azure-pipelines.yml

# Generated from templates/gitops-template/azure-pipelines.yml.njk. Do not edit directly.

pr:
  - main

trigger: none

# Using self-hosted 'Default' agent pool by default
# Change accordingly when using a different agent pool
# Can be deleted if self-hosted agents are not being used
# See https://learn.microsoft.com/en-us/azure/devops/pipelines/agents/agents
pool:
  name: rhtap-testing

container:
  image: quay.io/redhat-user-workloads/rhtap-shared-team-tenant/rhtap-task-runner@sha256:d683c10f8505c70676f99f48180757814e77833e9489ff3392ab865bcd06d5a3
  options: --privileged

# Using 'tssc' variable group by default
# Change accordingly when using a different variable group
# Can be deleted if the variables are set differently
# See https://learn.microsoft.com/en-us/azure/devops/pipelines/process/variables
variables:
  - group: e2e-tests-go-yxkrxglt
  - name: CI_TYPE
    value: azure

steps:
  - bash: |
      echo "• gather-deploy-images"
      bash /work/tssc/gather-deploy-images.sh
      echo "• verify-conforma"
      bash /work/tssc/verify-conforma.sh
    name: Verify_Conforma
    env:
      TRUSTIFICATION_OIDC_CLIENT_SECRET: $(TRUSTIFICATION_OIDC_CLIENT_SECRET)
      # Set this password for your specific registry
      IMAGE_REGISTRY_PASSWORD: $(IMAGE_REGISTRY_PASSWORD)
  - bash: |
      echo "• gather-images-to-upload-sbom"
      bash /work/tssc/gather-images-to-upload-sbom.sh
      echo "• download-sbom-from-url-in-attestation"
      bash /work/tssc/download-sbom-from-url-in-attestation.sh
      echo "• upload-sbom-to-trustification"
      bash /work/tssc/upload-sbom-to-trustification.sh
    name: Upload_SBOM
    env:
      TRUSTIFICATION_OIDC_CLIENT_SECRET: $(TRUSTIFICATION_OIDC_CLIENT_SECRET)
      # Set this password for your specific registry
      IMAGE_REGISTRY_PASSWORD: $(IMAGE_REGISTRY_PASSWORD)