added osrb and checkmarx

Author: JunAr7112

.nvidia-ci.yml

@@ -594,27 +594,14 @@ raise-publishing-merge-request:
 .update-nspect:
   stage: ngc-publish
   image: 
-    name: "${NSPECT_STREAM_IMAGE}"
+    name: "${CNT_NGC_PUBLISH_IMAGE}"
     pull_policy: always
   variables:
-    RELEASE_VERSION: "v1.0.0"
     PROJECT_NAME: "gpu-driver-container"
-    REPO_URL: "https://github.com/NVIDIA/${PROJECT_NAME}.git"
+    REPO_URL: "ssh://[email protected].com:12051/dl/container-dev/driver.git"
   script:
     - |
-      export NSPECT_CLIENT_ID="${NSPECT_TEST_ID}"
-      export NSPECT_CLIENT_SECRET="${NSPECT_TEST_SECRET}"
-      program-version --env stage add --nspect-id "${NSPECT_ID}" --version-name "${RELEASE_VERSION}" --release-date "2025-07-02" --max-attempts 10
-      program-version-repos add --nspect-id "${NSPECT_ID}" --version-name "${RELEASE_VERSION}" --repos '{"sourcePointer": "${REPO_URL}", "componentName": "${PROJECT_NAME}"}' --max-attempts 10
-
-      while read -r line; do
-        read -r source_version target_version <<< "$line"
-        image="${NGC_STAGING_REGISTRY}/${PROJECT_NAME}:${source_version}"
-
-        echo "Adding container image to nSpect: ${image}"
-        
-        program-version-container-images --env stage add --nspect-id "${NSPECT_ID}" --version-name "${RELEASE_VERSION}" --container-images "{\"imageUrl\": \"${image}\"}" --max-attempts 10
-      done < "combined-build-info.txt"
+      cnt-ngc-publish nspect --versions-file "combined-build-info.txt"
 
 update-nspect-staging:
   needs:
@@ -623,8 +610,11 @@ update-nspect-staging:
   extends:
     - .update-nspect
   variables:
-    NSPECT_TEST_ID: "${NSPECT_STAGING_CLIENT_ID}"
-    NSPECT_TEST_SECRET: "${NSPECT_STAGING_CLIENT_SECRET}"
+    RELEASE_VERSION: "${CI_COMMIT_SHORT_SHA}"
+    ENV: "stage"
+  before_script:
+    - export NSPECT_CLIENT_ID="${NSPECT_STAGING_CLIENT_ID}"
+    - export NSPECT_CLIENT_SECRET="${NSPECT_STAGING_CLIENT_SECRET}"
 
 update-nspect-publishing:
   needs:
@@ -635,5 +625,9 @@ update-nspect-publishing:
   rules:
     - if: $CI_COMMIT_TAG
   variables:
-    NSPECT_TEST_ID: "${NSPECT_PUBLISHING_CLIENT_ID}"
-    NSPECT_TEST_SECRET: "${NSPECT_PUBLISHING_CLIENT_SECRET}"
+    RELEASE_VERSION: "${CI_COMMIT_TAG}"
+    OSRB_BUG_ID: "${OSRB_ID}"
+    ENV: "prod"
+  before_script:
+    - export NSPECT_CLIENT_ID="${NSPECT_CLIENT_ID}"
+    - export NSPECT_CLIENT_SECRET="${NSPECT_CLIENT_SECRET}"