Skip to content

Conversation

przepeck
Copy link
Collaborator

@przepeck przepeck commented Oct 2, 2025

🛠 Summary

CVS-173873 and CVS-173257
Automation of windows files signing and BDBA scans.

Pipeline link: https://ci.iotg.sclab.intel.com/job/ovmsc/job/windows/job/Windows_SDL/

🧪 Checklist

  • Unit tests added.
  • The documentation updated.
  • Change follows security best practices.
    ``

@przepeck przepeck requested a review from dtrawins October 2, 2025 11:25
Copy link
Contributor

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR implements automation for Windows file signing and BDBA (BlackDuck Binary Analysis) scans for the CI pipeline. The changes support SDL (Security Development Lifecycle) requirements by adding automated security scanning and code signing capabilities to the Windows build process.

  • Adds Windows-specific batch scripts for code signing and BDBA scanning
  • Integrates signing and BDBA scan stages into the Jenkins pipeline
  • Creates a new dedicated pipeline for build, test, and SDL operations

Reviewed Changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 5 comments.

Show a summary per file
File Description
ci/windows_sign.bat Batch script to automate Windows code signing process
ci/windows_bdba.bat Batch script to run BDBA security scans on Windows artifacts
ci/loadWin.groovy Extended with signing, BDBA scan, and cleanup functions
ci/lib_search.py Updated exclusion lists to include new batch scripts
ci/build_test_release.groovy New Jenkins pipeline integrating build, test, signing, and BDBA stages

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

Copy link
Collaborator

@rasapala rasapala left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please add err check and fix spell errors as copilot suggested.

@przepeck przepeck requested a review from rasapala October 6, 2025 06:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants