fix(ci): remove legacy Travis CI config - #354
Conversation
…cution RHCLOUD-49644 The Travis Deploy stage piped a remote shell script from a mutable branch directly into the interpreter without integrity verification (CVSS 8.0). Konflux/Tekton is now the authoritative build system, so the legacy Travis files are no longer needed. Update README and technical docs accordingly. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Plus Run ID: 📒 Files selected for processing (5)
💤 Files with no reviewable changes (2)
Summary by CodeRabbit
WalkthroughTravis CI configuration files (.travis.yml and .travis/custom_release.sh) are removed. README.md and docs/TECHNICAL_REFERENCE.md are updated to remove Travis CI references and describe deployment through Konflux/Tekton pipelines, including changes to a CI/CD mermaid diagram and a file reference table. ChangesTravis CI removal and documentation update
Estimated code review effort: 1 (Trivial) | ~3 minutes 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Description
Remove the legacy Travis CI configuration files (
.travis.yml,.travis/custom_release.sh,.travis/deploy_key.enc) that contain an unsafe remote script execution pattern in the Deploy stage. The deploy job downloaded and executed a shell script from a mutable branch without any commit pin, checksum, or signature verification (CVSS 8.0).Konflux/Tekton is now the authoritative build and deployment system for this repo, making the Travis CI setup obsolete. Updated README and technical reference docs to reflect the current CI/CD architecture.
RHCLOUD-49644
Anything reviewers should know?
.travis/deploy_key.encwas an encrypted SSH deploy key used by Travis to push builds to thelearning-resources-buildrepo. Since Konflux handles deployment now, this key is no longer needed.bc4019falready removed a broken Travis badge link from the README, confirming Travis is no longer in active use.Checklist
AI disclosure
Assisted by: Claude Code