* Chore: fix a github action issue
* bandit failure because of underlying container, so disabled
* Fix pip install deprecation warning
* Fix: Remove boto3_type_annotations from requirements due to rpm deps issue
* validate config with schema
* MMENG-3153
Signed-off-by: Harsh Modi <hmodi@redhat.com>
* update rpm spec to fix rpm build
* CLOUDBLD-3153
Signed-off-by: Harsh Modi <hmodi@redhat.com>
* remove `ignore_patterns` as a required property
* MMENG-3153
Signed-off-by: Harsh Modi <hmodi@redhat.com>
* fix schema retrieval
Instead of trying to fetch from relative paths,
package schemas with charon and retrieve from pkg
resources
* MMENG-3153
Signed-off-by: Harsh Modi <hmodi@redhat.com>
* bump charon version
* MMENG-3153
Signed-off-by: Harsh Modi <hmodi@redhat.com>
* make tests more robust
* fix test paths to avoid failures when CWD is different
* fix getenv
* MMENG-3141
Signed-off-by: Harsh Modi <hmodi@redhat.com>
* switch to tox env for running tests
instead of relying on containers
* MMENG-3141
Signed-off-by: Harsh Modi <hmodi@redhat.com>
* update github actions to use tox
* MMENG-3141
Signed-off-by: Harsh Modi <hmodi@redhat.com>
* enable mypy type checkers
* MMENG-3141
Signed-off-by: Harsh Modi <hmodi@redhat.com>
* enable bandit analyzer
* MMENG-3141
Signed-off-by: Harsh Modi <hmodi@redhat.com>
* disable mypy
it's not ideal currently to enable it. Revisit
this later.
* MMENG-3141
Signed-off-by: Harsh Modi <hmodi@redhat.com>
* fix pytest issue
current latest pytest==7.2.0 is
having dependency conflicts
Signed-off-by: Harsh Modi <hmodi@redhat.com>
* initial implementation of singature for artifacts (Commonjava#169)
* initial implementation of singature for artifacts
* add API doc to generate_sign function
* update README file
* use configuration file to controll artifacts needs sign
* fix some minor problem
* change suffix to exclude instead
* remove unused logger
* fix minor problem
* change charon.yml to a proper extension, change name of suffix confi
* add rpm-sign as method of signature (Commonjava#170)
* move subprocess command to configuration, make subprocess to run async (Commonjava#172)
* move subprocess command to configuration, make subprocess to run async
* simplify template rendering of sign command
* Remove unwanted file
* changed semaphore passing in asynic function (Commonjava#173)
* use shlex to replace split instead (Commonjava#174)
* add maven sign unit test (Commonjava#175)
---------
Signed-off-by: Harsh Modi <hmodi@redhat.com>
Co-authored-by: Gang Li <ligangty@users.noreply.github.com>
Co-authored-by: Harsh Modi <hmodi@redhat.com>
No description provided.