conjurinc / debify Goto Github PK

Review the trivy output in Jenkins. Once the review is complete, set the scanAndReport function to "HIGH".

It looks like fpm packaging is working as snowball.
Firstly it creates deb package file and then when it creates rpm it packs previously created deb in.
I can see it in evoke rpm for example.

See: https://github.com/jordansissel/fpm/blob/master/lib/fpm/package/deb.rb#L82

This is required to have some files owned by root, versus only conjur.

DoD:

• Supported for debian packages
• Support for RPM packages
• Appliance workaround in https://github.com/conjurinc/appliance/pull/1479 is removed

The Master branch is currently failing in CI due to docker pull limits:
https://jenkins.conjur.net/job/conjurinc--debify/job/master/

See this Slack thread for more details and candidate solutions:
https://conjurhq.slack.com/archives/C8BNMU0KV/p1607939734287400

The last two test runs have resulted in failing tests: https://jenkins.conjur.net/job/conjurinc--debify/job/master/.

Add code coverage to this project.

Acceptance Criteria:

• Code coverage should be measured across all tests defined in this repository every time a build is run in any branch.
• Coverage report should include:
  • Line Coverage (including highlighting which lines are covered and which are not - not just giving a percentage)
  • Conditional Coverage
  • Optionally, other kinds of coverage such as Package, Class, File, or Method coverage
• Coverage report should be created in or converted to Cobertura format as part of build to allow for ingestion into coverage aggregation tools
• Coverage report should be archived in the Jenkins build using the cobertura command as shown at https://github.com/cyberark/conjur-api-ruby/blob/072d21e01e46382ee4d577e180c1269f8ff9f36e/Jenkinsfile#L27
• Coverage report should be uploaded to Code Climate with each build

Debify currently does not work with submodules, which became apparent during my work on conjur-project-config:

I’ve introduced a submodule, when we run this code.

It fails, because the list of files produced by the git_files method now includes the directory conjur-project-config, whereas the code in the first link expects a list of all files.

We need to update the git-files method to exclude non-files.

To enable to use different parameters to each package type when you can debify.