stacklok / stacklok/frizbee

Add support for GitLab

Open
#151 3 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement P2
Dominant language
Go
Stars
185
Forks
24
Avg merge
5d 6h
Merged PRs (30d)
5

Description

Please describe the enhancement

I would look forward if Frizbee could support GitLab .gitlab-ci.yml files.
There two options which would benefit from the support are:

Job Images:
Here we declare a Container Image and its version tag (e.g. latest, v4.2.0).

Includes and CI/CD Components:
Here we declare a CI/CD Component, essentially a pre-defined job which should be run in the project and it's version

Solution Proposal

Frizbee should be able to look into .gitlab-ci.yml files and provide the checksum for declared Job images and included components.

Describe alternatives you've considered

Not supporting it?!

Additional context

No response

Acceptance Criteria

I am not sure about how much more difficult the support for includes are, therefore I would consider this feature done if GitLab Job images can be supported.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by locating the existing configuration parsing and checksum-resolution entry points, then inspect how .gitlab-ci.yml job images are represented. The minimum done state is support for declared GitLab job images and their checksum output; includes and CI/CD components are optional according to the acceptance criteria.

Written by the indexing model from the issue text.

Assessment

Tech stack
yaml
Domain
ci-cd, devops, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.