Skip to content

Commit

Permalink
SRemove service account token from ci-kubernetes-snyk-master Prow job
Browse files Browse the repository at this point in the history
  • Loading branch information
pratik-mahalle committed Jan 5, 2025
1 parent 1e303eb commit 3f4e170
Showing 1 changed file with 4 additions and 31 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,7 @@ periodics:
base_ref: master
path_alias: k8s.io/kubernetes
spec:
automountServiceAccountToken: false
containers:
- image: golang
command:
Expand Down Expand Up @@ -59,10 +60,10 @@ periodics:
done
fi
echo "Build time dependency scan completed"
# container images scan
echo "Fetch the list of k8s images"
curl -Ls https://sbom.k8s.io/$(curl -Ls https://dl.k8s.io/release/latest.txt)/release | grep "SPDXID: SPDXRef-Package-registry.k8s.io" | grep -v sha256 | cut -d- -f3- | sed 's/-/\//' | sed 's/-v1/:v1/' > images
curl -Ls https://sbom.k8s.io/$(curl -Ls https://dl.k8s.io/release/latest.txt)/release | grep "SPDXID: SPDXRef-Package-registry.k8s.io" | grep -v sha256 | cut -d- -f3- | sed 's/-/\//' | sed 's/$/\:latest/' | sort -u > images
while read image; do
echo "Running container image scan.."
EXIT_CODE=0
Expand All @@ -85,32 +86,4 @@ periodics:
testgrid-alert-email: [email protected]
testgrid-num-failures-to-alert: '1'
testgrid-dashboards: sig-security-snyk-scan
description: Run snyk scan on k/k master periodically
- name: auto-refreshing-official-cve-feed
interval: 2h
cluster: k8s-infra-prow-build-trusted
decorate: true
extra_refs:
- org: kubernetes
repo: sig-security
base_ref: main
workdir: true
labels:
preset-service-account: "true"
spec:
serviceAccountName: k8s-cve-feed
containers:
- image: gcr.io/k8s-staging-test-infra/gcloud-in-go:v20230111-cd1b3caf9c
command:
- sh
- "-c"
- "cd sig-security-tooling/cve-feed/hack/ && ./fetch-cve-feed.sh"
env:
- name: CVE_GCS_PATH
value: "gs://k8s-cve-feed"
annotations:
testgrid-create-test-group: "true"
testgrid-alert-email: [email protected]
testgrid-num-failures-to-alert: '1'
testgrid-dashboards: sig-security-cve-feed
description: Auto refreshing official cve feed KEP 3203
description: Run snyk scan on k/k master periodically

0 comments on commit 3f4e170

Please sign in to comment.