Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[SBOM] Add information about the build environment / runner #3534

Closed
netomi opened this issue Nov 14, 2023 · 3 comments
Closed

[SBOM] Add information about the build environment / runner #3534

netomi opened this issue Nov 14, 2023 · 3 comments
Assignees
Labels
ansible Issues related to our ansible playbooks in the infrastructure repo docker Issues related to our docker files and docker scripts enhancement Issues that enhance the code or documentation of the repo in any way jenkins Issues that enhance or fix our jenkins server

Comments

@netomi
Copy link
Contributor

netomi commented Nov 14, 2023

Adding information about the jenkins runner itself that executes the build would allow to identify the exact build environment that has been used during a build.

The idea would be to include information like:

  • docker image with digest that is being used to spin up the runner
  • ansible playbook that was used to build the docker image (might not be needed if we have the above)
@netomi netomi added the enhancement Issues that enhance the code or documentation of the repo in any way label Nov 14, 2023
@github-actions github-actions bot added ansible Issues related to our ansible playbooks in the infrastructure repo docker Issues related to our docker files and docker scripts jenkins Issues that enhance or fix our jenkins server labels Nov 14, 2023
@sxa
Copy link
Member

sxa commented Nov 14, 2023

Noting that for the LInux builds, the digest is already included e.g.

      {
        "name" : "Docker image SHA1",
        "version" : "adoptopenjdk/centos6_build_image@sha256:c3e6eb8bb1067568ca63929b75e1fb8ddcb7cbe3b12699811cc81e2233d33e59"
      }

@sxa
Copy link
Member

sxa commented Nov 14, 2023

We could add the contents of the NODE_NAME environment variable too.

@sxa
Copy link
Member

sxa commented Dec 5, 2023

I believe this is good to close with the above PR

@sxa sxa closed this as completed Dec 5, 2023
@sxa sxa self-assigned this Dec 5, 2023
@sxa sxa moved this to Done in Adoptium 4Q 2023 Plan Dec 5, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
ansible Issues related to our ansible playbooks in the infrastructure repo docker Issues related to our docker files and docker scripts enhancement Issues that enhance the code or documentation of the repo in any way jenkins Issues that enhance or fix our jenkins server
Projects
No open projects
Status: Done
Development

No branches or pull requests

2 participants