tools and workplans

This commit is contained in:
tegwick 2026-05-15 23:03:28 +02:00
parent 57a11d467e
commit 1eb8559f27
9 changed files with 466 additions and 20 deletions

View file

@ -27,7 +27,7 @@ installed on the control node at any given time. This means:
- Behaviour is not reproducible across machines or over time
- The Custodian State Hub SBOM scanner finds nothing to ingest (`last_sbom_at = null`)
- Licence and vulnerability auditing of the actual dependencies in use is impossible
- The `railiance-bootstrap` repo appears as a gap in the SBOM coverage map
- The `railiance-cluster` repo appears as a gap in the SBOM coverage map
## Root cause
@ -42,7 +42,7 @@ dependencies. No `ansible/requirements.yml` exists for Galaxy collections
- `uv.lock` is generated and committed — pins Ansible + full transitive pip tree
- If Galaxy collections are used: `ansible/requirements.yml` lists them
- SBOM is ingested: `last_sbom_at` is not null in the State Hub
- The SBOM dashboard shows `railiance-bootstrap` in the railiance domain row
- The SBOM dashboard shows `railiance-cluster` in the railiance domain row
with a package count
## Tasks
@ -76,7 +76,7 @@ state_hub_task_id: "8aa8a9d3-6560-4176-b933-72a21e6d43d4"
1. Create `pyproject.toml`:
```toml
[project]
name = "railiance-bootstrap"
name = "railiance-cluster"
version = "0.1.0"
requires-python = ">=3.11"
dependencies = [
@ -100,10 +100,10 @@ state_hub_task_id: "4fb477e9-dbac-4e43-84d0-5202c68f4705"
From `~/the-custodian/state-hub/`:
```bash
make ingest-sbom REPO=railiance-bootstrap SCAN=1 REPO_PATH=/home/worsch/railiance-bootstrap
make ingest-sbom REPO=railiance-cluster SCAN=1 REPO_PATH=/home/worsch/railiance-cluster
```
Verify in the SBOM dashboard: railiance domain should show `railiance-bootstrap`
Verify in the SBOM dashboard: railiance domain should show `railiance-cluster`
with a package count and no gap warning.
### T4 — Create ansible/requirements.yml (even if empty)