CI: to keep kosli environments compliant, add deployment reports to G…

…H issue trail workflows (#113)
cyber-dojo · Jan 17, 2024 · 4f2b246 · 4f2b246
1 parent 45df27a
commit 4f2b246
Show file tree

Hide file tree

Showing 2 changed files with 42 additions and 0 deletions.
diff --git a/.github/workflows/github_issue_attestation_example.yml b/.github/workflows/github_issue_attestation_example.yml
@@ -147,3 +147,25 @@ jobs:
             --name=dashboard.snyk-scan
             --scan-results=snyk.json
             --trail=${{ needs.prepare.outputs.kosli_trail_id }}
+
+      - name: Report deployment expectations to Kosli Trail
+        env:
+          KOSLI_ENVIRONMENT: aws-beta
+        run:
+          # This is done to ensure that artifacts from this trail
+          #    do not make aws-beta environment non-compliant
+          kosli expect deployment "${IMAGE_NAME}"
+            --artifact-type=docker
+            --environment=${KOSLI_ENVIRONMENT}
+            --description="Deployed to ${KOSLI_ENVIRONMENT} in Github Actions pipeline"
+
+      - name: Report deployment expectations to Kosli Trail
+        env:
+          KOSLI_ENVIRONMENT: aws-prod
+        run:
+          # This is done to ensure that artifacts from this trail
+          #    do not make aws-prod environment non-compliant
+          kosli expect deployment "${IMAGE_NAME}"
+            --artifact-type=docker
+            --environment=${KOSLI_ENVIRONMENT}
+            --description="Deployed to ${KOSLI_ENVIRONMENT} in Github Actions pipeline"
diff --git a/.github/workflows/github_issue_attestation_example_staging.yml b/.github/workflows/github_issue_attestation_example_staging.yml
@@ -147,3 +147,23 @@ jobs:
             --name=dashboard.snyk-scan
             --scan-results=snyk.json
             --trail=${{ needs.prepare.outputs.kosli_trail_id }}
+
+      - name: Report deployment expectations to Kosli Trail
+        env:
+          KOSLI_ENVIRONMENT: aws-beta
+        run:
+          # This is done to ensure that artifacts from this trail
+          #    do not make aws-beta environment non-compliant
+          kosli expect deployment "${IMAGE_NAME}"
+            --artifact-type=docker
+            --description="Deployed to ${KOSLI_ENVIRONMENT} in Github Actions pipeline"
+
+      - name: Report deployment expectations to Kosli Trail
+        env:
+          KOSLI_ENVIRONMENT: aws-prod
+        run:
+          # This is done to ensure that artifacts from this trail
+          #    do not make aws-prod environment non-compliant
+          kosli expect deployment "${IMAGE_NAME}"
+            --artifact-type=docker
+            --description="Deployed to ${KOSLI_ENVIRONMENT} in Github Actions pipeline"