[pull] main from ossf:main

cron/config/config.yaml

@@ -39,6 +39,8 @@ additional-params:
     prefix-file:
 
   scorecard:
+    # for sending PURGE requests to CDN
+    api-base-url: https://api.scorecard.dev
     # API results bucket
     api-results-bucket-url: gs://ossf-scorecard-cron-results
     # TODO: Temporarily remove SAST and CI-Tests which require lot of GitHub API tokens.

cron/config/config_test.go

@@ -45,6 +45,7 @@ const (
 	prodInputBucketURL        = "gs://ossf-scorecard-input-projects"
 	prodInputBucketPrefix     = ""
 	prodInputBucketPrefixFile = ""
+	prodAPIBaseURL            = "https://api.scorecard.dev"
 )
 
 var (
@@ -54,6 +55,7 @@ var (
 		"prefix-file": prodInputBucketPrefixFile,
 	}
 	prodScorecardParams = map[string]string{
+		"api-base-url":               prodAPIBaseURL,
 		"api-results-bucket-url":     prodAPIBucketURL,
 		"blacklisted-checks":         prodBlacklistedChecks,
 		"cii-data-bucket-url":        prodCIIDataBucket,

cron/k8s/worker.release.yaml

@@ -65,7 +65,7 @@ spec:
             - name: "SCORECARD_API_RESULTS_BUCKET_URL"
               value: "gs://ossf-scorecard-cron-releasetest-results"
             - name: "SCORECARD_API_BASE_URL"
-              value: "https://cdn.scorecard.dev"
+              value: "https://api-staging.scorecard.dev"
           volumeMounts:
             - name: config-volume
               mountPath: /etc/scorecard

cron/k8s/worker.yaml

@@ -49,6 +49,11 @@ spec:
                 secretKeyRef:
                   name: gitlab
                   key: auth_token
+            - name: FASTLY_PURGE_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: fastly
+                  key: purge_token
           volumeMounts:
             - name: config-volume
               mountPath: /etc/scorecard