Add external dependencies CI/CD pipelines with SBOM generation
- Create external-dependencies directory structure with per-package pipelines - Add DEPENDENCIES-INVENTORY.md with comprehensive dependency tracking - Create ubuntu-26.04-build-container base image with all dependencies - Add per-package Jenkinsfiles: log4qt, grantlee, googletest, postgresql, qt6-framework, kdreports - Add SBOM generation script (generate-sbom.sh) for CycloneDX, SLSA v1.0, and license reports - Integrate SBOM generation into all Jenkins pipelines - Add external-dependencies/README.md with usage and security documentation - Exclude proprietary license files (rti_license.dat) from git tracking Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Entire-Checkpoint: 01M6KNFNMSPW4SY4J4SQTTPVBP
This commit is contained in:
26 files changed
+2269
-7
No files matched your search
@@ -0,0 +1,26 @@
|
||||
# PostgreSQL Installation
|
||||
FROM harbor.sl.defence-elec.de/proxydockerhub/library/ubuntu:26.04
|
||||
|
||||
LABEL maintainer="Legatus Team"
|
||||
LABEL description="PostgreSQL client libraries"
|
||||
LABEL version="16"
|
||||
|
||||
ENV DEBIAN_FRONTEND=noninteractive
|
||||
|
||||
ARG HTTP_PROXY=""
|
||||
ARG HTTPS_PROXY=""
|
||||
ARG NO_PROXY="localhost,127.0.0.1,.sl.defence-elec.de"
|
||||
|
||||
ENV http_proxy=${HTTP_PROXY}
|
||||
ENV https_proxy=${HTTPS_PROXY}
|
||||
ENV no_proxy=${NO_PROXY}
|
||||
|
||||
# Install PostgreSQL client libraries
|
||||
RUN apt-get update && apt-get install -y --no-install-recommends \
|
||||
libpq-dev postgresql-client \
|
||||
&& rm -rf /var/lib/apt/lists/*
|
||||
|
||||
# Verify installation
|
||||
RUN psql --version | grep -q "16"
|
||||
|
||||
CMD ["/bin/bash"]
|
||||
+95
@@ -0,0 +1,95 @@
|
||||
pipeline {
|
||||
agent any
|
||||
|
||||
environment {
|
||||
PG_VERSION = '16'
|
||||
HARBOR_REGISTRY = 'harbor.sl.defence-elec.de/proxydockerhub'
|
||||
IMAGE_NAME = 'postgresql'
|
||||
IMAGE_TAG = "${PG_VERSION}"
|
||||
}
|
||||
|
||||
options {
|
||||
timeout(time: 15, unit: 'MINUTES')
|
||||
buildDiscarder(logRotator(numToKeepStr: '10'))
|
||||
}
|
||||
|
||||
stages {
|
||||
stage('Checkout') {
|
||||
steps {
|
||||
checkout scm
|
||||
}
|
||||
}
|
||||
|
||||
stage('Build PostgreSQL Container') {
|
||||
steps {
|
||||
script {
|
||||
dir('external-dependencies/postgresql') {
|
||||
sh """
|
||||
docker build \
|
||||
--build-arg PG_VERSION=${PG_VERSION} \
|
||||
-t ${HARBOR_REGISTRY}/${IMAGE_NAME}:${IMAGE_TAG} \
|
||||
.
|
||||
"""
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
stage('Verify PostgreSQL') {
|
||||
steps {
|
||||
script {
|
||||
sh """
|
||||
docker run --rm ${HARBOR_REGISTRY}/${IMAGE_NAME}:${IMAGE_TAG} bash -c '
|
||||
psql --version
|
||||
'
|
||||
"""
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
stage('Generate SBOM') {
|
||||
steps {
|
||||
script {
|
||||
dir('external-dependencies/postgresql') {
|
||||
sh """
|
||||
mkdir -p sbom
|
||||
|
||||
# Set environment variables for SBOM generation
|
||||
export GIT_URL="${env.GIT_URL}"
|
||||
export GIT_COMMIT="${env.GIT_COMMIT}"
|
||||
export BUILD_NUMBER="${env.BUILD_NUMBER}"
|
||||
export DOCKERFILE_PATH="external-dependencies/postgresql/Dockerfile"
|
||||
|
||||
# Generate CycloneDX SBOM, SLSA provenance, and license report
|
||||
bash ../scripts/generate-sbom.sh postgresql ${PG_VERSION} ./sbom
|
||||
"""
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
stage('Push to Registry') {
|
||||
steps {
|
||||
script {
|
||||
withCredentials([usernamePassword(
|
||||
credentialsId: 'harbor-credentials',
|
||||
usernameVariable: 'HARBOR_USER',
|
||||
passwordVariable: 'HARBOR_PASSWORD'
|
||||
)]) {
|
||||
sh """
|
||||
echo ${HARBOR_PASSWORD} | docker login ${HARBOR_REGISTRY} -u ${HARBOR_USER} --password-stdin
|
||||
docker push ${HARBOR_REGISTRY}/${IMAGE_NAME}:${IMAGE_TAG}
|
||||
docker logout ${HARBOR_REGISTRY}
|
||||
"""
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
post {
|
||||
always {
|
||||
cleanWs()
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,28 @@
|
||||
# PostgreSQL
|
||||
|
||||
PostgreSQL client libraries installation pipeline.
|
||||
|
||||
## Version
|
||||
|
||||
- **PostgreSQL:** 16 (Ubuntu 26.04 default)
|
||||
- **Package:** libpq-dev
|
||||
- **License:** PostgreSQL License
|
||||
|
||||
## Installation
|
||||
|
||||
```bash
|
||||
apt-get update
|
||||
apt-get install -y libpq-dev postgresql-client
|
||||
```
|
||||
|
||||
## Verification
|
||||
|
||||
```bash
|
||||
psql --version
|
||||
```
|
||||
|
||||
## SBOM
|
||||
|
||||
- `sbom/postgresql-16-sbom.json`
|
||||
- `sbom/postgresql-16-provenance.json`
|
||||
- `sbom/postgresql-16-licenses.md`
|
||||
Reference in new issue
Block a user