Skip to content

ROX-33874: Increase timeout for fetch-scanner-data to 2 hours #98

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
BradLugo merged 1 commit into from
Mar 31, 2026
+8 −6
Merged

ROX-33874: Increase timeout for fetch-scanner-data to 2 hours #98

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 8 additions & 6 deletions tasks/fetch-scanner-v2-data-task.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -65,7 +65,7 @@ spec:
workingDir: /var/workdir/source
# Blobs for tagged builds are built on GHA in https://github.com/stackrox/scanner.
# If the task times out, look there to debug.
timeout: 1h30m
timeout: 2h00m
# Array params can only be passed via args, see https://github.com/tektoncd/pipeline/blob/main/docs/tasks.md#substituting-array-parameters
# Attempts to pass that in other places resulted in webhook errors and pipeline not starting.
args: [ "$(params.TARGET_DIR)", "$(params.BLOBS_TO_FETCH[*])" ]
Expand All @@ -86,6 +86,12 @@ spec:

blobs=( "$@" )

if [[ "${#blobs[@]}" == "0" ]]; then
echo "No blobs specified in arguments. Will not download anything."
echo "Done"
exit 0
fi

# Ensure that we download scanner data for a release if this is a tagged build.
tag="$(git tag --points-at)"
if [[ -z "${tag}" ]]; then
Expand All @@ -97,7 +103,7 @@ spec:
SCANNER_DATA_VERSION="${tag}"
RETRY_TIMES=1000
echo "This is a tagged build. If any download times out, it is probably because the blobs were not published by the GitHub Workflow."
echo "The publishing usually takes about 1 hour after the tag is pushed."
echo "The publishing usually takes about 1.5 hours and after the tag is pushed."
echo "Go to https://github.com/stackrox/scanner/actions/workflows/ci.yaml?query=branch%3A${tag} to debug."
echo "Look for a job called upload-dumps-for-downstream."
else
Expand All @@ -117,10 +123,6 @@ spec:

done

if [[ "${#blobs[@]}" == "0" ]]; then
echo "No blobs specified in arguments. Will not download anything."
fi

echo "Done"

- name: create-trusted-artifact
Expand Down