adoptium / ci-jenkins-pipelines

jenkins pipeline build scripts
Apache License 2.0
19 stars 71 forks source link

EPIC: Add a Post-Build job and Sign-SBOM job #610

Open andrew-m-leonard opened 1 year ago

andrew-m-leonard commented 1 year ago

Create a new job "Post-Build" which implements issue, this encompasses all post-build tasks. To this job we will then run a new job "Sign-SBOM" on the "signing node", with the available RSA key.

Publishes Artifacts:

Tasks:

smlambert commented 1 year ago

Additional post build tasks to consider hanging off of this job:

smlambert commented 8 months ago

Additional Post-build task

sxa commented 6 months ago

Also download testing as per https://github.com/adoptium/temurin-build/issues/3506 which includes SBoM validation.

This is currently performed by the standalone download_and_sbom_validation job which uses the release_download_test.sh script