From: David Galloway Date: Tue, 28 Jul 2026 13:38:56 +0000 (-0400) Subject: cve-pipeline: allow specifying a private fork of ceph.git X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=5f55be9242c01fc51b656b46de7d6540d509e717;p=ceph-build.git cve-pipeline: allow specifying a private fork of ceph.git Convert CEPH_REPO from a single-choice dropdown to a free-form string parameter (defaulting to ceph-private.git as before) in both cve-pipeline and cve-source-dist so CVE fixes can be built from GitHub Security Advisory temporary private forks (e.g. git@github.com:ceph/ceph-ghsa-xxxx-xxxx-xxxx.git). The change to cve-source-dist is required because ceph-dev-pipeline's Jenkinsfile forwards CEPH_REPO to the setup job as a string parameter, and a choice parameter would reject values not in its list. The ceph-jenkins GitHub account must be added as a collaborator on the security advisory for its fork to be cloneable. Signed-off-by: David Galloway --- diff --git a/cve-pipeline/config/definitions/cve-pipeline.yml b/cve-pipeline/config/definitions/cve-pipeline.yml index 621a59df6..80e0aac51 100644 --- a/cve-pipeline/config/definitions/cve-pipeline.yml +++ b/cve-pipeline/config/definitions/cve-pipeline.yml @@ -40,7 +40,7 @@ parameters: - string: name: BRANCH - description: "The branch from ceph-private.git to build" + description: "The branch from CEPH_REPO to build" default: main - choice: @@ -49,10 +49,10 @@ choices: - '' - - choice: + - string: name: CEPH_REPO - choices: - - git@github.com:ceph/ceph-private.git + description: "SSH URL of the private repo to build. Can be a GitHub Security Advisory private fork (e.g. git@github.com:ceph/ceph-ghsa-xxxx-xxxx-xxxx.git). The ceph-jenkins GitHub account must have access to the repo." + default: git@github.com:ceph/ceph-private.git - string: name: DISTROS diff --git a/cve-source-dist/config/definitions/cve-source-dist.yml b/cve-source-dist/config/definitions/cve-source-dist.yml index c545ff282..bd468f842 100644 --- a/cve-source-dist/config/definitions/cve-source-dist.yml +++ b/cve-source-dist/config/definitions/cve-source-dist.yml @@ -41,10 +41,10 @@ - scm-tag parameters: - - choice: + - string: name: CEPH_REPO - choices: - - git@github.com:ceph/ceph-private.git + description: "SSH URL of the private repo to build. Can be a GitHub Security Advisory private fork (e.g. git@github.com:ceph/ceph-ghsa-xxxx-xxxx-xxxx.git). The ceph-jenkins GitHub account must have access to the repo." + default: git@github.com:ceph/ceph-private.git - string: name: BRANCH