Skip to content

Commit a77be2f

Browse files
committed
replaces aws silkbomb image with static artifactory silkbomb image
1 parent 7f62368 commit a77be2f

File tree

1 file changed

+3
-17
lines changed

1 file changed

+3
-17
lines changed

.github/workflows/generate-augmented-sbom.yml

Lines changed: 3 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121
KONDUKTO_TOKEN: ${{ secrets.KONDUKTO_TOKEN }}
2222
KONDUKTO_REPO: mongodb/mongodb-atlas-cli
2323
KONDUKTO_BRANCH_PREFIX: atlascli
24-
ARTIFACTORY_IMAGE: 901841024863.dkr.ecr.us-east-1.amazonaws.com/release-infrastructure/silkbomb:2.0
24+
SILKBOMB_IMG: artifactory.corp.mongodb.com/release-tools-container-registry-public-local/silkbomb:2.0
2525

2626
steps:
2727
- uses: GitHubSecurityLab/actions-permissions/monitor@v1
@@ -49,26 +49,12 @@ jobs:
4949
awk '$1 == "dep" || $1 == "=>" { print "pkg:golang/" $2 "@" $3 }' | \
5050
LC_ALL=C sort > purls.txt
5151
cat purls.txt
52-
- name: Configure AWS credentials
53-
uses: aws-actions/configure-aws-credentials@v4
54-
with:
55-
role-to-assume: ${{ secrets.KONDUKTO_ROLE_ARN }}
56-
aws-region: us-east-1
57-
58-
- name: Login to AWS ECR
59-
env:
60-
aws-access-key-id: ${{ steps.creds.outputs.aws-access-key-id }}
61-
aws-secret-access-key: ${{ steps.creds.outputs.aws-secret-access-key }}
62-
aws-session-token: ${{ steps.creds.outputs.aws-session-token }}
63-
run: |
64-
aws ecr get-login-password --region us-east-1 | \
65-
docker login --username AWS --password-stdin 901841024863.dkr.ecr.us-east-1.amazonaws.com
6652
6753
- name: Generate SBOM with Silkbomb
6854
run: |
6955
docker run --rm \
7056
-v "${PWD}:/pwd" \
71-
"${ARTIFACTORY_IMAGE}" \
57+
"${SILKBOMB_IMG}" \
7258
update \
7359
--purls "/pwd/purls.txt" \
7460
--sbom-out "/pwd/sbom_lite.json"
@@ -80,7 +66,7 @@ jobs:
8066
kondukto_branch="${KONDUKTO_BRANCH_PREFIX}-linux-${arch}"
8167
docker run --platform="linux/amd64" -it --rm -v "${PWD}:/pwd" \
8268
-e "KONDUKTO_TOKEN=${KONDUKTO_TOKEN}" \
83-
"${ARTIFACTORY_IMAGE}" \
69+
"${SILKBOMB_IMG}" \
8470
augment \
8571
--sbom-in "/pwd/sbom_lite.json" \
8672
--repo "${KONDUKTO_REPO}" \

0 commit comments

Comments
 (0)