diff --git a/.github/workflows/build-dependency-image.yml b/.github/workflows/build-dependency-image.yml deleted file mode 100644 index 471a15a..0000000 --- a/.github/workflows/build-dependency-image.yml +++ /dev/null @@ -1,52 +0,0 @@ -name: Build linux-bench-dependency image - -# Publishes the `linux-bench-dependency` image consumed by secure-backend's -# compliance-benchmark-runner (pinned there via LINUX_BENCH_TAG). -# -# Runs AFTER the tag is created: when a Sysdig dependency tag is pushed, this -# workflow triggers the `secure/compliance/compliance-linux-bench` Jenkins job -# with TAG=. The job checks out that tag, builds the dependency image, -# and pushes linux-bench-dependency: to GAR — so the published registry -# tag matches the git tag 1:1. -# -# Registry tags are immutable, so each newly pushed dependency tag is a fresh -# release by construction; this workflow never re-publishes an existing tag. -# -# Tag scheme: the Sysdig dependency versions are 4-part numeric -# MAJOR.MINOR.PATCH.BUILD (e.g. 1.1.0.14, and future 1.1.1.0 / 2.0.0.0). The -# glob below matches any 4-part numeric tag, which is distinct from the -# upstream release tags (`v*` prefix, and short 2-3 part tags) handled by -# release.yml / publish.yml. -on: - push: - tags: - # Any 4-part numeric dependency tag (e.g. 1.1.0.15, 1.1.1.0, 2.0.0.0). - - "[0-9]+.[0-9]+.[0-9]+.[0-9]+" - # Manual fallback: publish a specific existing tag from the Actions UI. - workflow_dispatch: - inputs: - tag: - description: "linux-bench-dependency tag to build (e.g. 1.1.0.15)" - required: true - -jobs: - build-dependency-image: - name: Trigger compliance-linux-bench Jenkins job - runs-on: tools-runner - steps: - - name: Resolve tag - id: tag - run: echo "value=${{ github.event.inputs.tag || github.ref_name }}" >> "$GITHUB_OUTPUT" - - - name: Trigger compliance-linux-bench Jenkins job - uses: draios/jenkins-job-trigger-action@1.1.0 - with: - jenkins_url: ${{ secrets.JENKINS_INTERNAL_URL }} - jenkins_user: ${{ secrets.JENKINS_QA_API_USER }} - jenkins_token: ${{ secrets.JENKINS_QA_API_TOKEN }} - job_name: "secure/job/compliance/job/compliance-linux-bench" - job_params: | - { - "TAG": "${{ steps.tag.outputs.value }}" - } - job_timeout: 3600