Update to demo environment

Signed-off-by: John Kjell <[email protected]>

Author: John Kjell

.github/workflows/pipeline.yml

@@ -20,9 +20,6 @@ jobs:
       step: fmt
       attestations: "git github environment"
       command: go fmt ./...
-    secrets:
-      TS_OAUTH_CLIENT_ID: ${{ secrets.TS_OAUTH_CLIENT_ID }}
-      TS_OAUTH_SECRET: ${{ secrets.TS_OAUTH_SECRET }}
 
   vet:
     uses: ./.github/workflows/witness.yml
@@ -31,9 +28,6 @@ jobs:
       step: vet
       attestations: "git github environment"
       command: go vet ./...
-    secrets:
-        TS_OAUTH_CLIENT_ID: ${{ secrets.TS_OAUTH_CLIENT_ID }}
-        TS_OAUTH_SECRET: ${{ secrets.TS_OAUTH_SECRET }}
 
   # --ignore DL3002    
   lint:
@@ -49,9 +43,6 @@ jobs:
       command: hadolint -f sarif Dockerfile > hadolint.sarif
       artifact-upload-name: hadolint.sarif
       artifact-upload-path: hadolint.sarif
-    secrets:
-      TS_OAUTH_CLIENT_ID: ${{ secrets.TS_OAUTH_CLIENT_ID }}
-      TS_OAUTH_SECRET: ${{ secrets.TS_OAUTH_SECRET }}
 
   unit-test:
     needs: [ fmt, vet, lint ]
@@ -63,9 +54,6 @@ jobs:
       command: go test ./... -coverprofile cover.out
       artifact-upload-name: cover.out
       artifact-upload-path: cover.out
-    secrets:
-      TS_OAUTH_CLIENT_ID: ${{ secrets.TS_OAUTH_CLIENT_ID }}
-      TS_OAUTH_SECRET: ${{ secrets.TS_OAUTH_SECRET }}
 
   sast:
     needs: [ fmt, vet, lint ]
@@ -79,9 +67,6 @@ jobs:
       command: semgrep scan --config auto ./ --sarif -o semgrep.sarif
       artifact-upload-name: semgrep.sarif
       artifact-upload-path: semgrep.sarif
-    secrets:
-      TS_OAUTH_CLIENT_ID: ${{ secrets.TS_OAUTH_CLIENT_ID }}
-      TS_OAUTH_SECRET: ${{ secrets.TS_OAUTH_SECRET }}
 
   build:
     needs: [ unit-test, sast ]
@@ -91,9 +76,6 @@ jobs:
       step: build 
       attestations: "git github environment"
       command: go build -o bin/software main.go 
-    secrets:
-      TS_OAUTH_CLIENT_ID: ${{ secrets.TS_OAUTH_CLIENT_ID }}
-      TS_OAUTH_SECRET: ${{ secrets.TS_OAUTH_SECRET }}
 
   build-image:
     needs: [ unit-test, sast ]
@@ -105,13 +87,6 @@ jobs:
       contents: read  # This is required for actions/checkout
 
     steps:
-    - name: Tailscale
-      uses: tailscale/github-action@v2
-      with:
-          oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}
-          oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}
-          tags: tag:ci
-
     - uses: actions/[email protected]
     - uses: docker/[email protected]
 
@@ -140,7 +115,7 @@ jobs:
       with:
         version: 0.6.0
         step: build-image
-        archivista-server: "http://john-minikube-archivista:8082"
+        archivista-server: "https://archivista.aws-sandbox-staging.testifysec.dev/"
         attestations: "git github environment oci slsa"
         command: |
           /bin/sh -c "docker buildx build -t ${{ steps.meta.outputs.tags }} -o type=docker,dest=image.tar --push ."
@@ -169,9 +144,6 @@ jobs:
         syft packages docker-archive:/tmp/image.tar --source-name=pkg:oci/testifysec/swf -o cyclonedx-json --file sbom.cdx.json
       artifact-upload-name: sbom.cdx.json
       artifact-upload-path: sbom.cdx.json
-    secrets:
-        TS_OAUTH_CLIENT_ID: ${{ secrets.TS_OAUTH_CLIENT_ID }}
-        TS_OAUTH_SECRET: ${{ secrets.TS_OAUTH_SECRET }}
 
   secret-scan:
     needs: build-image
@@ -188,6 +160,3 @@ jobs:
         trufflehog docker --image=file:///tmp/image.tar -j > trufflehog.json
       artifact-upload-name: trufflehog.json
       artifact-upload-path: trufflehog.json
-    secrets:
-      TS_OAUTH_CLIENT_ID: ${{ secrets.TS_OAUTH_CLIENT_ID }}
-      TS_OAUTH_SECRET: ${{ secrets.TS_OAUTH_SECRET }}

.github/workflows/witness.yml

@@ -44,14 +44,9 @@ on:
                 required: true
                 type: string
             archivista-server:
-                default: "http://john-minikube-archivista:8082"
+                default: "https://archivista.aws-sandbox-staging.testifysec.dev/"
                 required: false
                 type: string
-        secrets:
-            TS_OAUTH_CLIENT_ID:
-                required: true
-            TS_OAUTH_SECRET:
-                required: true
 
 jobs:
     witness:
@@ -62,13 +57,6 @@ jobs:
             with:
               go-version: 1.21.x
 
-          - name: Tailscale
-            uses: tailscale/github-action@v2
-            with:
-                oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}
-                oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}
-                tags: tag:ci
-
           - if: ${{ inputs.artifact-download != '' }}
             uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1
             with: