Explorar el Código

Run snyk check in periodic build for each development branch (#133751) (#133757)

we filter by regex for common name pattern of the dev branches to reduce
risk of running from development branch. in reality those periodic builds are
not likely to be triggered by developers so this is a good enough compromise.

Branches that are not developed anymore will stay in snyk for now and require
manual removal.
Rene Groeschke hace 1 mes
padre
commit
b6e48d5bae

+ 1 - 1
.buildkite/pipelines/periodic.template.yml

@@ -230,7 +230,7 @@ steps:
       image: family/elasticsearch-ubuntu-2404
       machineType: n2-standard-8
       buildDirectory: /dev/shm/bk
-    if: build.branch == "main" || build.branch == "9.1" || build.branch == "9.0" || build.branch == "8.19" || build.branch == "8.18" || build.branch == "7.17"
+    if: build.branch =~ /^(main|\d+\.\d+|\d+\.x)$/
   - label: check-branch-consistency
     command: .ci/scripts/run-gradle.sh branchConsistency
     timeout_in_minutes: 15

+ 1 - 1
.buildkite/pipelines/periodic.yml

@@ -953,7 +953,7 @@ steps:
       image: family/elasticsearch-ubuntu-2404
       machineType: n2-standard-8
       buildDirectory: /dev/shm/bk
-    if: build.branch == "main" || build.branch == "9.1" || build.branch == "9.0" || build.branch == "8.19" || build.branch == "8.18" || build.branch == "7.17"
+    if: build.branch =~ /^(main|\d+\.\d+|\d+\.x)$/
   - label: check-branch-consistency
     command: .ci/scripts/run-gradle.sh branchConsistency
     timeout_in_minutes: 15