diff --git a/.github/workflows/manual-rhacs-pipeline.yaml b/.github/workflows/manual-rhacs-pipeline.yaml new file mode 100644 index 0000000..4cf8c12 --- /dev/null +++ b/.github/workflows/manual-rhacs-pipeline.yaml @@ -0,0 +1,39 @@ +--- +name: Secure image build +on: workflow_dispatch +permissions: + contents: read + +jobs: + + build-image: + runs-on: ubuntu-latest + steps: + + - name: Checkout code + uses: actions/checkout@v4 + + - name: Build image + uses: redhat-actions/buildah-build@v2 + with: + image: quay.io/rh_ee_jablair/ubi9:latest + tags: v1 ${{ github.sha }} + containerfiles: | + ./2024-08-28-rhacs-actions-pipeline/Containerfile + + # push-image: + # runs-on: ubuntu-latest + + # scan-image: + # runs-on: ubuntu-latest + + # steps: + # - name: Central login + # uses: stackrox/central-login@v1 + # with: + # endpoint: ${{ env.CENTRAL_ENDPOINT }} + # - name: Install roxctl + # uses: stackrox/roxctl-installer-action@v1 + # with: + # central-endpoint: ${{ env.CENTRAL_ENDPOINT }} + # central-token: ${{ env.ROX_API_TOKEN }} diff --git a/2024-08-28-rhacs-actions-pipeline/Containerfile b/2024-08-28-rhacs-actions-pipeline/Containerfile new file mode 100644 index 0000000..6a36f73 --- /dev/null +++ b/2024-08-28-rhacs-actions-pipeline/Containerfile @@ -0,0 +1 @@ +FROM registry.access.redhat.com/ubi9/openjdk-21-runtime@sha256:4536f1460fd9c75c300b7d0785a282c282d595d1d35f68ba10508b929dd74261 diff --git a/2024-08-28-rhacs-actions-pipeline/README.org b/2024-08-28-rhacs-actions-pipeline/README.org new file mode 100644 index 0000000..f88bb78 --- /dev/null +++ b/2024-08-28-rhacs-actions-pipeline/README.org @@ -0,0 +1,21 @@ +#+TITLE: Securing supply chain +#+DATE: <2024-08-28 Wed> +#+AUTHOR: James Blair + + +Red Hat Advanced Cluster Security can be easily integrated into an existing GitHub actions pipeline through the existing Stackrox suite of [[https://github.com/marketplace?query=stackrox][open source actions]]. + +An example pipeline would look like: + +#+begin_src yaml +steps: + - name: Central login + uses: stackrox/central-login@v1 + with: + endpoint: ${{ env.CENTRAL_ENDPOINT }} + - name: Install roxctl + uses: stackrox/roxctl-installer-action@v1 + with: + central-endpoint: ${{ env.CENTRAL_ENDPOINT }} + central-token: ${{ env.ROX_API_TOKEN }} +#+end_src diff --git a/README.org b/README.org index 9fa5e48..f855280 100644 --- a/README.org +++ b/README.org @@ -25,3 +25,4 @@ Whether you attended one of my talks or just stumbled upon this repository, I ho | 08-11-2023 | Chicago | KubeCon NA 2023: Forging a stronger bond between etcd & Kubernetes | [[https://www.youtube.com/watch?v=6JYgBJAjpNQ][video]] | | 06-06-2024 | Wellington | Kubernetes for the next decade | [[./2024-06-06-kubertens-meetup][link]] | | 20-06-2024 | Wellington | Building OpenShift Appliances | [[./2024-06-20-openshift-meetup][link]] | +| 28-08-2024 | Wellington | Securing supply chain with Red Hat Advanced Cluster Security | [[2024-08-28-rhacs-actions-pipeline][link]] |