Add Automatus CI workflow for Debian 13#14885
Conversation
Wires the Debian 13 test-suite container (added in ComplianceAsCode#14851) and the debian13 product into CI: on PRs touching content, build the ssg-debian13-ds.xml datastream, then run the affected rules against a debian:13 target with bash and ansible remediation — mirroring the existing automatus-debian12 workflow (only product/datastream names differ). Validated locally: Dockerfiles/test_suite-debian13 builds on debian:13 with openscap-scanner 1.4.2, and ./build_product debian13 produces build/ssg-debian13-ds.xml. Signed-off-by: rrskris <rrskris@gmail.com>
|
Hi @rrskris. Thanks for your PR. I'm waiting for a ComplianceAsCode member to verify that this patch is reasonable to test. If it is, they should reply with Regular contributors should join the org to skip this step. Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
jan-cerny
left a comment
jan-cerny
left a comment
There was a problem hiding this comment.
The new GH job works, it's identical with the Debian 12 workflow and doesn't introduce new supply chain risks.
2 participants
Debian 13 has a shipping product and profiles, and a test-suite container (
Dockerfiles/test_suite-debian13, added in #14851) — but no CI workflow runs the rule tests against it. This addsautomatus-debian13.yaml, mirroring the existingautomatus-debian12workflow exactly (only the product name andssg-debian13-ds.xmldatastream differ): on PRs that touch content, it builds the datastream, then runs the affected rules against adebian:13target with both bash and ansible remediation, failing on errors.Validated locally:
Dockerfiles/test_suite-debian13builds ondebian:13withopenscap-scanner(oscap 1.4.2) installed straight from apt, and the CPE set correctly../build_product debian13producesbuild/ssg-debian13-ds.xml.Complements @israel-villar's in-flight Debian 13 controls work (#14806, #14877) and builds on @a-skr's Debian 13 product + test-suite container. Happy to adjust.