From 6c864fd1b010edb099bc9ac9554c96825ab4a8fb Mon Sep 17 00:00:00 2001
From: platex-rehor-bot <platform-experience-services@redhat.com>
Date: Fri, 31 Jul 2026 07:33:01 +0000
Subject: [PATCH] fix(ci): remove legacy Travis CI config with unsafe remote
 script execution

RHCLOUD-49644

The Travis Deploy stage piped a remote shell script from a mutable
branch directly into the interpreter without integrity verification
(CVSS 8.0). Konflux/Tekton is now the authoritative build system,
so the legacy Travis files are no longer needed. Update README and
technical docs accordingly.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 .travis.yml                 |  27 ---------------------------
 .travis/custom_release.sh   |  29 -----------------------------
 .travis/deploy_key.enc      | Bin 3392 -> 0 bytes
 README.md                   |  10 +---------
 docs/TECHNICAL_REFERENCE.md |  28 +---------------------------
 5 files changed, 2 insertions(+), 92 deletions(-)
 delete mode 100644 .travis.yml
 delete mode 100644 .travis/custom_release.sh
 delete mode 100644 .travis/deploy_key.enc

diff --git a/.travis.yml b/.travis.yml
deleted file mode 100644
index d496ebb8..00000000
--- a/.travis.yml
+++ /dev/null
@@ -1,27 +0,0 @@
-language: node_js
-sudo: required
-dist: focal
-notifications:
-  email: false
-  slack:
-    rooms:
-      # insights-bot channel on [Ansible Slack](https://ansible.slack.com)
-      - secure: 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
-node_js:
-- '18'
-install:
-- npm ci
-jobs:
-  include:
-  - stage: Lint
-    script: npm run lint
-  - stage: Test
-    script: npm run test && npx codecov
-  - stage: Deploy
-    script: npm run deploy && curl -sSL https://raw.githubusercontent.com/RedHatInsights/insights-frontend-builder-common/master/src/bootstrap.sh | bash -s
-env:
-  global:
-  - REPO="git@github.com:RedHatInsights/learning-resources-build.git"
-  - REPO_DIR="learning-resources-build"
-  - BRANCH=${TRAVIS_PULL_REQUEST_BRANCH:-$TRAVIS_BRANCH}
-  - NODE_OPTIONS="--max-old-space-size=4096 --max_old_space_size=4096"
diff --git a/.travis/custom_release.sh b/.travis/custom_release.sh
deleted file mode 100644
index f147de49..00000000
--- a/.travis/custom_release.sh
+++ /dev/null
@@ -1,29 +0,0 @@
-#!/bin/bash
-set -e
-set -x
-
-if [ "${TRAVIS_BRANCH}" = "master" ]
-then
-    for env in ci qa
-    do
-        echo "PUSHING ${env}-beta"
-        rm -rf ./dist/.git
-        .travis/release.sh "${env}-beta"
-    done
-fi
-
-if [ "${TRAVIS_BRANCH}" = "master-stable" ]
-then
-    for env in ci qa
-    do
-        echo "PUSHING ${env}-stable"
-        rm -rf ./dist/.git
-        .travis/release.sh "${env}-stable"
-    done
-fi
-
-if [[ "${TRAVIS_BRANCH}" = "prod-beta" || "${TRAVIS_BRANCH}" = "prod-stable" ]]; then
-    echo "PUSHING ${TRAVIS_BRANCH}"
-    rm -rf ./build/.git
-    .travis/release.sh "${TRAVIS_BRANCH}"
-fi
diff --git a/.travis/deploy_key.enc b/.travis/deploy_key.enc
deleted file mode 100644
index 9171352add8c1621e5278b2883d9bd05936afdd9..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 3392
zcmV-G4Zrd&71+Op_7O18wrN!A|F+2TnYfdqEgou6da90Gc)eQnV7ni~pci&eLp<J{
z7Jyq5I4bFXF)BZ;bV4wpIC}ykL$$!4IQ5<<M+k6TuS?b)NH*h$^bK1<_}#DzQyY&n
zhTXPscAP98LD?FJaTn;YU%W3-c$_uUmC_3SxxxzY`41u|#Gvdwk#rOqdZaIb7J3l0
zVUiR&>ie}oCEl;Q;63N6qqC3*mo3-8GQ?t|z3X>WI<ITHGwFz;E~~weZz_(0-H#V~
zF(1knTVgHQ=hg+3dk%R^xi@j?<;kEw9e#zpW;Eqt*Jxt56rbI^O`c;7U`y9Hx$~?*
zia0z5y)#?mCs=WiB5XDOM`x*6$7K)bxH@EGBc=o2#^2H8*qPeY(c2b#6cZ<}my<kr
zhhUW(#+r(_<%AoN0Ds#g+FZQz$EeZ{+XUQOuKcMRj7XfkFLSb(okSlhWx)@utgf9N
zQE=0}5AYKLEG8`)Al|cdUSS!c#<cFyNqisv<K`%zObD8y8`{<jBwj`#16wnj@%}mT
z^gf0GhpVT&lAhisEC5m_vSq~s$n278Aw_1Epok0<%&_InFKGt`Q@^JF0rk23J&hyg
zs?<1lzCcjX{<qt3G3(4rRM4G&@wan1wE}<{%Py&tf(^7Tv&!d*&J=pGIOJRUOhR^K
z{&(Oa2oU#9XM3;4G5g5#ODfIZT{Fo5H+3>f_vzR<LEBfSe_yf4X2Wy8rU^gnoQy2^
zEeNXxsi+HQkp3s%a*_J9;Phl3gJO|_!qp19Yfnl(Y5c4gOgUr`=feEe4B@eYZf(jb
zzAQ%?-H&9t-iyiKWtXzLF@y06c9NW8DjRDZ>4wO~#=>-9cu=WM)DVUPQP+z#Zc=Gf
zGVH~XzEGR6rTZO7Ws7)LQ^OLjm<_qZDk|3)l_PHUqlsLkaeuFXRspe}%-2vycEseX
zFVk4bROq#DrHc>AkqV94wM7A%jtyKk-0czCc25OvJV+lPP81?nrEc8NGa+Qu1`}nk
z@m}K6e+P`3TB%kB00sOOIO4NilvC4p>}a=NPDay@Vg9=BQ*YIgb9?qlm?L>cPLnTr
z%<HftQQn@-Xv^TxS{&p(Nx<&9dwLFYB`7^i6XM9&*Zgu!9;1v22!p8EC{vP}d=YOx
zQw*vLI*G^0<lvoWH!yw9fvPXvp*={4GobJKE-xSwt#F%#`>1N=NGLQu3bqmA^j}zP
z+uELsoU0xA%#>+^O#q23$;U5l!VPUE^~yG+u_>onTzQaRDK`n-_sJZeHd}?Q>`5Cx
zJyTZ*_;Sfipw8uWL(hQy%gsLSb0=R**$66Kd20$tX8h&foj!f~STJQWIUHV%zt<T4
zWFCJeAn$=0N#b0+TQMXfYvSP8yTI@j5Q#yjTL#8C&C&&W=L0;4eQWvDt2S8Ly*T0f
zy{U&`ipEkY&16F53>KNZ%v<ful_*G(JvxWmkwv5M3loN<(V6i_TIL1LU*H?&z`^95
zKJ#p!*?STnLK4`I@VJq^fqbj4WAYYu0fco)_+KWy2-DErVmj=TAa<dT-ef*d_?Hs4
zswdovJGW18m!w$WHS3>QwDMK_|Kft`!{Xq0?>ImHatFz4dTC&G-ANzC(E21iXy1ZM
zLwJ}6lS;1kTDJJcwTl(!IUgh#;!t;Mg{OSNCE|yV?}L7q*?_SE)eF9S4ptFEfEV3j
z``)Wj8a~jWK9nA4uqH#Eq6mQqUcA>xT{C#DR!!I8_{r5Kh;P0M#(s%P^f&pNz#IIk
z?xj+iZ~n7JsX*_^i*7jrf0Qb0Fg_=ntD<4d(#zGV)d%IIJ6=p~QO$jej<MViCYY#6
ziHfa?xp(SSrA-(vH+bkuzk@1_yz3u7Em}m9Delvv-$pt;=<JAWVp6oyc~IwgF)=|h
z^wLy8umk(d!r&zsZ1&*3eX#6I4s&<7zicPGA@mJ4Ks|)tAQD4fHF|!7V1aP|k58lM
zK>IK5CUh2MYy?xsw()|VQH&+=l!tcaMkN>TL4K-Wm$aq?(xi;jLkW!#HN2d$;~KW<
zLi)f@A4C?fJuKEM=bg~K;``X|z!|$NFgFeM|J7$zNl<X^iauj*Wt%#Z`jbzfus+yW
zEKTq*#?RfG)v9>a?lW3F739yH3TgBJ6p{GwQI&C1ZkM%ID36KovCsag1B@a|JkC?j
zCe$+ypz~9R^$<)|cHW#=wSSkj7%P+rbr+<_8%d@_>ueQ_{A~SMWCoz?Rz)tU$cL>x
za}V*Q!$zD%f;uVMSQYVx^Dz98)#FB6szEBXlL15TvPo~wNcj@>|A*xHkz#%WuZ^we
zRM6!O-h-o+<T`-XDwBv;U%6slY#vA~k05x_+zA@_UY>ifxyd!<{z6TJh(Esa`1FeH
z8j4N0pF1`jDpfKw^9vA-i4r>8tTj%~26lkSyVgwoUP5Bs_UBu-5?W`lEwf${swB~=
zw}twN=uALtj2FDI{K|0nT8xa%!ng$c6#FgSzp@7Fh2%)#Kqm!gq~@UiW}t7N&MGSf
z8!+kBZ##Orq6H_V<K-1JN~-1TDS_?e!SbU%aL{nQ>HAIk(INw}OxDaS5=B?(A0Wlr
z6nv{?BA1JT_tY8}8w~=XTuIOsg9E~0+$L39qOZlG<fn!9-xlqYPs3XhOSWwQ*nUig
z>$@tlyCGF6F}>yP)t}#LCS?unX&sGbAU!x{Mi@&4N(odV>(1O?7hvV#6lULNqh_&d
zFmUy37vHosSHYkfuPDp04)BLbg=}yF^#@nIK9!7IzRo*!8w^naiYi?>eu^K>i9xiq
z;Uphb;2xTj45jf#GsUD9pa15ZgPk~3fve*~*AnEQ#H`wfH^v|~7AvM-Gg4y$i7X=&
z3h$>n#v{4-w|z=jlsUj$Cl}zx6bT%hCSc=6hw+X>WBmXrOA$W#wN_{1&yJ>q#q@?$
zLLJzGlVb!nP3>h}ww7P@9k1ic1TI5kNDVIu)H~>Dxzz|got)WF41sdVF|KFw&Q<0S
z+a0yfnf^$W<_sxN%oT}~6;U=&h~rd+W4;ncnDCpY4vj3Rt%P7yo6|5Z>i$4QtXW!c
z8Ob0U{2OqYQCkM>^avz2q)5_jAet-f{04o>v)s{EIFH;#e$w+)Ly%Y9Vj+PGoV?Sz
z19A=AR3Gt!Q*(Y0K>iLo5X(yCrPQWg_~?+p1`pFAlcNxtV|OK%sP;xSz1l`(>`%8;
z7&8S%?1%RsnI<`ZAylKpsJ6X$j;zZ0IO2Q(mO(bhzpYEb=Ir(}0y!r}G9w@>OCvQm
z5NhM>wSeStAj*HF+5%s{SjMr0<caXkgM)A_MQgGBsES8s;y9z!CxK~tZeqzVtC>a(
z*eiRZPa=KA>LLR%_gTmb^e`VKHTIJPhGr5)x*`9HKs-?f;*wZdsI@CuC(fX#twvq8
z8?VQWDrN|g@QNn1a+F?ixhV1JfN0IiY7qhuovHN+QjmJh1;#6vZ6l(*P1Ws%6)aC|
zm-(0O03k@nm3Sc(4FSLXL3)(zU`!NBcac2#+r%FB68L+Kj_2k9MvnL*4Yl8^q14jI
z&TKlgqhC|Q3aaX=ho;>iqYcoazs?90fv`r0^)<d}GQr^!P=<hnE=)VkdL%U1NuwsE
zo<{lX0904(lj3Sg)%m>$krthMYmiz3I9gWsfa1%`6FHC|@Hd{Zl#OdVWQRA7qywrc
zyLq;%>6E6P4>A9Nspl?|k(=TVJ1fN?T2f_*bpZ#U{=HaM{fW+9hudTW&@P{#f55GJ
zOVsk|?p{?GE+#>=nFlv4YXpCNz~g#9g5|Vjj&gbx5gD3CM~&XQB3At8QqOO-=(p7M
zL<~>=3{z|cuZ9W`92ad3Je9A2_&cjW2R;TEC)y1bNj&Ll-ZgCGrIHiF4wn8u@r+@H
zlSbaG7Vvt&pS9Z}{c-WH?!A)}oU<<i1T$^EwjXP9N4<s@m;{9=WX1-sCwv4z<7$S0
zRX0(}H!OwEzu8UDFEv+&NW8qhhYyM(N<W!1wY0>l&VO9|N^4KG-7-s|2<oK(JnQ#1
zIvKkM37X&BYpYjaAZe_+%b-I&tcD895xCosUctJLNfS`PCFBXKE^S#P3g5ypfQMaY
z0+ZMCQf_cex1r=di*<M1dl&HfyM_+p1NhXzl{T{q3s-r42w5o3yiTp);wLq}EBPq)
zS7{Rkq^z84mny$@{7XdiZB>ox@i4Eo8k#kG_Gp<_fP*t#%W4?+>M_Gqa8Ye#RK+%a
z{(oo#Q?8HkaeGctF@PD0wYd~R)j&`fdl(-AA#mMjS@`X3J~|eVW&1QReW{ya`=P-D
z^TPa{W|p1mja>U_`zx#b^YWf+ueX5An1X3CJB95#NfGk$)C+4@-Ba_cqcF@JA%rMi
zpMso2h=KMchI!#ufTm+$k^^BwwXY#!27RoS06i6@sgfEHvG_z}_4&YALAF8(-hw0?
Wg2B+`;0Ns1W<9>w*giEmpJ(=nk&e^=

diff --git a/README.md b/README.md
index 6edf51a0..89a40d6c 100644
--- a/README.md
+++ b/README.md
@@ -35,15 +35,7 @@ Update `config/dev.webpack.config.js` according to your application URL. [Read m
 
 ## Deploying
 
-- The starter repo uses Travis to deploy the webpack build to another Github repo defined in `.travis.yml`
-  - That Github repo has the following branches:
-    - `ci-beta` (deployed by pushing to `master` or `main` on this repo)
-    - `ci-stable` (deployed by pushing to `ci-stable` on this repo)
-    - `qa-beta` (deployed by pushing to `qa-beta` on this repo)
-    - `qa-stable` (deployed by pushing to `qa-stable` on this repo)
-    - `prod-beta` (deployed by pushing to `prod-beta` on this repo)
-    - `prod-stable` (deployed by pushing to `prod-stable` on this repo)
-- Travis uploads results to RedHatInsight's [codecov](https://codecov.io) account. To change the account, modify CODECOV_TOKEN on https://travis-ci.com/.
+Deployment is handled by [Konflux](https://konflux-ci.dev/) via Tekton pipelines defined in `.tekton/`. See the [Technical Reference](./docs/TECHNICAL_REFERENCE.md) for details on the CI/CD pipeline.
 
 ## HelpPanelLink
 
diff --git a/docs/TECHNICAL_REFERENCE.md b/docs/TECHNICAL_REFERENCE.md
index 75cbb7f1..e6ef2cb5 100644
--- a/docs/TECHNICAL_REFERENCE.md
+++ b/docs/TECHNICAL_REFERENCE.md
@@ -441,13 +441,8 @@ The application uses multiple CI/CD platforms for comprehensive testing and depl
 ```mermaid
 graph TD
     A[Git Push/PR] --> B{Platform}
-    B -->|Legacy| C[Travis CI]
     B -->|Modern| D[GitHub Actions]
-    B -->|K8s Native| E[Tekton]
-
-    C --> C1[Lint]
-    C1 --> C2[Test]
-    C2 --> C3[Deploy to Repo]
+    B -->|K8s Native| E[Tekton/Konflux]
 
     D --> D1[Install Dependencies]
     D1 --> D2[Cypress Component Tests]
@@ -463,26 +458,6 @@ graph TD
     E6 --> E7[Dev Proxy Tests]
 ```
 
-**Travis CI Configuration:** `.travis.yml`
-
-```yaml
-language: node_js
-node_js: 18
-stages:
-  - lint
-  - test
-  - deploy
-
-jobs:
-  include:
-    - stage: lint
-      script: npm run lint
-    - stage: test
-      script: npm test
-    - stage: deploy
-      script: npm run deploy
-```
-
 **GitHub Actions:** `.github/workflows/test.yml`
 
 - Node.js version: 20
@@ -1180,7 +1155,6 @@ npm run test:e2e:debug        # Debug mode
 
 | File | Purpose |
 |------|---------|
-| `/.travis.yml` | Travis CI pipeline configuration |
 | `/.github/workflows/test.yml` | GitHub Actions workflow for component tests |
 | `/.tekton/learning-resources-push.yaml` | Tekton push pipeline (master branch) |
 | `/.tekton/learning-resources-pull-request.yaml` | Tekton PR pipeline with E2E tests |