tools and workplans
This commit is contained in:
parent
57a11d467e
commit
1eb8559f27
9 changed files with 466 additions and 20 deletions
|
|
@ -27,7 +27,7 @@ installed on the control node at any given time. This means:
|
|||
- Behaviour is not reproducible across machines or over time
|
||||
- The Custodian State Hub SBOM scanner finds nothing to ingest (`last_sbom_at = null`)
|
||||
- Licence and vulnerability auditing of the actual dependencies in use is impossible
|
||||
- The `railiance-bootstrap` repo appears as a gap in the SBOM coverage map
|
||||
- The `railiance-cluster` repo appears as a gap in the SBOM coverage map
|
||||
|
||||
## Root cause
|
||||
|
||||
|
|
@ -42,7 +42,7 @@ dependencies. No `ansible/requirements.yml` exists for Galaxy collections
|
|||
- `uv.lock` is generated and committed — pins Ansible + full transitive pip tree
|
||||
- If Galaxy collections are used: `ansible/requirements.yml` lists them
|
||||
- SBOM is ingested: `last_sbom_at` is not null in the State Hub
|
||||
- The SBOM dashboard shows `railiance-bootstrap` in the railiance domain row
|
||||
- The SBOM dashboard shows `railiance-cluster` in the railiance domain row
|
||||
with a package count
|
||||
|
||||
## Tasks
|
||||
|
|
@ -76,7 +76,7 @@ state_hub_task_id: "8aa8a9d3-6560-4176-b933-72a21e6d43d4"
|
|||
1. Create `pyproject.toml`:
|
||||
```toml
|
||||
[project]
|
||||
name = "railiance-bootstrap"
|
||||
name = "railiance-cluster"
|
||||
version = "0.1.0"
|
||||
requires-python = ">=3.11"
|
||||
dependencies = [
|
||||
|
|
@ -100,10 +100,10 @@ state_hub_task_id: "4fb477e9-dbac-4e43-84d0-5202c68f4705"
|
|||
From `~/the-custodian/state-hub/`:
|
||||
|
||||
```bash
|
||||
make ingest-sbom REPO=railiance-bootstrap SCAN=1 REPO_PATH=/home/worsch/railiance-bootstrap
|
||||
make ingest-sbom REPO=railiance-cluster SCAN=1 REPO_PATH=/home/worsch/railiance-cluster
|
||||
```
|
||||
|
||||
Verify in the SBOM dashboard: railiance domain should show `railiance-bootstrap`
|
||||
Verify in the SBOM dashboard: railiance domain should show `railiance-cluster`
|
||||
with a package count and no gap warning.
|
||||
|
||||
### T4 — Create ansible/requirements.yml (even if empty)
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue