From 98270a2a9d4141628e7fd6e4f36dd4716d19df1a Mon Sep 17 00:00:00 2001 From: "red-hat-konflux[bot]" <126015336+red-hat-konflux[bot]@users.noreply.github.com> Date: Sat, 1 Aug 2026 13:46:00 +0000 Subject: [PATCH] chore(deps): update konflux references Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com> --- .tekton/checks.yaml | 2 +- .tekton/operator-index-pipeline.yaml | 737 ++++++++++++++------------- .tekton/ready-for-master-merge.yaml | 2 +- 3 files changed, 382 insertions(+), 359 deletions(-) diff --git a/.tekton/checks.yaml b/.tekton/checks.yaml index ef8469ab..0f8de30d 100644 --- a/.tekton/checks.yaml +++ b/.tekton/checks.yaml @@ -77,7 +77,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.2@sha256:e5ba1f8549e6a0f043629ef00bea7511957121e05304b688f40ff12304560f38 + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.2.5@sha256:510daad5648d37936b9b2c599a35c8e59b7389de8e1a4e58f6c6d079957d730d - name: kind value: task resolver: bundles diff --git a/.tekton/operator-index-pipeline.yaml b/.tekton/operator-index-pipeline.yaml index c3470848..a29dcd7e 100644 --- a/.tekton/operator-index-pipeline.yaml +++ b/.tekton/operator-index-pipeline.yaml @@ -2,385 +2,408 @@ apiVersion: tekton.dev/v1 kind: Pipeline metadata: name: operator-index-pipeline - spec: - description: | This pipeline builds and verifies ACS operator [file-based catalogs](https://konflux-ci.dev/docs/advanced-how-tos/building-olm.adoc#building-the-file-based-catalog). Modified from the generic Konflux pipeline by adding an OpenShift version parameter. _Uses `buildah` to create a container image. Its build-time tests are limited to verifying the included catalog and do not scan the image._ - finally: - - - name: slack-notification - params: - - name: message - value: ':x: `{{event_type}}` pipeline for (`$(params.output-image-repo)`, revision <$(params.git-url)/commit/$(params.revision)|$(params.revision)>) has failed.' - - name: key-name - value: 'acs-konflux-notifications' - when: - # Run when any task has Failed - - input: $(tasks.status) - operator: in - values: ["Failed"] - taskRef: + - name: slack-notification params: - - name: name - value: slack-webhook-notification - - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-slack-webhook-notification:0.1@sha256:02842e9c752056c47a409f69ed462cfd38cbd6b15facb796564a610b549222ea - - name: kind - value: task - resolver: bundles - - - name: show-sbom - params: - - name: IMAGE_URL - value: $(tasks.build-image-index.results.IMAGE_URL) - taskRef: + - name: message + value: ':x: `{{event_type}}` pipeline for (`$(params.output-image-repo)`, revision <$(params.git-url)/commit/$(params.revision)|$(params.revision)>) has failed.' + - name: key-name + value: 'acs-konflux-notifications' + when: + # Run when any task has Failed + - input: $(tasks.status) + operator: in + values: ["Failed"] + taskRef: + params: + - name: name + value: slack-webhook-notification + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-slack-webhook-notification:0.1@sha256:02842e9c752056c47a409f69ed462cfd38cbd6b15facb796564a610b549222ea + - name: kind + value: task + resolver: bundles + - name: show-sbom params: - - name: name - value: show-sbom - - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-show-sbom:0.1@sha256:8fe70a95c28b1ac92abd67a7477ad960218f3f570a9f8a12ad082dff7e9c9579 - - name: kind - value: task - resolver: bundles - - - name: show-summary - params: - - name: pipelinerun-name - value: $(context.pipelineRun.name) - - name: git-url - value: $(tasks.clone-repository.results.url)?rev=$(tasks.clone-repository.results.commit) - - name: image-url - value: $(params.output-image-repo):$(params.output-image-tag) - - name: build-task-status - value: $(tasks.build-image-index.status) - taskRef: + - name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + taskRef: + params: + - name: name + value: show-sbom + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-show-sbom:0.2@sha256:5fe387642611a8193395adb083df203534c30fef88a032ba0c074b8280c4b135 + - name: kind + value: task + resolver: bundles + - name: show-summary params: - - name: name - value: summary - - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-summary:0.2@sha256:62c465f052e15b8236aec09cc66710896e60386ea7b35c4888bb8273ff655b77 - - name: kind - value: task - resolver: bundles - - - name: post-metric-end - params: - - name: AGGREGATE_TASKS_STATUS - value: $(tasks.status) - taskRef: &post-bigquery-metrics-ref + - name: pipelinerun-name + value: $(context.pipelineRun.name) + - name: git-url + value: $(tasks.clone-repository.results.url)?rev=$(tasks.clone-repository.results.commit) + - name: image-url + value: $(params.output-image-repo):$(params.output-image-tag) + - name: build-task-status + value: $(tasks.build-image-index.status) + taskRef: + params: + - name: name + value: summary + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-summary:0.3@sha256:8012a7eb3ef9d8810051798ef10653bae9e0f854bfd65a7feddf141645c844ac + - name: kind + value: task + resolver: bundles + - name: post-metric-end params: - - name: name - value: post-bigquery-metrics - - name: bundle - value: quay.io/rhacs-eng/konflux-tasks:latest@sha256:66795c10f5dcbac1265255b8115642292edcc7a99b7480d08cfdc90c3f8d5842 - - name: kind - value: task - resolver: bundles - + - name: AGGREGATE_TASKS_STATUS + value: $(tasks.status) + taskRef: &post-bigquery-metrics-ref + params: + - name: name + value: post-bigquery-metrics + - name: bundle + value: quay.io/rhacs-eng/konflux-tasks:latest@sha256:66795c10f5dcbac1265255b8115642292edcc7a99b7480d08cfdc90c3f8d5842 + - name: kind + value: task + resolver: bundles params: - - description: Source Repository URL - name: git-url - type: string - - default: "" - description: Revision of the Source Repository - name: revision - type: string - - description: Output Image Tag. Will be qualified with output-image-repo. - name: output-image-tag - type: string - - default: quay.io/rhacs-eng/stackrox-operator-index - description: Output Image Repository - name: output-image-repo - type: string - - default: . - description: Path to the source code of an application's component from where to build image. - name: path-context - type: string - - default: catalog.Containerfile - description: Path to the Dockerfile inside the context specified by parameter path-context. - name: dockerfile - type: string - - description: Pull spec to use for the base image. - name: base-image - type: string - - description: Catalog dir to use for building image. - name: catalog-dir - type: string - - default: "false" - description: Skip checks against built image - name: skip-checks - type: string - - default: "true" - description: Execute the build with network isolation - name: hermetic - type: string - - default: "" - description: Build dependencies to be prefetched by Cachi2 - name: prefetch-input - type: string - - description: Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively. - name: image-expires-after - # Image expiry disabled because it sets quay.expires-after label on the image which fails Conforma at release time. - # A downside is that FBC images will stay in our Quay forever while certainly they become unneeded as time passes. - # TODO(ROX-27836): find a way to garbage-collect FBC images. - default: '' - - default: "false" - description: Build a source image. - name: build-source-image - type: string - - default: "true" - description: Add built image into an OCI image index - name: build-image-index - type: string - - default: "1d" - description: This sets the expiration time for intermediate OCI artifacts produced and used during builds after which they can be garbage collected. - name: oci-artifact-expires-after - type: string - - default: - - linux/x86_64 - - linux/arm64 - - linux/ppc64le - - linux/s390x - description: List of platforms to build the container images for. The available set of values is determined by the configuration of the multi-platform-controller. - name: build-platforms - type: array - - name: buildah-format - default: oci - type: string - description: The format for the resulting image's mediaType. Valid values are oci or docker. - - name: enable-cache-proxy - default: 'false' - description: Enable cache proxy configuration - type: string - + - description: Source Repository URL + name: git-url + type: string + - default: "" + description: Revision of the Source Repository + name: revision + type: string + - description: Output Image Tag. Will be qualified with output-image-repo. + name: output-image-tag + type: string + - default: quay.io/rhacs-eng/stackrox-operator-index + description: Output Image Repository + name: output-image-repo + type: string + - default: . + description: Path to the source code of an application's component from where to build image. + name: path-context + type: string + - default: catalog.Containerfile + description: Path to the Dockerfile inside the context specified by parameter path-context. + name: dockerfile + type: string + - description: Pull spec to use for the base image. + name: base-image + type: string + - description: Catalog dir to use for building image. + name: catalog-dir + type: string + - default: "false" + description: Skip checks against built image + name: skip-checks + type: string + - default: "true" + description: Execute the build with network isolation + name: hermetic + type: string + - default: "" + description: Build dependencies to be prefetched by Cachi2 + name: prefetch-input + type: string + - description: Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively. + name: image-expires-after + # Image expiry disabled because it sets quay.expires-after label on the image which fails Conforma at release time. + # A downside is that FBC images will stay in our Quay forever while certainly they become unneeded as time passes. + # TODO(ROX-27836): find a way to garbage-collect FBC images. + default: '' + - default: "false" + description: Build a source image. + name: build-source-image + type: string + - default: "true" + description: Add built image into an OCI image index + name: build-image-index + type: string + - default: "1d" + description: This sets the expiration time for intermediate OCI artifacts produced and used during builds after which they can be garbage collected. + name: oci-artifact-expires-after + type: string + - default: + - linux/x86_64 + - linux/arm64 + - linux/ppc64le + - linux/s390x + description: List of platforms to build the container images for. The available set of values is determined by the configuration of the multi-platform-controller. + name: build-platforms + type: array + - name: buildah-format + default: oci + type: string + description: The format for the resulting image's mediaType. Valid values are oci or docker. + - name: enable-cache-proxy + default: 'false' + description: Enable cache proxy configuration + type: string + - name: source-date-epoch + type: string + default: '' + description: Sets the image created time and the SOURCE_DATE_EPOCH build argument. On its own, it does not change file timestamps inside the layers (set rewrite-timestamp to "true" for that). Leave empty to keep the actual build time. + - name: rewrite-timestamp + type: string + default: 'false' + description: When "true", clamp file modification times in the image layers to at most source-date-epoch. Does nothing unless source-date-epoch is set. + - name: omit-history + type: string + default: 'false' + description: When "true", omit the build history (history timestamps, layer metadata, etc.) from the resulting image. results: - - description: "" - name: IMAGE_URL - value: $(tasks.build-image-index.results.IMAGE_URL) - - description: "" - name: IMAGE_DIGEST - value: $(tasks.build-image-index.results.IMAGE_DIGEST) - - description: "" - name: CHAINS-GIT_URL - value: $(tasks.clone-repository.results.url) - - description: "" - name: CHAINS-GIT_COMMIT - value: $(tasks.clone-repository.results.commit) - + - description: "" + name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + - description: "" + name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - description: "" + name: CHAINS-GIT_URL + value: $(tasks.clone-repository.results.url) + - description: "" + name: CHAINS-GIT_COMMIT + value: $(tasks.clone-repository.results.commit) workspaces: - - name: git-auth - + - name: git-auth tasks: - - - name: post-metric-start - taskRef: *post-bigquery-metrics-ref - - - name: init - params: - - name: enable-cache-proxy - value: $(params.enable-cache-proxy) - taskRef: + - name: post-metric-start + taskRef: *post-bigquery-metrics-ref + params: [] + - name: init params: - - name: name - value: init - - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08 - - name: kind - value: task - resolver: bundles - - - name: clone-repository - params: - - name: url - value: $(params.git-url) - - name: revision - value: $(params.revision) - - name: ociStorage - value: $(params.output-image-repo):konflux-$(params.revision).git - - name: ociArtifactExpiresAfter - value: $(params.oci-artifact-expires-after) - taskRef: + - name: enable-cache-proxy + value: $(params.enable-cache-proxy) + taskRef: + params: + - name: name + value: init + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-init:0.4.3@sha256:b8465d543589b1238f6911626657f5766e279a0f33a5f70de68073401e031184 + - name: kind + value: task + resolver: bundles + - name: clone-repository params: - - name: name - value: git-clone-oci-ta - - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.2@sha256:e5ba1f8549e6a0f043629ef00bea7511957121e05304b688f40ff12304560f38 - - name: kind - value: task - resolver: bundles - workspaces: - - name: basic-auth - workspace: git-auth - - - name: build-images - matrix: + - name: url + value: $(params.git-url) + - name: revision + value: $(params.revision) + - name: ociStorage + value: $(params.output-image-repo):konflux-$(params.revision).git + - name: ociArtifactExpiresAfter + value: $(params.oci-artifact-expires-after) + taskRef: + params: + - name: name + value: git-clone-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.2.5@sha256:510daad5648d37936b9b2c599a35c8e59b7389de8e1a4e58f6c6d079957d730d + - name: kind + value: task + resolver: bundles + workspaces: + - name: basic-auth + workspace: git-auth + - name: build-images + matrix: + params: + - name: PLATFORM + value: + - $(params.build-platforms) params: - - name: PLATFORM - value: - - $(params.build-platforms) - params: - - name: IMAGE - value: $(params.output-image-repo):$(params.output-image-tag) - - name: DOCKERFILE - value: $(params.dockerfile) - - name: CONTEXT - value: $(params.path-context) - - name: HERMETIC - value: $(params.hermetic) - - name: IMAGE_EXPIRES_AFTER - value: $(params.image-expires-after) - - name: COMMIT_SHA - value: $(tasks.clone-repository.results.commit) - - name: BUILD_ARGS - value: - - base_image=$(params.base-image) - - catalog_dir=$(params.catalog-dir) - - name: SOURCE_ARTIFACT - value: $(tasks.clone-repository.results.SOURCE_ARTIFACT) - - name: IMAGE_APPEND_PLATFORM - value: "true" - - name: BUILDAH_FORMAT - value: $(params.buildah-format) - - name: HTTP_PROXY - value: $(tasks.init.results.http-proxy) - - name: NO_PROXY - value: $(tasks.init.results.no-proxy) - taskRef: + - name: IMAGE + value: $(params.output-image-repo):$(params.output-image-tag) + - name: DOCKERFILE + value: $(params.dockerfile) + - name: CONTEXT + value: $(params.path-context) + - name: HERMETIC + value: $(params.hermetic) + - name: IMAGE_EXPIRES_AFTER + value: $(params.image-expires-after) + - name: COMMIT_SHA + value: $(tasks.clone-repository.results.commit) + - name: BUILD_ARGS + value: + - base_image=$(params.base-image) + - catalog_dir=$(params.catalog-dir) + - name: SOURCE_ARTIFACT + value: $(tasks.fbc-inject-lifecycle.results.SOURCE_ARTIFACT) + - name: IMAGE_APPEND_PLATFORM + value: "true" + - name: BUILDAH_FORMAT + value: $(params.buildah-format) + - name: HTTP_PROXY + value: $(tasks.init.results.http-proxy) + - name: NO_PROXY + value: $(tasks.init.results.no-proxy) + - name: SOURCE_DATE_EPOCH + value: $(params.source-date-epoch) + - name: REWRITE_TIMESTAMP + value: $(params.rewrite-timestamp) + - name: OMIT_HISTORY + value: $(params.omit-history) + taskRef: + params: + - name: name + value: buildah-remote-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.10.7@sha256:94f129a97242995d647b1d23a5d53e7022e0c3dc00aff764a4da4be263263cbf + - name: kind + value: task + resolver: bundles + retries: 1 + runAfter: [] + - name: build-image-index params: - - name: name - value: buildah-remote-oci-ta - - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.10@sha256:c77892be9e7217b9baa9abdbaf432c16ee49c30601b6b25cfbc9d704295c58ef - - name: kind - value: task - resolver: bundles - retries: 1 - - - name: build-image-index - params: - - name: IMAGE - value: $(params.output-image-repo):$(params.output-image-tag) - - name: ALWAYS_BUILD_INDEX - value: $(params.build-image-index) - - name: IMAGES - value: - - $(tasks.build-images.results.IMAGE_REF[*]) - - name: BUILDAH_FORMAT - value: $(params.buildah-format) - taskRef: + - name: IMAGE + value: $(params.output-image-repo):$(params.output-image-tag) + - name: ALWAYS_BUILD_INDEX + value: $(params.build-image-index) + - name: IMAGES + value: + - $(tasks.build-images.results.IMAGE_REF[*]) + - name: BUILDAH_FORMAT + value: $(params.buildah-format) + taskRef: + params: + - name: name + value: build-image-index + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3.1@sha256:a355355b7fcd0ba8de4ba85a162a2e6893f53236b943f79cb03ae0ae9c5ef53c + - name: kind + value: task + resolver: bundles + runAfter: [build-images] + - name: deprecated-base-image-check params: - - name: name - value: build-image-index - - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:70c52e88e737340e7b58418fda38c13273aa7cdf587b825778e3560aca1d1133 - - name: kind - value: task - resolver: bundles - runAfter: [ build-images ] - - - name: deprecated-base-image-check - params: - - name: IMAGE_URL - value: $(tasks.build-image-index.results.IMAGE_URL) - - name: IMAGE_DIGEST - value: $(tasks.build-image-index.results.IMAGE_DIGEST) - taskRef: + - name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + taskRef: + params: + - name: name + value: deprecated-image-check + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:0ccc688a77e9b7b0b8973c132a1e840844137e77f887be4a0bec8893b0776872 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: ["false"] + - name: apply-tags params: - - name: name - value: deprecated-image-check - - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:e78d0d3baf3c8cfc1a5ad278196b74032d9568b143a87c7a79ab780fedfb296e - - name: kind - value: task - resolver: bundles - when: - - input: $(params.skip-checks) - operator: in - values: ["false"] - - - name: apply-tags - params: - - name: IMAGE_URL - value: $(tasks.build-image-index.results.IMAGE_URL) - - name: IMAGE_DIGEST - value: $(tasks.build-image-index.results.IMAGE_DIGEST) - taskRef: + - name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + taskRef: + params: + - name: name + value: apply-tags + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:6387614ae4f9efa8abb7c4175db0ce5d958bc2b90665b4704880e46fbe0535bf + - name: kind + value: task + resolver: bundles + - name: validate-fbc params: - - name: name - value: apply-tags - - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:3ab844157eccd68e95e4852adc06c3c4ea674edb7865a474b0a898227f2893d6 - - name: kind - value: task - resolver: bundles - - - name: validate-fbc - params: - - name: IMAGE_URL - value: $(tasks.build-image-index.results.IMAGE_URL) - - name: IMAGE_DIGEST - value: $(tasks.build-image-index.results.IMAGE_DIGEST) - taskRef: + - name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + taskRef: + params: + - name: name + value: validate-fbc + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-validate-fbc:0.3@sha256:5ac2ab06fa8b7b7dfaa7a57cf68d3dd8de3fa9c7d6ebaef17626509c45f234a3 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: ["false"] + - name: fbc-target-index-pruning-check params: - - name: name - value: validate-fbc - - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-validate-fbc:0.1@sha256:855ac0d3e01755cfcc9854d4e47fed2a655fd7ca259adf4e403ab5b658333313 - - name: kind - value: task - resolver: bundles - when: - - input: $(params.skip-checks) - operator: in - values: ["false"] - - - name: fbc-target-index-pruning-check - params: - - name: IMAGE_URL - value: $(tasks.build-image-index.results.IMAGE_URL) - - name: IMAGE_DIGEST - value: $(tasks.build-image-index.results.IMAGE_DIGEST) - - name: TARGET_INDEX - value: registry.redhat.io/redhat/redhat-operator-index - - name: RENDERED_CATALOG_DIGEST - value: $(tasks.validate-fbc.results.RENDERED_CATALOG_DIGEST) - taskRef: + - name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: TARGET_INDEX + value: registry.redhat.io/redhat/redhat-operator-index + - name: RENDERED_CATALOG_DIGEST + value: $(tasks.validate-fbc.results.RENDERED_CATALOG_DIGEST) + taskRef: + params: + - name: name + value: fbc-target-index-pruning-check + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-fbc-target-index-pruning-check:0.1@sha256:a7696d92734be62700723b6d2c40dfaee4809e6a1d42b28deefc7c7463176c32 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: ["false"] + - name: fbc-fips-check-oci-ta params: - - name: name - value: fbc-target-index-pruning-check - - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-fbc-target-index-pruning-check:0.1@sha256:a7696d92734be62700723b6d2c40dfaee4809e6a1d42b28deefc7c7463176c32 - - name: kind - value: task - resolver: bundles - when: - - input: $(params.skip-checks) - operator: in - values: ["false"] - - - name: fbc-fips-check-oci-ta - params: - - name: image-digest - value: $(tasks.build-image-index.results.IMAGE_DIGEST) - - name: image-url - value: $(tasks.build-image-index.results.IMAGE_URL) - - name: SOURCE_ARTIFACT - value: $(tasks.clone-repository.results.SOURCE_ARTIFACT) - taskRef: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: SOURCE_ARTIFACT + value: $(tasks.fbc-inject-lifecycle.results.SOURCE_ARTIFACT) + taskRef: + params: + - name: name + value: fbc-fips-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-fbc-fips-check-oci-ta:0.1@sha256:935adb61a5c9be0f619edc8838771ad3fe08cf17689094aeaaeac493af2a2115 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: ["false"] + runAfter: [] + - name: fbc-inject-lifecycle + taskRef: + resolver: bundles + params: + - name: kind + value: task + - name: name + value: fbc-inject-lifecycle-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-fbc-inject-lifecycle-oci-ta:0.1@sha256:da1217be1dcec3d5b5140ea351466607005481397b31f2b81108c4fd3012fbde params: - - name: name - value: fbc-fips-check-oci-ta - - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-fbc-fips-check-oci-ta:0.1@sha256:935adb61a5c9be0f619edc8838771ad3fe08cf17689094aeaaeac493af2a2115 - - name: kind - value: task - resolver: bundles - when: - - input: $(params.skip-checks) - operator: in - values: ["false"] + - name: DOCKERFILE + value: $(params.dockerfile) + - name: CONTEXT + value: $(params.path-context) + - name: SOURCE_ARTIFACT + value: $(tasks.clone-repository.results.SOURCE_ARTIFACT) + - name: ociStorage + value: $(params.output-image).lifecycle + - name: ociArtifactExpiresAfter + value: $(params.image-expires-after) + runAfter: + - clone-repository diff --git a/.tekton/ready-for-master-merge.yaml b/.tekton/ready-for-master-merge.yaml index 7daf8eaa..0ec50c08 100644 --- a/.tekton/ready-for-master-merge.yaml +++ b/.tekton/ready-for-master-merge.yaml @@ -78,7 +78,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.2@sha256:e5ba1f8549e6a0f043629ef00bea7511957121e05304b688f40ff12304560f38 + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.2.5@sha256:510daad5648d37936b9b2c599a35c8e59b7389de8e1a4e58f6c6d079957d730d - name: kind value: task resolver: bundles