os/kyverno-notation-aws.yaml at 827dc962ae33b8542df02cbe2a0ec41eaf5c7a03 · wolfi-dev/os · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
package:
  name: kyverno-notation-aws
  version: 1.1
  epoch: 11
  description: Kyverno extension service for Notation and the AWS signer
  copyright:
    - license: Apache-2.0

pipeline:
  - uses: git-checkout
    with:
      expected-commit: 9e023c83e88c3ed5474c6a5d3a2f299e17d065e8
      repository: https://github.com/nirmata/kyverno-notation-aws
      tag: v${{package.version}}

  - uses: go/bump
    with:
      deps: |-
        github.com/open-policy-agent/opa@v0.68.0
        github.com/notaryproject/notation-go@v1.3.0-rc.2
        github.com/go-jose/go-jose/v4@v4.0.5
        github.com/go-jose/go-jose/v3@v3.0.4
        golang.org/x/oauth2@v0.27.0
        golang.org/x/crypto@v0.35.0
        golang.org/x/net@v0.36.0
        github.com/golang-jwt/jwt/v4@v4.5.2
        github.com/kyverno/kyverno@v1.14.0-alpha.1
      replaces: github.com/docker/docker=github.com/docker/docker@v26.1.5+incompatible

  - uses: go/build
    with:
      modroot: .
      output: kyverno-notation-aws
      packages: .

subpackages:
  - name: ${{package.name}}-compat
    description: "Kyverno extension service for Notation and the AWS signer (compatibility)"
    pipeline:
      - runs: |
          mkdir -p ${{targets.contextdir}}/plugins/com.amazonaws.signer.notation.plugin
          ln -sf /usr/bin/kyverno-notation-aws ${{targets.contextdir}}/kyverno-notation-aws
          ln -sf /usr/bin/notation-com.amazonaws.signer.notation.plugin ${{targets.contextdir}}/plugins/com.amazonaws.signer.notation.plugin/notation-com.amazonaws.signer.notation.plugin

update:
  enabled: true
  github:
    identifier: nirmata/kyverno-notation-aws
    strip-prefix: v

test:
  pipeline:
    - name: Help test
      runs: |
        kyverno-notation-aws -h