Mirror all security branches from Security projects to dev for building
As per gitlab-org/release&14 (closed), we want to use Push Mirroring to mirror branches from https://gitlab.com/gitlab-org/security/gitlab to https://dev.gitlab.org/gitlab/gitlab-ee so that when we tag a security release, we use the security/*
branches to build packages.
However, because every branch in the Security project must begin with security/
, we may end up mirroring transient, development branches (e.g., security/fix-some-security-issue
). We may have to rely again on selective mirroring, as with #472 (closed). Or, this might be an acceptable side-effect.security/master
, security/*-stable[-ee]
, security/*-auto-deploy-*
are protected. The other branch names are enforced via push rule, so we can rely on only mirroring protected branches.
graph LR
classDef canonical fill:#74bd3d,stroke:#333,stroke-width:1px
classDef security fill:#e086bd,stroke:#333,stroke-width:1px
subgraph Build
bs-master(security/master)
bs-stable(security/12-3-stable)
bs-auto-deploy(security/12-3-auto-deploy-20190911)
b-master(master)
b-stable(12-3-stable)
b-auto-deploy(12-3-auto-deploy-20190911)
end
subgraph Security
s-master(security/master)
s-stable(security/12-3-stable)
s-auto-deploy(security/12-3-auto-deploy-20190911)
security/fix-mermaid-xss
security/fix-mermaid-xss-12-3
end
s-master -->|push mirror| bs-master
s-stable -->|push mirror| bs-stable
s-auto-deploy -->|push mirror| bs-auto-deploy
class sc-master,sc-stable canonical
class s-master,s-stable,s-auto-deploy security
class b-master,b-stable,b-auto-deploy canonical
class bs-master,bs-stable,bs-auto-deploy security
Iteration 1
-
https://gitlab.com/gitlab-org/security/gitlab -
https://gitlab.com/gitlab-org/security/gitlab-foss -
https://gitlab.com/gitlab-org/security/omnibus-gitlab