - s2i-java
         - sast-snyk-check
-        - sbom-json-check
         - show-sbom
+        - source-build
         - summary
   nodejs:
-    - effective_on: "2023-12-31T00:00:00Z"
+    - effective_on: "2024-06-17T00:00:00Z"
       tasks:
         - clair-scan
         - clamav-scan
         - deprecated-image-check
-        - git-clone
+        - [git-clone, git-clone-oci-ta]
         - init
-        - prefetch-dependencies
+        - [prefetch-dependencies, prefetch-dependencies-oci-ta]
         - s2i-nodejs
-        - sast-snyk-check
+        - [sast-snyk-check, sast-snyk-check-oci-ta]
         - show-sbom
-        - source-build
-        - summary
-    - effective_on: "2023-08-31T00:00:00Z"
+        - [source-build, source-build-oci-ta]
+    - effective_on: "2023-12-31T00:00:00Z"
       tasks:
         - clair-scan
         - clamav-scan
@@ -118,28 +124,28 @@ pipeline-required-tasks:
         - prefetch-dependencies
         - s2i-nodejs
         - sast-snyk-check
-        - sbom-json-check
         - show-sbom
+        - source-build
         - summary
 
 # https://enterprisecontract.dev/docs/ec-policies/release_policy.html#tasks_package
 required-tasks:
-  - effective_on: "2023-12-31T00:00:00Z"
+  - effective_on: "2024-06-17T00:00:00Z"
     tasks:
       - clair-scan
       - clamav-scan
-      - git-clone
+      - [git-clone, git-clone-oci-ta]
       - init
-      - prefetch-dependencies
-      - sast-snyk-check
-      - source-build
-      - summary
-  - effective_on: "2023-08-31T00:00:00Z"
+      - [prefetch-dependencies, prefetch-dependencies-oci-ta]
+      - [sast-snyk-check, sast-snyk-check-oci-ta]
+      - [source-build, source-build-oci-ta]
+  - effective_on: "2023-12-31T00:00:00Z"
     tasks:
       - clair-scan
       - clamav-scan
       - git-clone
       - init
       - prefetch-dependencies
       - sast-snyk-check
+      - source-build
       - summary