diff --git a/.semaphore/semaphore.yml b/.semaphore/semaphore.yml index abb1a22f4..f5c3a7238 100644 --- a/.semaphore/semaphore.yml +++ b/.semaphore/semaphore.yml @@ -7,7 +7,7 @@ version: v1.0 name: build-test-release agent: machine: - type: s1-prod-ubuntu24-04-amd64-3 + type: s1-prod-ubuntu24-04-amd64-1 fail_fast: cancel: @@ -42,10 +42,10 @@ blocks: - export TRIVY_DISABLE_VEX_NOTICE=true - trivy version - echo "Check go/connector-dev-vuln-remediation for fixing or suppressing vulnerabilities found by trivy" - - trivy --skip-files "*.zip" rootfs --scanners vuln --db-repository public.ecr.aws/aquasecurity/trivy-db --java-db-repository public.ecr.aws/aquasecurity/trivy-java-db --ignore-unfixed --ignorefile - .trivyignore --exit-code 1 --severity CRITICAL target/components/packages - - trivy --skip-files "*.zip" rootfs --scanners vuln --db-repository public.ecr.aws/aquasecurity/trivy-db --java-db-repository public.ecr.aws/aquasecurity/trivy-java-db --ignore-unfixed --ignorefile - .trivyignore --severity HIGH,LOW,MEDIUM target/components/packages + - trivy --skip-files "*.zip" rootfs --scanners vuln --db-repository public.ecr.aws/aquasecurity/trivy-db --java-db-repository public.ecr.aws/aquasecurity/trivy-java-db --ignore-unfixed + --ignorefile .trivyignore --exit-code 1 --severity CRITICAL target/components/packages + - trivy --skip-files "*.zip" rootfs --scanners vuln --db-repository public.ecr.aws/aquasecurity/trivy-db --java-db-repository public.ecr.aws/aquasecurity/trivy-java-db --ignore-unfixed + --ignorefile .trivyignore --severity HIGH,LOW,MEDIUM target/components/packages - . cache-maven store epilogue: always: @@ -62,7 +62,8 @@ blocks: jobs: - name: Release commands: - - mvn -Dcloud -Pjenkins -U -Dmaven.wagon.http.retryHandler.count=10 --batch-mode -DaltDeploymentRepository=confluent-codeartifact-internal::default::https://confluent-519856050701.d.codeartifact.us-west-2.amazonaws.com/maven/maven-snapshots/ + - mvn -Dcloud -Pjenkins -U -Dmaven.wagon.http.retryHandler.count=10 --batch-mode + -DaltDeploymentRepository=confluent-codeartifact-internal::default::https://confluent-519856050701.d.codeartifact.us-west-2.amazonaws.com/maven/maven-snapshots/ -DrepositoryId=confluent-codeartifact-internal deploy -DskipTests - name: Release Notes dependencies: [] @@ -79,7 +80,7 @@ after_pipeline: task: agent: machine: - type: s1-prod-ubuntu24-04-arm64-0 + type: s1-prod-ubuntu24-04-arm64-00 jobs: - name: Metrics commands: