Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update blossom-ci for security updates [skip ci] #1618

Merged
merged 1 commit into from
Jan 29, 2021

Conversation

pxLi
Copy link
Collaborator

@pxLi pxLi commented Jan 29, 2021

Signed-off-by: Peixin Li pxli@nyu.edu

To fullfill security updates from blossom and prodsec,

  1. this file has to be the same as internal yaml file except the user list and java version steps, otherwise it will fail the check
  2. it hides most of the code from external repo
  3. it resolved the project version limit issue
  4. it added better DDoS defense
  5. it support the log upload from internal to external repo. we haven't enabled this

We have tested this in my forked repo for days. And this will be doc in confluence later.

NOTE: This has to be merged at the specific period. Please help review and DO NOT MERGE.
I will merge this after the new self-hosted runner get deployed, and will validate the workflow after merge. Thanks!

Signed-off-by: Peixin Li <pxli@nyu.edu>
@pxLi pxLi added the build Related to CI / CD or cleanly building label Jan 29, 2021
@pxLi
Copy link
Collaborator Author

pxLi commented Jan 29, 2021

build

@pxLi pxLi changed the title [DO NOT MERGE] update blossom-ci for security updates [skip ci] update blossom-ci for security updates [skip ci] Jan 29, 2021
@pxLi pxLi merged commit f28ec63 into NVIDIA:branch-0.4 Jan 29, 2021
nartal1 pushed a commit to nartal1/spark-rapids that referenced this pull request Jun 9, 2021
Signed-off-by: Peixin Li <pxli@nyu.edu>
nartal1 pushed a commit to nartal1/spark-rapids that referenced this pull request Jun 9, 2021
Signed-off-by: Peixin Li <pxli@nyu.edu>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
build Related to CI / CD or cleanly building
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants