teleport/docs/preflight.md
Mike Jensen 7452614827
Remove CodeQL Scanning for release branches (#33723)
* Remove CodeQL Scanning for release branches

In RFD 114 (PR #32233) we setup mirroring for the Teleport release branches to the `teleport-sec-scan` repos.  There are several advantages to moving the CodeQL scanning to these repos:
* It removes the manual process described in `preflight` to update the codeql scanning branch
* It solves the issue of alerts being repeatedly opened and closed as they are found on release branches and only fixed in master, for example: https://github.com/gravitational/teleport/security/code-scanning/560

As such CodeQL has already been configured on these repos and the initial findings triaged: https://github.com/gravitational/teleport-sec-scan-1/blob/master/.github/workflows/codeql-mirror.yml

* codeql: Comment relaese branch scanning
2023-10-20 17:08:16 +00:00

1 KiB

Preflight Checklist

This checklist is to be run prior to cutting the release branch.

  • Bump Web UI dependencies
  • Make a new docs/VERSION folder
  • Update VERSION in Makefile to next dev tag
  • Update TELEPORT_VERSION in assets/aws/Makefile
  • Update mentions of the version in examples/ and README.md
  • Search code for DELETE IN and REMOVE IN comments and clean up if appropriate
  • Update docs/faq.mdx "Which version of Teleport is supported?" section with release date and support info
  • Update the CI buildbox image
    • Update the BUILDBOX_VERSION in build.assets/images.mk
    • Run make dronegen and ensure all buildbox references in the resulting yaml refer to the new image
    • Commit and merge. Drone should build new buildbox images and push to public.ecr.aws
  • Update the list of OCI images to rebuild nightly in rebuild-teleport-oci-distroless-cron.yml on master