Mirrors/grype
2
0
Fork 0
mirror of https://github.com/anchore/grype synced 2024-11-10 06:34:13 +00:00
Code Issues Projects Releases Packages Wiki Activity

Ignore prerelease versions on release + add DB update URL (#76)

Browse source 
* ignore prerelease versions when uploading version file on release

* add db update url
This commit is contained in:
Alex Goodman 2020-07-30 12:37:49 -04:00 committed by GitHub
parent 6c7d453f87
commit 009dcb1a46
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
5 changed files with 32 additions and 16 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
.github/scripts/update-version-file.sh vendored Executable file
View file

@ -0,0 +1,26 @@
#!/usr/bin/env bash
set -ue
BIN="grype"
DISTDIR=$1
VERSION=$2
if [[ $VERSION == *-* ]] ; then
echo "skipping publishing a version file (this is a pre-release: ${VERSION})"
exit 0
fi
echo "creating and publishing version file"
# create a version file for version-update checks
echo "${VERSION}" | tee ${DISTDIR}/VERSION
# upload the version file that supports the application version update check
docker run --rm \
-i \
-e AWS_DEFAULT_REGION=us-west-2 \
-e AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID} \
-e AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY} \
-v $(pwd)/${DISTDIR}/:/distmount \
amazon/aws-cli \
s3 cp /distmount/VERSION s3://toolbox-data.anchore.io/${BIN}/releases/latest/VERSION

4
.github/workflows/release.yaml vendored
View file

@ -102,8 +102,8 @@ jobs:
GPG_PRIVATE_KEY: ${{ secrets.SIGNING_GPG_PRIVATE_KEY }}
PASSPHRASE: ${{ secrets.SIGNING_GPG_PASSPHRASE }}
SIGNING_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }}
TOOLBOX_AWS_ACCESS_KEY_ID: ${{ secrets.TOOLBOX_AWS_ACCESS_KEY_ID }}
TOOLBOX_AWS_SECRET_ACCESS_KEY: ${{ secrets.TOOLBOX_AWS_SECRET_ACCESS_KEY }}
AWS_ACCESS_KEY_ID: ${{ secrets.TOOLBOX_AWS_ACCESS_KEY_ID }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.TOOLBOX_AWS_SECRET_ACCESS_KEY }}
- uses: actions/upload-artifact@v2
with:

14
Makefile
View file

@ -166,18 +166,8 @@ release: clean-dist ## Build and publish final binaries and packages
# verify checksum signatures
.github/scripts/verify-signature.sh "$(DISTDIR)"
# create a version file for version-update checks
echo "$(VERSION)" > $(DISTDIR)/VERSION
# upload the version file that supports the application version update check
@docker run --rm \
-i \
-e AWS_DEFAULT_REGION=us-west-2 \
-e AWS_ACCESS_KEY_ID=${TOOLBOX_AWS_ACCESS_KEY_ID} \
-e AWS_SECRET_ACCESS_KEY=${TOOLBOX_AWS_SECRET_ACCESS_KEY} \
-v $(shell pwd)/$(DISTDIR)/:/distmount \
amazon/aws-cli --debug \
s3 cp /distmount/VERSION s3://toolbox-data.anchore.io/$(BIN)/releases/latest/VERSION
# upload the version file that supports the application version update check (excluding pre-releases)
.github/scripts/update-version-file.sh "$(DISTDIR)" "$(VERSION)"
.PHONY: clean
clean: clean-dist clean-snapshot ## Remove previous builds and result reports

3
internal/config/config.go
View file

@ -65,8 +65,7 @@ func setNonCliDefaultValues(v *viper.Viper) {
v.SetDefault("log.structured", false)
// e.g. ~/.cache/appname/db
v.SetDefault("db.cache-dir", path.Join(xdg.CacheHome, internal.ApplicationName, "db"))
// TODO: change me to the production URL before release
v.SetDefault("db.update-url", "http://localhost:5000/listing.json")
v.SetDefault("db.update-url", internal.DBUpdateURL)
v.SetDefault("db.auto-update", true)
v.SetDefault("dev.profile-cpu", false)
v.SetDefault("check-for-app-update", true)

1
internal/constants.go
View file

@ -2,3 +2,4 @@ package internal
// note: do not change this
const ApplicationName = "grype"
const DBUpdateURL = "https://toolbox-data.anchore.io/grype/databases/listing.json"