Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add SBOMS generated as artifacts in "canary" build #43343

Open
potiuk opened this issue Oct 24, 2024 · 0 comments
Open

Add SBOMS generated as artifacts in "canary" build #43343

potiuk opened this issue Oct 24, 2024 · 0 comments
Labels
area:CI Airflow's tests and continious integration area:dev-env CI, pre-commit, pylint and other changes that do not change the behavior of the final code

Comments

@potiuk
Copy link
Member

potiuk commented Oct 24, 2024

Currently, we have "sbom" generation done as part of the release. But it does not happen when "canary" build is executed in main. And @raboof - the Security Response engineer from the ASF is now building automation and exposure of the SBOMs for all ASF projects, so they are interested in being able to retrieve SBOMS from our main build automatically.

We should restore #41931 "Publish docs" scheme and add "update-sbom" command to include SBOM generation from main - so that it can be published in our test site. It should be as easy as running single command during doc publishing and likely fixing it so that it works with main constraints rather than only with released versions.

This is basically the command run to generted SBOM (and here support for main should be added if it does not work:

breeze sbom update-sbom-information --airflow-version ${VERSION} --airflow-site-directory ${AIRFLOW_SITE_DIRECTORY} --force --all-combinations --run-in-parallel

The actual step in release process for that is https://github.com/apache/airflow/blob/main/dev/README_RELEASE_AIRFLOW.md#publish-documentation

@potiuk potiuk converted this from a draft issue Oct 24, 2024
@potiuk potiuk changed the title Addd SBOMS generated as artifacts in "canary" build Add SBOMS generated as artifacts in "canary" build Oct 24, 2024
@dosubot dosubot bot added area:CI Airflow's tests and continious integration area:dev-env CI, pre-commit, pylint and other changes that do not change the behavior of the final code labels Oct 24, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area:CI Airflow's tests and continious integration area:dev-env CI, pre-commit, pylint and other changes that do not change the behavior of the final code
Projects
Status: Ready
Development

No branches or pull requests

1 participant