From: Michał Kępień <michal@isc.org>
Date: Tue, 4 Nov 2025 11:51:35 +0000 (+0100)
Subject: Enable overriding the list of fixed CVE IDs
X-Git-Tag: v9.21.15~7^2~5
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=bc84907882625f5a3c560bbf3716612889e1aa0c;p=thirdparty%2Fbind9.git

Enable overriding the list of fixed CVE IDs

Enable manually providing (via an optional CI variable) Printing Press
jobs with the list of CVE IDs fixed in a given release cycle in case
autodetection fails for any reason.
---

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 0bd600f32c7..2fae527d03a 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1769,12 +1769,14 @@ publish:
     - job: staging
       artifacts: false
 
+# Setting the FORCE_CVE_IDS environment variable to a comma-separated
+# list of CVE IDs enables overriding the autodetected ones.
 .printing_press_job: &printing_press_job
   <<: *manual_release_job_qa
   variables:
     GIT_DEPTH: 1
   script:
-    - bind9-qa/releng/printing_press_mr.py --document "${DOCUMENT}" --metadata bind9-qa/releng/metadata.json
+    - bind9-qa/releng/printing_press_mr.py --document "${DOCUMENT}" --metadata bind9-qa/releng/metadata.json ${FORCE_CVE_IDS:+--force-cve-ids ${FORCE_CVE_IDS}}
   artifacts:
     paths:
       - printing-press/