JanssenProject / jans

An open source enterprise digital identity platform for CIAM or workforce... Janssen is a distribution of standards-based, developer friendly, components that are engineered to work together in any cloud. #OAuth #OpenID #FIDO
https://docs.jans.io
Apache License 2.0
479 stars 75 forks source link

ci: fix el8 and suse15 nightly package #10235

Closed moabu closed 1 week ago

moabu commented 1 week ago

Prepare


Description

Target issue

closes #issue-number-here

Implementation Details


Test and Document the changes

Please check the below before submitting your PR. The PR will not be merged if there are no commits that start with docs: to indicate documentation changes or if the below checklist is not selected.

dryrunsecurity[bot] commented 1 week ago

DryRun Security Summary

The code change modifies the path where the CentOS 8 and SUSE 15 packages are copied during the build process to ensure consistent naming conventions for the binary packages in a GitHub Actions workflow that builds and publishes packages for the Jans project.

Expand for full summary
**Summary:** This code change is part of a GitHub Actions workflow that builds and publishes binary packages for the Jans project. The key changes include modifying the path where the CentOS 8 and SUSE 15 packages are copied during the build process, ensuring that the package names for these platforms follow a consistent naming convention. From an application security perspective, this change does not introduce any obvious security concerns, as it is primarily focused on the build and distribution process. However, it's important to ensure that the overall build process is secure and that the packages are signed and verified to maintain the integrity of the software distribution. **Files Changed:** - `.github/workflows/build-packages.yml`: This file contains the GitHub Actions workflow that builds and publishes binary packages for the Jans project. The code change modifies the path where the CentOS 8 and SUSE 15 packages are copied during the build process, changing the path from `/home/runner/work/jans/jans/jans/rpmbuild/BUILDROOT/jans-0.0.0.nightly.${{ matrix.name }}.x86_64` to `/home/runner/work/jans/jans/jans/rpmbuild/BUILDROOT/jans-0.0.0-nightly-${{ matrix.name }}.x86_64`. This ensures that the package names for CentOS 8 and SUSE 15 nightly builds are consistent with the other package names, which follow the format `jans--.x86_64`.

Code Analysis

We ran 9 analyzers against 1 file and 0 analyzers had findings. 9 analyzers had no findings.

Riskiness

:green_circle: Risk threshold not exceeded.

View PR in the DryRun Dashboard.