From e6bfa5c7615230a9208909c72e5361be1fcb1192 Mon Sep 17 00:00:00 2001 From: Luke Wires Date: Wed, 19 Aug 2026 09:21:32 -0400 Subject: [PATCH] Block RC pipeline on unresolved Prisma vulnerabilities (DATAGO-147913) Adds a Prisma vulnerability gate to prep-release.yml, scoped to internal releases only (external releases don't push an image at this stage, so there's nothing to scan yet - handling that gap is left as an open question for this PR). --- .github/workflows/prep-release.yml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/.github/workflows/prep-release.yml b/.github/workflows/prep-release.yml index 0c6a3c1..d3ae521 100644 --- a/.github/workflows/prep-release.yml +++ b/.github/workflows/prep-release.yml @@ -80,6 +80,15 @@ jobs: make create-deploy-yaml make bundle + - name: Vulnerability Gate - Prisma + if: ${{ github.event.inputs.prep_internal_release == 'true' }} + uses: SolaceDev/maas-build-actions/.github/actions/prisma-vulnerability-checker@master + with: + docker_image_to_check: "${{ env.CONTROLLER_CONTAINER_REPO }}/pubsubplus-eventbroker-operator:v${{ github.event.inputs.release_tag }}" + prisma_repository_name: "pubsubplus-eventbroker-operator" + project_squad: "launchpad" + prisma_jira_check: "False" + - name: Prep for testing - create K8s Kind Cluster uses: helm/kind-action@v1.3.0