Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update snyk branch monitoring automation #2541

Open
orouz opened this issue Sep 18, 2024 · 1 comment
Open

Update snyk branch monitoring automation #2541

orouz opened this issue Sep 18, 2024 · 1 comment
Assignees
Labels
Team:Cloud Security Cloud Security team related technical debt
Milestone

Comments

@orouz
Copy link
Collaborator

orouz commented Sep 18, 2024

Motivation

snyk branch monitoring guidelines are as follows:

  • main
  • latest_major.latest_minor
  • previous_major.latest_minor

currently we're only tracking main and latest_major.latest_minor, as previous_major didn't apply (7.x is irrelevant for cloudbeat)
as of 9.x, we need to monitor:

  • main
  • 9.x (latest minor)
  • 8.x (latest minor)

Definition of done

  • modify bump-version workflow to account for monitoring new relevant branches

Out of scope

  • other changes to bump-version will be handled in separate issues

Related tasks/epics

@orouz orouz added the Team:Cloud Security Cloud Security team related label Sep 18, 2024
@orouz orouz self-assigned this Sep 18, 2024
@acorretti acorretti added this to the 8.18 milestone Dec 10, 2024
@orouz
Copy link
Collaborator Author

orouz commented Jan 21, 2025

one more thing to note about the bump_snyk_branch_monitoring step in bump_cloudbeat.sh is that the workflow runs on a branch, and the snyk step is meant to be global. this is because snyk doesn't let us update existing target, so we delete everything and re-import evertything. so currently if we do this just for a single branch, it'll override the previous one and we'll be left with either 8.x or 9.x

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Team:Cloud Security Cloud Security team related technical debt
Projects
None yet
Development

No branches or pull requests

3 participants