@@ -6,10 +6,9 @@ metadata:
66 build.appstudio.redhat.com/commit_sha : ' {{revision}}'
77 build.appstudio.redhat.com/pull_request_number : ' {{pull_request_number}}'
88 build.appstudio.redhat.com/target_branch : ' {{target_branch}}'
9- pipelinesascode.tekton.dev/max-keep-runs : " 3"
10- pipelinesascode.tekton.dev/on-cel-expression : event == "pull_request" && target_branch
11- == "main"
12- creationTimestamp : null
9+ pipelinesascode.tekton.dev/max-keep-runs : ' 3'
10+ pipelinesascode.tekton.dev/on-cel-expression : event == "pull_request" && target_branch == "main"
11+ creationTimestamp :
1312 labels :
1413 appstudio.openshift.io/application : openshift-gitops-operator
1514 appstudio.openshift.io/component : gitops-must-gather
3231 - name : dockerfile
3332 value : .konflux/Containerfile.plugin
3433 - name : hermetic
35- value : " true"
34+ value : ' true'
3635 pipelineSpec :
3736 description : |
3837 This pipeline is ideal for building multi-arch container images from a Containerfile while maintaining trust after pipeline customization.
@@ -49,84 +48,80 @@ spec:
4948 - name : name
5049 value : show-sbom
5150 - name : bundle
52- value : quay.io/konflux-ci/tekton-catalog/task-show-sbom:0.1@sha256:04f15cbce548e1db7770eee3f155ccb2cc0140a6c371dc67e9a34d83673ea0c0
51+ value : quay.io/konflux-ci/tekton-catalog/task-show-sbom:0.1@sha256:1b1df4da95966d08ac6a5b8198710e09e68b5c2cdc707c37d9d19769e65884b2
5352 - name : kind
5453 value : task
5554 resolver : bundles
5655 params :
5756 - description : Source Repository URL
5857 name : git-url
5958 type : string
60- - default : " "
59+ - default : ' '
6160 description : Revision of the Source Repository
6261 name : revision
6362 type : string
6463 - description : Fully Qualified Output Image
6564 name : output-image
6665 type : string
6766 - default : .
68- description : Path to the source code of an application's component from where
69- to build image.
67+ description : Path to the source code of an application's component from where to build image.
7068 name : path-context
7169 type : string
7270 - default : Dockerfile
73- description : Path to the Dockerfile inside the context specified by parameter
74- path-context
71+ description : Path to the Dockerfile inside the context specified by parameter path-context
7572 name : dockerfile
7673 type : string
77- - default : " false"
74+ - default : ' false'
7875 description : Force rebuild image
7976 name : rebuild
8077 type : string
81- - default : " false"
78+ - default : ' false'
8279 description : Skip checks against built image
8380 name : skip-checks
8481 type : string
85- - default : " false"
82+ - default : ' false'
8683 description : Execute the build with network isolation
8784 name : hermetic
8885 type : string
89- - default : " "
86+ - default : ' '
9087 description : Build dependencies to be prefetched by Cachi2
9188 name : prefetch-input
9289 type : string
93- - default : " "
94- description : Image tag expiration time, time values could be something like
95- 1h, 2d, 3w for hours, days, and weeks, respectively.
90+ - default : ' '
91+ description : Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.
9692 name : image-expires-after
97- - default : " false"
93+ - default : ' false'
9894 description : Build a source image.
9995 name : build-source-image
10096 type : string
101- - default : " true"
97+ - default : ' true'
10298 description : Add built image into an OCI image index
10399 name : build-image-index
104100 type : string
105101 - default : []
106102 description : Array of --build-arg values ("arg=value" strings) for buildah
107103 name : build-args
108104 type : array
109- - default : " "
105+ - default : ' '
110106 description : Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file
111107 name : build-args-file
112108 type : string
113109 - default :
114110 - linux/x86_64
115- description : List of platforms to build the container images on. The available
116- set of values is determined by the configuration of the multi-platform-controller.
111+ description : List of platforms to build the container images on. The available set of values is determined by the configuration of the multi-platform-controller.
117112 name : build-platforms
118113 type : array
119114 results :
120- - description : " "
115+ - description : ' '
121116 name : IMAGE_URL
122117 value : $(tasks.build-image-index.results.IMAGE_URL)
123- - description : " "
118+ - description : ' '
124119 name : IMAGE_DIGEST
125120 value : $(tasks.build-image-index.results.IMAGE_DIGEST)
126- - description : " "
121+ - description : ' '
127122 name : CHAINS-GIT_URL
128123 value : $(tasks.clone-repository.results.url)
129- - description : " "
124+ - description : ' '
130125 name : CHAINS-GIT_COMMIT
131126 value : $(tasks.clone-repository.results.commit)
132127 tasks :
@@ -143,7 +138,7 @@ spec:
143138 - name : name
144139 value : init
145140 - name : bundle
146- value : quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:737682d073a65a486d59b2b30e3104b93edd8490e0cd5e9b4a39703e47363f0f
141+ value : quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:66e90d31e1386bf516fb548cd3e3f0082b5d0234b8b90dbf9e0d4684b70dbe1a
147142 - name : kind
148143 value : task
149144 resolver : bundles
@@ -164,15 +159,15 @@ spec:
164159 - name : name
165160 value : git-clone-oci-ta
166161 - name : bundle
167- value : quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:9709088bf3c581d4763e9804d9ee3a1f06ad6a61c23237277057c4f0cdc4f9c3
162+ value : quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:d35e5d501cb5f5f88369511f76249857cb5ac30250e1dcf086939321964ff6b9
168163 - name : kind
169164 value : task
170165 resolver : bundles
171166 when :
172167 - input : $(tasks.init.results.build)
173168 operator : in
174169 values :
175- - " true"
170+ - ' true'
176171 workspaces :
177172 - name : basic-auth
178173 workspace : git-auth
@@ -193,7 +188,7 @@ spec:
193188 - name : name
194189 value : prefetch-dependencies-oci-ta
195190 - name : bundle
196- value : quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:efc8aebec295bf5986597b6bbeebe093b2764fea79c66094e05ff3d283f54932
191+ value : quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:5e15408f997557153b13d492aeccb51c01923bfbe4fbdf6f1e8695ce1b82f826
197192 - name : kind
198193 value : task
199194 resolver : bundles
@@ -233,7 +228,7 @@ spec:
233228 - name : CACHI2_ARTIFACT
234229 value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
235230 - name : IMAGE_APPEND_PLATFORM
236- value : " true"
231+ value : ' true'
237232 - name : LABELS
238233 value :
239234 - upstream-source-url=$(tasks.clone-repository.results.url)
@@ -245,15 +240,15 @@ spec:
245240 - name : name
246241 value : buildah-remote-oci-ta
247242 - name : bundle
248- value : quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:468708e0a5dc3a314d71ca0cf2db80c6d7fefae98b292b10fa1cf07ea3787d9e
243+ value : quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:ae87472f60dbbf71e4980cd478c92740c145fd9e44acbb9b164a21f1bcd61aa3
249244 - name : kind
250245 value : task
251246 resolver : bundles
252247 when :
253248 - input : $(tasks.init.results.build)
254249 operator : in
255250 values :
256- - " true"
251+ - ' true'
257252 - name : build-image-index
258253 params :
259254 - name : IMAGE
@@ -274,15 +269,15 @@ spec:
274269 - name : name
275270 value : build-image-index
276271 - name : bundle
277- value : quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:95be274b6d0432d4671e2c41294ec345121bdf01284b1c6c46b5537dc6b37e15
272+ value : quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:846dc9975914f31380ec2712fdbac9df3b06c00a9cc7df678315a7f97145efc2
278273 - name : kind
279274 value : task
280275 resolver : bundles
281276 when :
282277 - input : $(tasks.init.results.build)
283278 operator : in
284279 values :
285- - " true"
280+ - ' true'
286281 - name : build-source-image
287282 params :
288283 - name : BINARY_IMAGE
@@ -298,19 +293,19 @@ spec:
298293 - name : name
299294 value : source-build-oci-ta
300295 - name : bundle
301- value : quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.2@sha256:9fe82c9511f282287686f918bf1a543fcef417848e7a503357e988aab2887cee
296+ value : quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.2@sha256:b424894fc8e806c12658daa565b835fd2d66e7f7608afc47529eb7b410f030d7
302297 - name : kind
303298 value : task
304299 resolver : bundles
305300 when :
306301 - input : $(tasks.init.results.build)
307302 operator : in
308303 values :
309- - " true"
304+ - ' true'
310305 - input : $(params.build-source-image)
311306 operator : in
312307 values :
313- - " true"
308+ - ' true'
314309 - name : deprecated-base-image-check
315310 params :
316311 - name : IMAGE_URL
@@ -324,15 +319,15 @@ spec:
324319 - name : name
325320 value : deprecated-image-check
326321 - name : bundle
327- value : quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:5d63b920b71192906fe4d6c4903f594e6f34c5edcff9d21714a08b5edcfbc667
322+ value : quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3c8b81fa868e27c6266e7660a4bfb4c822846dcf4304606e71e20893b0d3e515
328323 - name : kind
329324 value : task
330325 resolver : bundles
331326 when :
332327 - input : $(params.skip-checks)
333328 operator : in
334329 values :
335- - " false"
330+ - ' false'
336331 - name : clair-scan
337332 params :
338333 - name : image-digest
@@ -346,15 +341,15 @@ spec:
346341 - name : name
347342 value : clair-scan
348343 - name : bundle
349- value : quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:712afcf63f3b5a97c371d37e637efbcc9e1c7ad158872339d00adc6413cd8851
344+ value : quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:d354939892f3a904223ec080cc3771bd11931085a5d202323ea491ee8e8c5e43
350345 - name : kind
351346 value : task
352347 resolver : bundles
353348 when :
354349 - input : $(params.skip-checks)
355350 operator : in
356351 values :
357- - " false"
352+ - ' false'
358353 - name : ecosystem-cert-preflight-checks
359354 params :
360355 - name : image-url
@@ -366,15 +361,15 @@ spec:
366361 - name : name
367362 value : ecosystem-cert-preflight-checks
368363 - name : bundle
369- value : quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:00b13d06d17328e105b11619ee4db98b215ca6ac02314a4776aa5fc2a974f9c1
364+ value : quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:b550ff4f0b634512ce5200074be7afd7a5a6c05b783620c626e2a3035cd56448
370365 - name : kind
371366 value : task
372367 resolver : bundles
373368 when :
374369 - input : $(params.skip-checks)
375370 operator : in
376371 values :
377- - " false"
372+ - ' false'
378373 - name : sast-snyk-check
379374 params :
380375 - name : image-digest
@@ -392,15 +387,15 @@ spec:
392387 - name : name
393388 value : sast-snyk-check-oci-ta
394389 - name : bundle
395- value : quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.3 @sha256:a1cb59ed66a7be1949c9720660efb0a006e95ef05b3f67929dd8e310e1d7baef
390+ value : quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4 @sha256:e61f541189b30d14292ef8df36ccaf13f7feb2378fed5f74cb6293b3e79eb687
396391 - name : kind
397392 value : task
398393 resolver : bundles
399394 when :
400395 - input : $(params.skip-checks)
401396 operator : in
402397 values :
403- - " false"
398+ - ' false'
404399 - name : clamav-scan
405400 params :
406401 - name : image-digest
@@ -414,27 +409,29 @@ spec:
414409 - name : name
415410 value : clamav-scan
416411 - name : bundle
417- value : quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.2@sha256:62c835adae22e36fce6684460b39206bc16752f1a4427cdbba4ee9afdd279670
412+ value : quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.2@sha256:9cab95ac9e833d77a63c079893258b73b8d5a298d93aaf9bdd6722471bc2f338
418413 - name : kind
419414 value : task
420415 resolver : bundles
421416 when :
422417 - input : $(params.skip-checks)
423418 operator : in
424419 values :
425- - " false"
420+ - ' false'
426421 - name : apply-tags
427422 params :
428- - name : IMAGE
423+ - name : IMAGE_URL
429424 value : $(tasks.build-image-index.results.IMAGE_URL)
425+ - name : IMAGE_DIGEST
426+ value : $(tasks.build-image-index.results.IMAGE_DIGEST)
430427 runAfter :
431428 - build-image-index
432429 taskRef :
433430 params :
434431 - name : name
435432 value : apply-tags
436433 - name : bundle
437- value : quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.1 @sha256:61c90b1c94a2a11cb11211a0d65884089b758c34254fcec164d185a402beae22
434+ value : quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2 @sha256:517a51e260c0b59654a9d7b842e1ab07d76bce15ca7ce9c8fd2489a19be6463d
438435 - name : kind
439436 value : task
440437 resolver : bundles
@@ -457,7 +454,7 @@ spec:
457454 - name : name
458455 value : push-dockerfile-oci-ta
459456 - name : bundle
460- value : quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:55a4ff2910ae2e4502f3841719935d37578bd52156bc789fcdf45ff48c2b048b
457+ value : quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:5d8013b6a27bbc5e4ff261144616268f28417ed0950d583ef36349fcd59d3d3d
461458 - name : kind
462459 value : task
463460 resolver : bundles
@@ -474,15 +471,15 @@ spec:
474471 - name : name
475472 value : rpms-signature-scan
476473 - name : bundle
477- value : quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:c0798ff85ad04f1553d349fe34aa4918597fb35b3b74e344dfbd5af2f3494300
474+ value : quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:1b6c20ab3dbfb0972803d3ebcb2fa72642e59400c77bd66dfd82028bdd09e120
478475 - name : kind
479476 value : task
480477 resolver : bundles
481478 when :
482479 - input : $(params.skip-checks)
483480 operator : in
484481 values :
485- - " false"
482+ - ' false'
486483 workspaces :
487484 - name : git-auth
488485 optional : true
0 commit comments