ARTESCA-14946: Publish the shell-ui SBOM by rdebay-scality · Pull Request #4553 · scality/metalk8s

rdebay-scality · 2025-03-31T15:07:06Z

Build the Software Bill of Material (SBOM) for shell-ui during pre-merge using SYFT. Publish it next to the shell ui tarball in the github release.

This is to be used in the RING as part of the RING SBOM.

CI:

Context: In order to build SBOM of the RING, we need to get the SBOM from all its component. Since shell-ui is used in this repository, we need to deliver an SBOM for this tool.

Summary:

Build the SBOM
Release it

Acceptance criteria: SBOM ids built and released

Closes: ARTESCA-14946
See: RING-49709

bert-e · 2025-03-31T15:07:10Z

Hello rdebay-scality,

My role is to assist you with the merge of this
pull request. Please type @bert-e help to get information
on this process, or consult the user documentation.

Available options

name	description	privileged	authored
`/after_pull_request`	Wait for the given pull request id to be merged before continuing with the current one.
`/bypass_author_approval`	Bypass the pull request author's approval	⭐
`/bypass_build_status`	Bypass the build and test status	⭐
`/bypass_commit_size`	Bypass the check on the size of the changeset `TBA`	⭐
`/bypass_incompatible_branch`	Bypass the check on the source branch prefix	⭐
`/bypass_jira_check`	Bypass the Jira issue check	⭐
`/bypass_peer_approval`	Bypass the pull request peers' approval	⭐
`/bypass_leader_approval`	Bypass the pull request leaders' approval	⭐
`/approve`	Instruct Bert-E that the author has approved the pull request.		✍️
`/create_pull_requests`	Allow the creation of integration pull requests.
`/create_integration_branches`	Allow the creation of integration branches.
`/no_octopus`	Prevent Wall-E from doing any octopus merge and use multiple consecutive merge instead
`/unanimity`	Change review acceptance criteria from `one reviewer at least` to `all reviewers`
`/wait`	Instruct Bert-E not to run until further notice.

Available commands

name	description	privileged
`/help`	Print Bert-E's manual in the pull request.
`/status`	Print Bert-E's current status in the pull request `TBA`
`/clear`	Remove all comments from Bert-E from the history `TBA`
`/retry`	Re-start a fresh build `TBA`
`/build`	Re-start a fresh build `TBA`
`/force_reset`	Delete integration branches & pull requests, and restart merge process from the beginning.
`/reset`	Try to remove integration branches unless there are commits on them which do not appear on the source branch.

Status report is not available.

bert-e · 2025-03-31T15:07:17Z

Waiting for approval

The following approvals are needed before I can proceed with the merge:

the author
one peer

Peer approvals must include at least 1 approval from the following list:

bert-e · 2025-04-01T07:55:46Z

Waiting for approval

The following approvals are needed before I can proceed with the merge:

the author
one peer

Peer approvals must include at least 1 approval from the following list:

.github/workflows/publish.yaml

bert-e · 2025-04-03T08:14:41Z

Waiting for approval

The following approvals are needed before I can proceed with the merge:

the author
one peer

Peer approvals must include at least 1 approval from the following list:

.github/workflows/publish.yaml

bert-e · 2025-04-04T12:17:57Z

Waiting for approval

The following approvals are needed before I can proceed with the merge:

the author
one peer

Peer approvals must include at least 1 approval from the following list:

.github/workflows/publish.yaml

bert-e · 2025-04-14T08:15:17Z

Waiting for approval

The following approvals are needed before I can proceed with the merge:

the author
one peer

Peer approvals must include at least 1 approval from the following list:

JBWatenbergScality · 2025-04-14T08:15:23Z

/status

bert-e · 2025-04-14T08:15:27Z

Status

Status report is not available.

bert-e · 2025-04-14T08:15:35Z

Waiting for approval

The following approvals are needed before I can proceed with the merge:

the author
one peer

Peer approvals must include at least 1 approval from the following list:

Build the Software Bill of Material (SBOM) for shell-ui during pre-merge using SYFT. Publish it next to the shell ui tarball in the github release. This is to be used in the RING as part of the RING SBOM. See RING-49709.

bert-e · 2025-04-15T13:42:07Z

Waiting for approval

The following approvals are needed before I can proceed with the merge:

the author
one peer

Peer approvals must include at least 1 approval from the following list:

rdebay-scality · 2025-04-15T16:00:15Z

/approve

bert-e · 2025-04-15T16:00:26Z

In the queue

The changeset has received all authorizations and has been added to the
relevant queue(s). The queue(s) will be merged in the target development
branch(es) as soon as builds have passed.

The changeset will be merged in:

✔️ development/130.0

The following branches will NOT be impacted:

development/123.0
development/124.0
development/124.1
development/125.0
development/126.0
development/127.0
development/128.0
development/129.0
development/2.0
development/2.1
development/2.10
development/2.11
development/2.2
development/2.3
development/2.4
development/2.5
development/2.6
development/2.7
development/2.8
development/2.9

There is no action required on your side. You will be notified here once
the changeset has been merged. In the unlikely event that the changeset
fails permanently on the queue, a member of the admin team will
contact you to help resolve the matter.

IMPORTANT

Please do not attempt to modify this pull request.

Any commit you add on the source branch will trigger a new cycle after the
current queue is merged.
Any commit you add on one of the integration branches will be lost.

If you need this pull request to be removed from the queue, please contact a
member of the admin team now.

The following options are set: approve

bert-e · 2025-04-16T07:20:03Z

I have successfully merged the changeset of this pull request
into targetted development branches:

✔️ development/130.0

The following branches have NOT changed:

development/123.0
development/124.0
development/124.1
development/125.0
development/126.0
development/127.0
development/128.0
development/129.0
development/2.0
development/2.1
development/2.10
development/2.11
development/2.2
development/2.3
development/2.4
development/2.5
development/2.6
development/2.7
development/2.8
development/2.9

Please check the status of the associated issue ARTESCA-14946.

Goodbye rdebay-scality.

rdebay-scality requested a review from a team as a code owner March 31, 2025 15:07

rdebay-scality requested a review from JBWatenbergScality March 31, 2025 15:07

rdebay-scality self-assigned this Mar 31, 2025

rdebay-scality force-pushed the improvement/ARTESCA-14946-build-shellui-SBOM branch from a42b398 to bfc0337 Compare March 31, 2025 15:09

JBWatenbergScality previously approved these changes Mar 31, 2025

View reviewed changes

rdebay-scality dismissed JBWatenbergScality’s stale review via 627c325 March 31, 2025 15:49

rdebay-scality requested a review from JBWatenbergScality April 1, 2025 07:55

JBWatenbergScality previously approved these changes Apr 2, 2025

View reviewed changes

rdebay-scality commented Apr 3, 2025

View reviewed changes

.github/workflows/publish.yaml Show resolved Hide resolved

rdebay-scality dismissed JBWatenbergScality’s stale review via cbd73f4 April 3, 2025 08:14

g-carre previously approved these changes Apr 3, 2025

View reviewed changes

rdebay-scality commented Apr 4, 2025

View reviewed changes

.github/workflows/publish.yaml Outdated Show resolved Hide resolved

rdebay-scality dismissed g-carre’s stale review via b59765b April 4, 2025 12:18

rdebay-scality commented Apr 4, 2025

View reviewed changes

.github/workflows/publish.yaml Outdated Show resolved Hide resolved

JBWatenbergScality approved these changes Apr 14, 2025

View reviewed changes

ARTESCA-14946: Publish the shell-ui SBOM

2109d59

Build the Software Bill of Material (SBOM) for shell-ui during pre-merge using SYFT. Publish it next to the shell ui tarball in the github release. This is to be used in the RING as part of the RING SBOM. See RING-49709.

rdebay-scality force-pushed the improvement/ARTESCA-14946-build-shellui-SBOM branch from ff7a390 to 2109d59 Compare April 15, 2025 13:41

rdebay-scality requested a review from g-carre April 15, 2025 14:44

g-carre approved these changes Apr 15, 2025

View reviewed changes

bert-e merged commit f3f949e into development/130.0 Apr 16, 2025
22 checks passed

bert-e deleted the improvement/ARTESCA-14946-build-shellui-SBOM branch April 16, 2025 07:20

Conversation

rdebay-scality commented Mar 31, 2025

Uh oh!

bert-e commented Mar 31, 2025

Hello rdebay-scality,

Uh oh!

bert-e commented Mar 31, 2025

Waiting for approval

Uh oh!

bert-e commented Apr 1, 2025

Waiting for approval

Uh oh!

Uh oh!

bert-e commented Apr 3, 2025

Waiting for approval

Uh oh!

Uh oh!

bert-e commented Apr 4, 2025

Waiting for approval

Uh oh!

Uh oh!

bert-e commented Apr 14, 2025

Waiting for approval

Uh oh!

JBWatenbergScality commented Apr 14, 2025

Uh oh!

bert-e commented Apr 14, 2025

Status

Uh oh!

bert-e commented Apr 14, 2025

Waiting for approval

Uh oh!

bert-e commented Apr 15, 2025

Waiting for approval

Uh oh!

rdebay-scality commented Apr 15, 2025

Uh oh!

bert-e commented Apr 15, 2025

In the queue

Uh oh!

bert-e commented Apr 16, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants