From 151e844401b555a52715cb63cb9fa55c5ac6b323 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 29 Aug 2025 06:19:19 +0000 Subject: [PATCH 01/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- ...tstack-cert-manager-1-18-pull-request.yaml | 620 ++++++++++++++++++ .tekton/jetstack-cert-manager-1-18-push.yaml | 617 +++++++++++++++++ 2 files changed, 1237 insertions(+) create mode 100644 .tekton/jetstack-cert-manager-1-18-pull-request.yaml create mode 100644 .tekton/jetstack-cert-manager-1-18-push.yaml diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml new file mode 100644 index 00000000..feb31bc5 --- /dev/null +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -0,0 +1,620 @@ +apiVersion: tekton.dev/v1 +kind: PipelineRun +metadata: + annotations: + build.appstudio.openshift.io/repo: https://github.com/openshift/cert-manager-operator-release?rev={{revision}} + build.appstudio.redhat.com/commit_sha: '{{revision}}' + build.appstudio.redhat.com/pull_request_number: '{{pull_request_number}}' + build.appstudio.redhat.com/target_branch: '{{target_branch}}' + pipelinesascode.tekton.dev/cancel-in-progress: "true" + pipelinesascode.tekton.dev/max-keep-runs: "3" + pipelinesascode.tekton.dev/on-cel-expression: event == "pull_request" && target_branch + == "release-1.18" + creationTimestamp: null + labels: + appstudio.openshift.io/application: jetstack-cert-manager-1-18 + appstudio.openshift.io/component: jetstack-cert-manager-1-18 + pipelines.appstudio.openshift.io/type: build + name: jetstack-cert-manager-1-18-on-pull-request + namespace: cert-manager-oape-tenant +spec: + params: + - name: git-url + value: '{{source_url}}' + - name: revision + value: '{{revision}}' + - name: output-image + value: quay.io/redhat-user-workloads/cert-manager-oape-tenant/jetstack-cert-manager-1-18/jetstack-cert-manager-1-18:on-pr-{{revision}} + - name: image-expires-after + value: 5d + - name: build-platforms + value: + - linux/x86_64 + - name: dockerfile + value: Containerfile.cert-manager + - name: path-context + value: . + pipelineSpec: + description: | + This pipeline is ideal for building multi-arch container images from a Containerfile while maintaining trust after pipeline customization. + + _Uses `buildah` to create a multi-platform container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. This pipeline requires that the [multi platform controller](https://github.com/konflux-ci/multi-platform-controller) is deployed and configured on your Konflux instance. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks. + This pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-multi-platform-oci-ta?tab=tags)_ + params: + - description: Source Repository URL + name: git-url + type: string + - default: "" + description: Revision of the Source Repository + name: revision + type: string + - description: Fully Qualified Output Image + name: output-image + type: string + - default: . + description: Path to the source code of an application's component from where + to build image. + name: path-context + type: string + - default: Dockerfile + description: Path to the Dockerfile inside the context specified by parameter + path-context + name: dockerfile + type: string + - default: "false" + description: Force rebuild image + name: rebuild + type: string + - default: "false" + description: Skip checks against built image + name: skip-checks + type: string + - default: "false" + description: Execute the build with network isolation + name: hermetic + type: string + - default: "" + description: Build dependencies to be prefetched + name: prefetch-input + type: string + - default: "" + description: Image tag expiration time, time values could be something like + 1h, 2d, 3w for hours, days, and weeks, respectively. + name: image-expires-after + type: string + - default: "false" + description: Build a source image. + name: build-source-image + type: string + - default: "true" + description: Add built image into an OCI image index + name: build-image-index + type: string + - default: [] + description: Array of --build-arg values ("arg=value" strings) for buildah + name: build-args + type: array + - default: "" + description: Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file + name: build-args-file + type: string + - default: "false" + description: Whether to enable privileged mode, should be used only with remote + VMs + name: privileged-nested + type: string + - default: + - linux/x86_64 + description: List of platforms to build the container images on. The available + set of values is determined by the configuration of the multi-platform-controller. + name: build-platforms + type: array + results: + - description: "" + name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + - description: "" + name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - description: "" + name: CHAINS-GIT_URL + value: $(tasks.clone-repository.results.url) + - description: "" + name: CHAINS-GIT_COMMIT + value: $(tasks.clone-repository.results.commit) + tasks: + - name: init + params: + - name: image-url + value: $(params.output-image) + - name: rebuild + value: $(params.rebuild) + - name: skip-checks + value: $(params.skip-checks) + taskRef: + params: + - name: name + value: init + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ded314206f09712b2116deb050b774ae7efef9ab243794334c8e616871a3ffa5 + - name: kind + value: task + resolver: bundles + - name: clone-repository + params: + - name: url + value: $(params.git-url) + - name: revision + value: $(params.revision) + - name: ociStorage + value: $(params.output-image).git + - name: ociArtifactExpiresAfter + value: $(params.image-expires-after) + runAfter: + - init + taskRef: + params: + - name: name + value: git-clone-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:4a601aeec58a1dd89c271e728fd8f0d84777825b46940c3aec27f15bab3edacf + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + workspaces: + - name: basic-auth + workspace: git-auth + - name: prefetch-dependencies + params: + - name: input + value: $(params.prefetch-input) + - name: SOURCE_ARTIFACT + value: $(tasks.clone-repository.results.SOURCE_ARTIFACT) + - name: ociStorage + value: $(params.output-image).prefetch + - name: ociArtifactExpiresAfter + value: $(params.image-expires-after) + runAfter: + - clone-repository + taskRef: + params: + - name: name + value: prefetch-dependencies-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:22290579c9fe0b5c1689bb9023b3eddec73c285b680226d9f460346ae849a2cb + - name: kind + value: task + resolver: bundles + workspaces: + - name: git-basic-auth + workspace: git-auth + - name: netrc + workspace: netrc + - matrix: + params: + - name: PLATFORM + value: + - $(params.build-platforms) + name: build-images + params: + - name: IMAGE + value: $(params.output-image) + - name: DOCKERFILE + value: $(params.dockerfile) + - name: CONTEXT + value: $(params.path-context) + - name: HERMETIC + value: $(params.hermetic) + - name: PREFETCH_INPUT + value: $(params.prefetch-input) + - name: IMAGE_EXPIRES_AFTER + value: $(params.image-expires-after) + - name: COMMIT_SHA + value: $(tasks.clone-repository.results.commit) + - name: BUILD_ARGS + value: + - $(params.build-args[*]) + - name: BUILD_ARGS_FILE + value: $(params.build-args-file) + - name: PRIVILEGED_NESTED + value: $(params.privileged-nested) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + - name: IMAGE_APPEND_PLATFORM + value: "true" + runAfter: + - prefetch-dependencies + taskRef: + params: + - name: name + value: buildah-remote-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:cd9ef1eb119700a6883edcf93fd7c71dc33ee43467f3c2728b2a002c77915e8d + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + - name: build-image-index + params: + - name: IMAGE + value: $(params.output-image) + - name: COMMIT_SHA + value: $(tasks.clone-repository.results.commit) + - name: IMAGE_EXPIRES_AFTER + value: $(params.image-expires-after) + - name: ALWAYS_BUILD_INDEX + value: $(params.build-image-index) + - name: IMAGES + value: + - $(tasks.build-images.results.IMAGE_REF[*]) + runAfter: + - build-images + taskRef: + params: + - name: name + value: build-image-index + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:ba7fbed5c4862968c1a77d6b90d5bdd497925ab1de41b859c027dd5c3069cd3e + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + - name: build-source-image + params: + - name: BINARY_IMAGE + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: BINARY_IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: source-build-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:7a36cc284c5932c18e117fe5995f3246b5dcc11ec742b66a2f9ae710034b064f + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + - input: $(params.build-source-image) + operator: in + values: + - "true" + - name: deprecated-base-image-check + params: + - name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: deprecated-image-check + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:1d07d16810c26713f3d875083924d93697900147364360587ccb5a63f2c31012 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: clair-scan + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: clair-scan + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:893ffa3ce26b061e21bb4d8db9ef7ed4ddd4044fe7aa5451ef391034da3ff759 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - matrix: + params: + - name: platform + value: + - $(params.build-platforms) + name: ecosystem-cert-preflight-checks + params: + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: ecosystem-cert-preflight-checks + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:e106b6182e72c8f34ceae3f56b0b1aa2b4dc60f573877d9e51c3791029a7acb6 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-snyk-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: sast-snyk-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:322c86ad5ee252c04440184d9f5046d276415148cb6bfaf571be1b102101786b + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - matrix: + params: + - name: image-arch + value: + - $(params.build-platforms) + name: clamav-scan + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: clamav-scan + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:b0bd59748cda4a7abf311e4f448e6c1d00c6b6d8c0ecc1c2eb33e08dc0e0b802 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-coverity-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE + value: $(params.output-image) + - name: DOCKERFILE + value: $(params.dockerfile) + - name: CONTEXT + value: $(params.path-context) + - name: HERMETIC + value: $(params.hermetic) + - name: PREFETCH_INPUT + value: $(params.prefetch-input) + - name: IMAGE_EXPIRES_AFTER + value: $(params.image-expires-after) + - name: COMMIT_SHA + value: $(tasks.clone-repository.results.commit) + - name: BUILD_ARGS + value: + - $(params.build-args[*]) + - name: BUILD_ARGS_FILE + value: $(params.build-args-file) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - coverity-availability-check + taskRef: + params: + - name: name + value: sast-coverity-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:cdbe1a968676e4f5519b082bf1e27a4cdcf66dd60af66dbc26b3e604f957f7e9 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - input: $(tasks.coverity-availability-check.results.STATUS) + operator: in + values: + - success + - name: coverity-availability-check + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: coverity-availability-check + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check:0.2@sha256:db2b267dc15e4ed17f704ee91b8e9b38068e1a35b1018a328fdca621819d74c6 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-shell-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: sast-shell-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:bf7bdde00b7212f730c1356672290af6f38d070da2c8a316987b5c32fd49e0b9 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-unicode-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: sast-unicode-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.3@sha256:a2bde66f6b4164620298c7d709b8f08515409404000fa1dc2260d2508b135651 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: apply-tags + params: + - name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: apply-tags + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:e0de426d492e195f59c99d2ea1ca0df7bfb8c689f5d1468fe7f70eb8684b8d02 + - name: kind + value: task + resolver: bundles + - name: push-dockerfile + params: + - name: IMAGE + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: DOCKERFILE + value: $(params.dockerfile) + - name: CONTEXT + value: $(params.path-context) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: push-dockerfile-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:235ef6e835de8171c07b8a7f8947d0b40bfcff999e1ff3cb6ddd9acc65c48430 + - name: kind + value: task + resolver: bundles + - name: rpms-signature-scan + params: + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: rpms-signature-scan + - name: bundle + value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:e127e0e0a5aab1364b560436594fe7ed67abcd5f8d6dd3ef14ac1f35cf81078c + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + workspaces: + - name: git-auth + optional: true + - name: netrc + optional: true + taskRunTemplate: + serviceAccountName: build-pipeline-jetstack-cert-manager-1-18 + workspaces: + - name: git-auth + secret: + secretName: '{{ git_auth_secret }}' +status: {} diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml new file mode 100644 index 00000000..dacaf480 --- /dev/null +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -0,0 +1,617 @@ +apiVersion: tekton.dev/v1 +kind: PipelineRun +metadata: + annotations: + build.appstudio.openshift.io/repo: https://github.com/openshift/cert-manager-operator-release?rev={{revision}} + build.appstudio.redhat.com/commit_sha: '{{revision}}' + build.appstudio.redhat.com/target_branch: '{{target_branch}}' + pipelinesascode.tekton.dev/cancel-in-progress: "false" + pipelinesascode.tekton.dev/max-keep-runs: "3" + pipelinesascode.tekton.dev/on-cel-expression: event == "push" && target_branch + == "release-1.18" + creationTimestamp: null + labels: + appstudio.openshift.io/application: jetstack-cert-manager-1-18 + appstudio.openshift.io/component: jetstack-cert-manager-1-18 + pipelines.appstudio.openshift.io/type: build + name: jetstack-cert-manager-1-18-on-push + namespace: cert-manager-oape-tenant +spec: + params: + - name: git-url + value: '{{source_url}}' + - name: revision + value: '{{revision}}' + - name: output-image + value: quay.io/redhat-user-workloads/cert-manager-oape-tenant/jetstack-cert-manager-1-18/jetstack-cert-manager-1-18:{{revision}} + - name: build-platforms + value: + - linux/x86_64 + - name: dockerfile + value: Containerfile.cert-manager + - name: path-context + value: . + pipelineSpec: + description: | + This pipeline is ideal for building multi-arch container images from a Containerfile while maintaining trust after pipeline customization. + + _Uses `buildah` to create a multi-platform container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. This pipeline requires that the [multi platform controller](https://github.com/konflux-ci/multi-platform-controller) is deployed and configured on your Konflux instance. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks. + This pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-multi-platform-oci-ta?tab=tags)_ + params: + - description: Source Repository URL + name: git-url + type: string + - default: "" + description: Revision of the Source Repository + name: revision + type: string + - description: Fully Qualified Output Image + name: output-image + type: string + - default: . + description: Path to the source code of an application's component from where + to build image. + name: path-context + type: string + - default: Dockerfile + description: Path to the Dockerfile inside the context specified by parameter + path-context + name: dockerfile + type: string + - default: "false" + description: Force rebuild image + name: rebuild + type: string + - default: "false" + description: Skip checks against built image + name: skip-checks + type: string + - default: "false" + description: Execute the build with network isolation + name: hermetic + type: string + - default: "" + description: Build dependencies to be prefetched + name: prefetch-input + type: string + - default: "" + description: Image tag expiration time, time values could be something like + 1h, 2d, 3w for hours, days, and weeks, respectively. + name: image-expires-after + type: string + - default: "false" + description: Build a source image. + name: build-source-image + type: string + - default: "true" + description: Add built image into an OCI image index + name: build-image-index + type: string + - default: [] + description: Array of --build-arg values ("arg=value" strings) for buildah + name: build-args + type: array + - default: "" + description: Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file + name: build-args-file + type: string + - default: "false" + description: Whether to enable privileged mode, should be used only with remote + VMs + name: privileged-nested + type: string + - default: + - linux/x86_64 + description: List of platforms to build the container images on. The available + set of values is determined by the configuration of the multi-platform-controller. + name: build-platforms + type: array + results: + - description: "" + name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + - description: "" + name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - description: "" + name: CHAINS-GIT_URL + value: $(tasks.clone-repository.results.url) + - description: "" + name: CHAINS-GIT_COMMIT + value: $(tasks.clone-repository.results.commit) + tasks: + - name: init + params: + - name: image-url + value: $(params.output-image) + - name: rebuild + value: $(params.rebuild) + - name: skip-checks + value: $(params.skip-checks) + taskRef: + params: + - name: name + value: init + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ded314206f09712b2116deb050b774ae7efef9ab243794334c8e616871a3ffa5 + - name: kind + value: task + resolver: bundles + - name: clone-repository + params: + - name: url + value: $(params.git-url) + - name: revision + value: $(params.revision) + - name: ociStorage + value: $(params.output-image).git + - name: ociArtifactExpiresAfter + value: $(params.image-expires-after) + runAfter: + - init + taskRef: + params: + - name: name + value: git-clone-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:4a601aeec58a1dd89c271e728fd8f0d84777825b46940c3aec27f15bab3edacf + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + workspaces: + - name: basic-auth + workspace: git-auth + - name: prefetch-dependencies + params: + - name: input + value: $(params.prefetch-input) + - name: SOURCE_ARTIFACT + value: $(tasks.clone-repository.results.SOURCE_ARTIFACT) + - name: ociStorage + value: $(params.output-image).prefetch + - name: ociArtifactExpiresAfter + value: $(params.image-expires-after) + runAfter: + - clone-repository + taskRef: + params: + - name: name + value: prefetch-dependencies-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:22290579c9fe0b5c1689bb9023b3eddec73c285b680226d9f460346ae849a2cb + - name: kind + value: task + resolver: bundles + workspaces: + - name: git-basic-auth + workspace: git-auth + - name: netrc + workspace: netrc + - matrix: + params: + - name: PLATFORM + value: + - $(params.build-platforms) + name: build-images + params: + - name: IMAGE + value: $(params.output-image) + - name: DOCKERFILE + value: $(params.dockerfile) + - name: CONTEXT + value: $(params.path-context) + - name: HERMETIC + value: $(params.hermetic) + - name: PREFETCH_INPUT + value: $(params.prefetch-input) + - name: IMAGE_EXPIRES_AFTER + value: $(params.image-expires-after) + - name: COMMIT_SHA + value: $(tasks.clone-repository.results.commit) + - name: BUILD_ARGS + value: + - $(params.build-args[*]) + - name: BUILD_ARGS_FILE + value: $(params.build-args-file) + - name: PRIVILEGED_NESTED + value: $(params.privileged-nested) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + - name: IMAGE_APPEND_PLATFORM + value: "true" + runAfter: + - prefetch-dependencies + taskRef: + params: + - name: name + value: buildah-remote-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:cd9ef1eb119700a6883edcf93fd7c71dc33ee43467f3c2728b2a002c77915e8d + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + - name: build-image-index + params: + - name: IMAGE + value: $(params.output-image) + - name: COMMIT_SHA + value: $(tasks.clone-repository.results.commit) + - name: IMAGE_EXPIRES_AFTER + value: $(params.image-expires-after) + - name: ALWAYS_BUILD_INDEX + value: $(params.build-image-index) + - name: IMAGES + value: + - $(tasks.build-images.results.IMAGE_REF[*]) + runAfter: + - build-images + taskRef: + params: + - name: name + value: build-image-index + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:ba7fbed5c4862968c1a77d6b90d5bdd497925ab1de41b859c027dd5c3069cd3e + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + - name: build-source-image + params: + - name: BINARY_IMAGE + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: BINARY_IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: source-build-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:7a36cc284c5932c18e117fe5995f3246b5dcc11ec742b66a2f9ae710034b064f + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + - input: $(params.build-source-image) + operator: in + values: + - "true" + - name: deprecated-base-image-check + params: + - name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: deprecated-image-check + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:1d07d16810c26713f3d875083924d93697900147364360587ccb5a63f2c31012 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: clair-scan + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: clair-scan + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:893ffa3ce26b061e21bb4d8db9ef7ed4ddd4044fe7aa5451ef391034da3ff759 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - matrix: + params: + - name: platform + value: + - $(params.build-platforms) + name: ecosystem-cert-preflight-checks + params: + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: ecosystem-cert-preflight-checks + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:e106b6182e72c8f34ceae3f56b0b1aa2b4dc60f573877d9e51c3791029a7acb6 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-snyk-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: sast-snyk-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:322c86ad5ee252c04440184d9f5046d276415148cb6bfaf571be1b102101786b + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - matrix: + params: + - name: image-arch + value: + - $(params.build-platforms) + name: clamav-scan + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: clamav-scan + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:b0bd59748cda4a7abf311e4f448e6c1d00c6b6d8c0ecc1c2eb33e08dc0e0b802 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-coverity-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE + value: $(params.output-image) + - name: DOCKERFILE + value: $(params.dockerfile) + - name: CONTEXT + value: $(params.path-context) + - name: HERMETIC + value: $(params.hermetic) + - name: PREFETCH_INPUT + value: $(params.prefetch-input) + - name: IMAGE_EXPIRES_AFTER + value: $(params.image-expires-after) + - name: COMMIT_SHA + value: $(tasks.clone-repository.results.commit) + - name: BUILD_ARGS + value: + - $(params.build-args[*]) + - name: BUILD_ARGS_FILE + value: $(params.build-args-file) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - coverity-availability-check + taskRef: + params: + - name: name + value: sast-coverity-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:cdbe1a968676e4f5519b082bf1e27a4cdcf66dd60af66dbc26b3e604f957f7e9 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - input: $(tasks.coverity-availability-check.results.STATUS) + operator: in + values: + - success + - name: coverity-availability-check + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: coverity-availability-check + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check:0.2@sha256:db2b267dc15e4ed17f704ee91b8e9b38068e1a35b1018a328fdca621819d74c6 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-shell-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: sast-shell-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:bf7bdde00b7212f730c1356672290af6f38d070da2c8a316987b5c32fd49e0b9 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-unicode-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: sast-unicode-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.3@sha256:a2bde66f6b4164620298c7d709b8f08515409404000fa1dc2260d2508b135651 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: apply-tags + params: + - name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: apply-tags + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:e0de426d492e195f59c99d2ea1ca0df7bfb8c689f5d1468fe7f70eb8684b8d02 + - name: kind + value: task + resolver: bundles + - name: push-dockerfile + params: + - name: IMAGE + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: DOCKERFILE + value: $(params.dockerfile) + - name: CONTEXT + value: $(params.path-context) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: push-dockerfile-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:235ef6e835de8171c07b8a7f8947d0b40bfcff999e1ff3cb6ddd9acc65c48430 + - name: kind + value: task + resolver: bundles + - name: rpms-signature-scan + params: + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: rpms-signature-scan + - name: bundle + value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:e127e0e0a5aab1364b560436594fe7ed67abcd5f8d6dd3ef14ac1f35cf81078c + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + workspaces: + - name: git-auth + optional: true + - name: netrc + optional: true + taskRunTemplate: + serviceAccountName: build-pipeline-jetstack-cert-manager-1-18 + workspaces: + - name: git-auth + secret: + secretName: '{{ git_auth_secret }}' +status: {} From 11799eed2b075bac25d253bb203052bee979db21 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Mon, 1 Sep 2025 12:08:01 +0000 Subject: [PATCH 02/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 2 +- .tekton/jetstack-cert-manager-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index feb31bc5..b5ab0a0b 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -186,7 +186,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:22290579c9fe0b5c1689bb9023b3eddec73c285b680226d9f460346ae849a2cb + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:24230408f0353d339dc573aaa96d2cfee9e29b89ece931a90a7866bc772c79b7 - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index dacaf480..f75080a3 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -183,7 +183,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:22290579c9fe0b5c1689bb9023b3eddec73c285b680226d9f460346ae849a2cb + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:24230408f0353d339dc573aaa96d2cfee9e29b89ece931a90a7866bc772c79b7 - name: kind value: task resolver: bundles From e2d7dda94e7a85f28fec9fd5ae1f41f38080d9e4 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Mon, 1 Sep 2025 20:49:22 +0000 Subject: [PATCH 03/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 2 +- .tekton/jetstack-cert-manager-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index b5ab0a0b..cea8592d 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -236,7 +236,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:cd9ef1eb119700a6883edcf93fd7c71dc33ee43467f3c2728b2a002c77915e8d + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:dc2f0ee60851a8865ce4fb5040f63b08dbd3442558a4e1c82f6f0079581215e5 - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index f75080a3..7fd606bf 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -233,7 +233,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:cd9ef1eb119700a6883edcf93fd7c71dc33ee43467f3c2728b2a002c77915e8d + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:dc2f0ee60851a8865ce4fb5040f63b08dbd3442558a4e1c82f6f0079581215e5 - name: kind value: task resolver: bundles From d519695aba2c52edd2d3cd6746edad902a2a60a3 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Tue, 2 Sep 2025 19:24:07 +0000 Subject: [PATCH 04/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 2 +- .tekton/jetstack-cert-manager-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index cea8592d..606a8fa1 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -186,7 +186,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:24230408f0353d339dc573aaa96d2cfee9e29b89ece931a90a7866bc772c79b7 + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:05551e144d090844903d61893a383fa4dc69ab563797f03ffaab0f8624bf530d - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index 7fd606bf..6c45dc14 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -183,7 +183,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:24230408f0353d339dc573aaa96d2cfee9e29b89ece931a90a7866bc772c79b7 + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:05551e144d090844903d61893a383fa4dc69ab563797f03ffaab0f8624bf530d - name: kind value: task resolver: bundles From 30b8ef7f3972b9fadf5992e9cc28f07b8b9ad330 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Wed, 3 Sep 2025 05:02:56 +0000 Subject: [PATCH 05/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 2 +- .tekton/jetstack-cert-manager-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index 606a8fa1..b7aad3c3 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -390,7 +390,7 @@ spec: - name: name value: sast-snyk-check-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:322c86ad5ee252c04440184d9f5046d276415148cb6bfaf571be1b102101786b + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:e371aa09c65ab309138b4aeae9ea4dd93f83119c5cc61e9f2057fe5bb518fbe9 - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index 6c45dc14..0c22485c 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -387,7 +387,7 @@ spec: - name: name value: sast-snyk-check-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:322c86ad5ee252c04440184d9f5046d276415148cb6bfaf571be1b102101786b + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:e371aa09c65ab309138b4aeae9ea4dd93f83119c5cc61e9f2057fe5bb518fbe9 - name: kind value: task resolver: bundles From 49b16e51e2846df9306d5f86c977117f99cb06e4 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Wed, 3 Sep 2025 14:38:42 +0000 Subject: [PATCH 06/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 2 +- .tekton/jetstack-cert-manager-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index b7aad3c3..892d0d4c 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -236,7 +236,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:dc2f0ee60851a8865ce4fb5040f63b08dbd3442558a4e1c82f6f0079581215e5 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:252e5c94fb2375c43bdfd4b65097d246f4f37392956b08e5c38f366623a0b9ce - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index 0c22485c..b3242ec9 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -233,7 +233,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:dc2f0ee60851a8865ce4fb5040f63b08dbd3442558a4e1c82f6f0079581215e5 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:252e5c94fb2375c43bdfd4b65097d246f4f37392956b08e5c38f366623a0b9ce - name: kind value: task resolver: bundles From 74b8ee6be28ab1bdedb35af90c14f4c61422b090 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 5 Sep 2025 05:26:53 +0000 Subject: [PATCH 07/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 4 ++-- .tekton/jetstack-cert-manager-1-18-push.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index 892d0d4c..44e06b11 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -186,7 +186,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:05551e144d090844903d61893a383fa4dc69ab563797f03ffaab0f8624bf530d + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:0b58e5132333dd3b710ef9c18ecebe0d5e5b22066ba56481d34431c989cb21dd - name: kind value: task resolver: bundles @@ -364,7 +364,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:e106b6182e72c8f34ceae3f56b0b1aa2b4dc60f573877d9e51c3791029a7acb6 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:51ee3ca7b8142f39a2861ed0f94f67e02c538e3b7e57de56ed301fbb9774aa12 - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index b3242ec9..4e49153e 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -183,7 +183,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:05551e144d090844903d61893a383fa4dc69ab563797f03ffaab0f8624bf530d + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:0b58e5132333dd3b710ef9c18ecebe0d5e5b22066ba56481d34431c989cb21dd - name: kind value: task resolver: bundles @@ -361,7 +361,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:e106b6182e72c8f34ceae3f56b0b1aa2b4dc60f573877d9e51c3791029a7acb6 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:51ee3ca7b8142f39a2861ed0f94f67e02c538e3b7e57de56ed301fbb9774aa12 - name: kind value: task resolver: bundles From 81804e1528ee3d7e23ed83ef2148b2429cb2694e Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 5 Sep 2025 14:38:16 +0000 Subject: [PATCH 08/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 4 ++-- .tekton/jetstack-cert-manager-1-18-push.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index 44e06b11..aeb49a42 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -291,7 +291,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:7a36cc284c5932c18e117fe5995f3246b5dcc11ec742b66a2f9ae710034b064f + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a48c950350c5e9945cc4ad6bfad7fc653aa437c9eff74a25fd1d42fda4fe344d - name: kind value: task resolver: bundles @@ -364,7 +364,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:51ee3ca7b8142f39a2861ed0f94f67e02c538e3b7e57de56ed301fbb9774aa12 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:365c65ed8dfbd83c4a49300dcb9c74c5c3f027efec0be1a1f0baa9633c29b249 - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index 4e49153e..dd6bdd9f 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -288,7 +288,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:7a36cc284c5932c18e117fe5995f3246b5dcc11ec742b66a2f9ae710034b064f + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a48c950350c5e9945cc4ad6bfad7fc653aa437c9eff74a25fd1d42fda4fe344d - name: kind value: task resolver: bundles @@ -361,7 +361,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:51ee3ca7b8142f39a2861ed0f94f67e02c538e3b7e57de56ed301fbb9774aa12 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:365c65ed8dfbd83c4a49300dcb9c74c5c3f027efec0be1a1f0baa9633c29b249 - name: kind value: task resolver: bundles From 35c0aa4161170980b0ef159d9778034150a45b23 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Sun, 7 Sep 2025 11:50:44 +0000 Subject: [PATCH 09/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 2 +- .tekton/jetstack-cert-manager-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index aeb49a42..f97499cc 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -597,7 +597,7 @@ spec: - name: name value: rpms-signature-scan - name: bundle - value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:e127e0e0a5aab1364b560436594fe7ed67abcd5f8d6dd3ef14ac1f35cf81078c + value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:49ff6d117c3e9dc3966d1244e118e168b3501742ec14c3a4161a276ff48d04d5 - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index dd6bdd9f..c2285b1b 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -594,7 +594,7 @@ spec: - name: name value: rpms-signature-scan - name: bundle - value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:e127e0e0a5aab1364b560436594fe7ed67abcd5f8d6dd3ef14ac1f35cf81078c + value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:49ff6d117c3e9dc3966d1244e118e168b3501742ec14c3a4161a276ff48d04d5 - name: kind value: task resolver: bundles From ad33323b32286e0f6484d154b061026588bf30f8 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Tue, 9 Sep 2025 18:26:52 +0000 Subject: [PATCH 10/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 2 +- .tekton/jetstack-cert-manager-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index f97499cc..ec00c986 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -364,7 +364,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:365c65ed8dfbd83c4a49300dcb9c74c5c3f027efec0be1a1f0baa9633c29b249 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9f93749cfc4f665d0c1b8cd99d16ed90514e795d18d5d27b43d504bddeed3690 - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index c2285b1b..0597ee59 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -361,7 +361,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:365c65ed8dfbd83c4a49300dcb9c74c5c3f027efec0be1a1f0baa9633c29b249 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9f93749cfc4f665d0c1b8cd99d16ed90514e795d18d5d27b43d504bddeed3690 - name: kind value: task resolver: bundles From 5c63eab96b4ad4ac24446ac064801135a395c2a5 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Wed, 10 Sep 2025 07:32:08 +0000 Subject: [PATCH 11/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 2 +- .tekton/jetstack-cert-manager-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index ec00c986..f507bd1f 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -557,7 +557,7 @@ spec: - name: name value: apply-tags - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:e0de426d492e195f59c99d2ea1ca0df7bfb8c689f5d1468fe7f70eb8684b8d02 + value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:f44be1bf0262471f2f503f5e19da5f0628dcaf968c86272a2ad6b4871e708448 - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index 0597ee59..9f8ebeb1 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -554,7 +554,7 @@ spec: - name: name value: apply-tags - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:e0de426d492e195f59c99d2ea1ca0df7bfb8c689f5d1468fe7f70eb8684b8d02 + value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:f44be1bf0262471f2f503f5e19da5f0628dcaf968c86272a2ad6b4871e708448 - name: kind value: task resolver: bundles From 84f5dc75008935420383240b14dfededb744777d Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Wed, 10 Sep 2025 17:32:47 +0000 Subject: [PATCH 12/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 11 ++++++++--- .tekton/jetstack-cert-manager-1-18-push.yaml | 11 ++++++++--- 2 files changed, 16 insertions(+), 6 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index f507bd1f..50bf6413 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -186,7 +186,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:0b58e5132333dd3b710ef9c18ecebe0d5e5b22066ba56481d34431c989cb21dd + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:b89fb66464d0069dd72ef070c8c2c16d79c4200702d8f91e20bfe46e0aa0ae8d - name: kind value: task resolver: bundles @@ -326,7 +326,12 @@ spec: operator: in values: - "false" - - name: clair-scan + - matrix: + params: + - name: image-platform + value: + - $(params.build-platforms) + name: clair-scan params: - name: image-digest value: $(tasks.build-image-index.results.IMAGE_DIGEST) @@ -339,7 +344,7 @@ spec: - name: name value: clair-scan - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:893ffa3ce26b061e21bb4d8db9ef7ed4ddd4044fe7aa5451ef391034da3ff759 + value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:a7cc183967f89c4ac100d04ab8f81e54733beee60a0528208107c9a22d3c43af - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index 9f8ebeb1..e8e35845 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -183,7 +183,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:0b58e5132333dd3b710ef9c18ecebe0d5e5b22066ba56481d34431c989cb21dd + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:b89fb66464d0069dd72ef070c8c2c16d79c4200702d8f91e20bfe46e0aa0ae8d - name: kind value: task resolver: bundles @@ -323,7 +323,12 @@ spec: operator: in values: - "false" - - name: clair-scan + - matrix: + params: + - name: image-platform + value: + - $(params.build-platforms) + name: clair-scan params: - name: image-digest value: $(tasks.build-image-index.results.IMAGE_DIGEST) @@ -336,7 +341,7 @@ spec: - name: name value: clair-scan - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:893ffa3ce26b061e21bb4d8db9ef7ed4ddd4044fe7aa5451ef391034da3ff759 + value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:a7cc183967f89c4ac100d04ab8f81e54733beee60a0528208107c9a22d3c43af - name: kind value: task resolver: bundles From 66db7777b23f14d7d59dff7584b91612e6a890ab Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Wed, 10 Sep 2025 22:24:57 +0000 Subject: [PATCH 13/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 2 +- .tekton/jetstack-cert-manager-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index 50bf6413..ab3d690a 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -369,7 +369,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9f93749cfc4f665d0c1b8cd99d16ed90514e795d18d5d27b43d504bddeed3690 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:dae8e28761cee4ab0baf04ab9f8f1a4b3cee3c7decf461fda2bacc5c01652a60 - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index e8e35845..771d18a8 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -366,7 +366,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9f93749cfc4f665d0c1b8cd99d16ed90514e795d18d5d27b43d504bddeed3690 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:dae8e28761cee4ab0baf04ab9f8f1a4b3cee3c7decf461fda2bacc5c01652a60 - name: kind value: task resolver: bundles From 0be3b3b09f76733c1130e7b482736ba47751d71a Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Thu, 11 Sep 2025 13:49:46 +0000 Subject: [PATCH 14/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 12 ++++++------ .tekton/jetstack-cert-manager-1-18-push.yaml | 12 ++++++------ 2 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index ab3d690a..f4ffe6b6 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -136,7 +136,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ded314206f09712b2116deb050b774ae7efef9ab243794334c8e616871a3ffa5 + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ec962d0be18f36ca7d331c99bf243800f569fc0a2ea6f8c8c3d3a574b71c44dc - name: kind value: task resolver: bundles @@ -157,7 +157,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:4a601aeec58a1dd89c271e728fd8f0d84777825b46940c3aec27f15bab3edacf + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:efcce59f226b1426f7685917e41a50b73478f38fe9ac56c98f1e961effd4b6f0 - name: kind value: task resolver: bundles @@ -236,7 +236,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:252e5c94fb2375c43bdfd4b65097d246f4f37392956b08e5c38f366623a0b9ce + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:7ff1a2e486924478e7724005464d60dab9a85e2ae4734818057ece3845797509 - name: kind value: task resolver: bundles @@ -291,7 +291,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a48c950350c5e9945cc4ad6bfad7fc653aa437c9eff74a25fd1d42fda4fe344d + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a54c27a0d8f913c787755422a09c4561971b506a043d872b5b07af8123ef0f41 - name: kind value: task resolver: bundles @@ -395,7 +395,7 @@ spec: - name: name value: sast-snyk-check-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:e371aa09c65ab309138b4aeae9ea4dd93f83119c5cc61e9f2057fe5bb518fbe9 + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:783f5de1b4def2fb3fad20b914f4b3afee46ffb8f652114946e321ef3fa86449 - name: kind value: task resolver: bundles @@ -585,7 +585,7 @@ spec: - name: name value: push-dockerfile-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:235ef6e835de8171c07b8a7f8947d0b40bfcff999e1ff3cb6ddd9acc65c48430 + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:06529ba66b37bdc1f55590359aa849bc570b4e9c110c983e27f07081dc09a12b - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index 771d18a8..c271f6c1 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -133,7 +133,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ded314206f09712b2116deb050b774ae7efef9ab243794334c8e616871a3ffa5 + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ec962d0be18f36ca7d331c99bf243800f569fc0a2ea6f8c8c3d3a574b71c44dc - name: kind value: task resolver: bundles @@ -154,7 +154,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:4a601aeec58a1dd89c271e728fd8f0d84777825b46940c3aec27f15bab3edacf + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:efcce59f226b1426f7685917e41a50b73478f38fe9ac56c98f1e961effd4b6f0 - name: kind value: task resolver: bundles @@ -233,7 +233,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:252e5c94fb2375c43bdfd4b65097d246f4f37392956b08e5c38f366623a0b9ce + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:7ff1a2e486924478e7724005464d60dab9a85e2ae4734818057ece3845797509 - name: kind value: task resolver: bundles @@ -288,7 +288,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a48c950350c5e9945cc4ad6bfad7fc653aa437c9eff74a25fd1d42fda4fe344d + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a54c27a0d8f913c787755422a09c4561971b506a043d872b5b07af8123ef0f41 - name: kind value: task resolver: bundles @@ -392,7 +392,7 @@ spec: - name: name value: sast-snyk-check-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:e371aa09c65ab309138b4aeae9ea4dd93f83119c5cc61e9f2057fe5bb518fbe9 + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:783f5de1b4def2fb3fad20b914f4b3afee46ffb8f652114946e321ef3fa86449 - name: kind value: task resolver: bundles @@ -582,7 +582,7 @@ spec: - name: name value: push-dockerfile-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:235ef6e835de8171c07b8a7f8947d0b40bfcff999e1ff3cb6ddd9acc65c48430 + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:06529ba66b37bdc1f55590359aa849bc570b4e9c110c983e27f07081dc09a12b - name: kind value: task resolver: bundles From 38c777b540cee7e691ca052d4fff34b7b1f5b92b Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 12 Sep 2025 00:12:15 +0000 Subject: [PATCH 15/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 2 +- .tekton/jetstack-cert-manager-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index f4ffe6b6..da49bf97 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -186,7 +186,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:b89fb66464d0069dd72ef070c8c2c16d79c4200702d8f91e20bfe46e0aa0ae8d + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:d08e349032c57367d543c0bbd070386709614ade1db8e5eddeab29b1338f6653 - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index c271f6c1..eba93bb3 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -183,7 +183,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:b89fb66464d0069dd72ef070c8c2c16d79c4200702d8f91e20bfe46e0aa0ae8d + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:d08e349032c57367d543c0bbd070386709614ade1db8e5eddeab29b1338f6653 - name: kind value: task resolver: bundles From bfcf0e1cfd1656ea728455ea99ac052d9565d93a Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 12 Sep 2025 20:34:39 +0000 Subject: [PATCH 16/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 2 +- .tekton/jetstack-cert-manager-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index da49bf97..95892afc 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -291,7 +291,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a54c27a0d8f913c787755422a09c4561971b506a043d872b5b07af8123ef0f41 + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:21d33596cf7ff61cab38b68caf578e55509748962bf6f4030bf1dfb8cd68a257 - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index eba93bb3..863ac3a7 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -288,7 +288,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a54c27a0d8f913c787755422a09c4561971b506a043d872b5b07af8123ef0f41 + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:21d33596cf7ff61cab38b68caf578e55509748962bf6f4030bf1dfb8cd68a257 - name: kind value: task resolver: bundles From 43e8d9e1865a17db9c748c1ff967f00dc954f024 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Mon, 15 Sep 2025 09:48:16 +0000 Subject: [PATCH 17/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 2 +- .tekton/jetstack-cert-manager-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index 95892afc..2eddbf94 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -186,7 +186,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:d08e349032c57367d543c0bbd070386709614ade1db8e5eddeab29b1338f6653 + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:098322d6b789824f716f2d9caca1862d4afdc083ebaaee61aadd22a8c179480a - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index 863ac3a7..783f2bb8 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -183,7 +183,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:d08e349032c57367d543c0bbd070386709614ade1db8e5eddeab29b1338f6653 + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:098322d6b789824f716f2d9caca1862d4afdc083ebaaee61aadd22a8c179480a - name: kind value: task resolver: bundles From 40260eae67541fbcf612f05de69f2db62ebcaf1e Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Tue, 16 Sep 2025 16:21:02 +0000 Subject: [PATCH 18/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 4 +++- .tekton/jetstack-cert-manager-1-18-push.yaml | 4 +++- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index 2eddbf94..7c25563b 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -223,6 +223,8 @@ spec: value: $(params.build-args-file) - name: PRIVILEGED_NESTED value: $(params.privileged-nested) + - name: SOURCE_URL + value: $(tasks.clone-repository.results.url) - name: SOURCE_ARTIFACT value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) - name: CACHI2_ARTIFACT @@ -236,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:7ff1a2e486924478e7724005464d60dab9a85e2ae4734818057ece3845797509 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:c1bd994e10b284d10e3713914f897f03e751588ae2a2f9bdfc873136fec4b641 - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index 783f2bb8..af9ad31e 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -220,6 +220,8 @@ spec: value: $(params.build-args-file) - name: PRIVILEGED_NESTED value: $(params.privileged-nested) + - name: SOURCE_URL + value: $(tasks.clone-repository.results.url) - name: SOURCE_ARTIFACT value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) - name: CACHI2_ARTIFACT @@ -233,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:7ff1a2e486924478e7724005464d60dab9a85e2ae4734818057ece3845797509 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:c1bd994e10b284d10e3713914f897f03e751588ae2a2f9bdfc873136fec4b641 - name: kind value: task resolver: bundles From 410737b318ca25bd2acffaaa566b1c4f04599dc4 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Tue, 16 Sep 2025 18:00:21 +0000 Subject: [PATCH 19/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 2 +- .tekton/jetstack-cert-manager-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index 7c25563b..9c38f228 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -238,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:c1bd994e10b284d10e3713914f897f03e751588ae2a2f9bdfc873136fec4b641 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:312a42ce2fe4b59fb9bdd5ee227e05fdff22a2346bc3c9c0ec62d2b0214a2788 - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index af9ad31e..37a70a73 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -235,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:c1bd994e10b284d10e3713914f897f03e751588ae2a2f9bdfc873136fec4b641 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:312a42ce2fe4b59fb9bdd5ee227e05fdff22a2346bc3c9c0ec62d2b0214a2788 - name: kind value: task resolver: bundles From 146927eeb93988a03f4721a018bd01b323672095 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Thu, 18 Sep 2025 01:25:33 +0000 Subject: [PATCH 20/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 2 +- .tekton/jetstack-cert-manager-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index 9c38f228..52db52ca 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -238,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:312a42ce2fe4b59fb9bdd5ee227e05fdff22a2346bc3c9c0ec62d2b0214a2788 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:ec87447b59e05ca85b7ae33b01cfc585b34aacf95b4fed5e705e4f5a65eee141 - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index 37a70a73..50659b4d 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -235,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:312a42ce2fe4b59fb9bdd5ee227e05fdff22a2346bc3c9c0ec62d2b0214a2788 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:ec87447b59e05ca85b7ae33b01cfc585b34aacf95b4fed5e705e4f5a65eee141 - name: kind value: task resolver: bundles From fb1808388c07f4037ff0eedf2fe9404cfbd9cbcc Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Thu, 18 Sep 2025 10:53:25 +0000 Subject: [PATCH 21/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 10 +++++----- .tekton/jetstack-cert-manager-1-18-push.yaml | 10 +++++----- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index 52db52ca..c53b31a3 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -157,7 +157,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:efcce59f226b1426f7685917e41a50b73478f38fe9ac56c98f1e961effd4b6f0 + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:3f1b468066b301083d8550e036f5a654fcb064810bd29eb06fec6d8ad3e35b9c - name: kind value: task resolver: bundles @@ -238,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:ec87447b59e05ca85b7ae33b01cfc585b34aacf95b4fed5e705e4f5a65eee141 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:932e0493c1ea791cadc241018c32efefd9141b154e574b038b37d75b2c5480ad - name: kind value: task resolver: bundles @@ -267,7 +267,7 @@ spec: - name: name value: build-image-index - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:ba7fbed5c4862968c1a77d6b90d5bdd497925ab1de41b859c027dd5c3069cd3e + value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:8e5dfb2fac011148f8715bbe0b99415f88297683d269eae0dfcad52562195d45 - name: kind value: task resolver: bundles @@ -293,7 +293,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:21d33596cf7ff61cab38b68caf578e55509748962bf6f4030bf1dfb8cd68a257 + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:b0d6cb28a23f20db4f5cf78ed78ae3a91b9a5adfe989696ed0bbc63840a485b6 - name: kind value: task resolver: bundles @@ -587,7 +587,7 @@ spec: - name: name value: push-dockerfile-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:06529ba66b37bdc1f55590359aa849bc570b4e9c110c983e27f07081dc09a12b + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:49f778479f468e71c2cfef722e96aa813d7ef98bde8a612e1bf1a13cd70849ec - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index 50659b4d..739f62ef 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -154,7 +154,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:efcce59f226b1426f7685917e41a50b73478f38fe9ac56c98f1e961effd4b6f0 + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:3f1b468066b301083d8550e036f5a654fcb064810bd29eb06fec6d8ad3e35b9c - name: kind value: task resolver: bundles @@ -235,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:ec87447b59e05ca85b7ae33b01cfc585b34aacf95b4fed5e705e4f5a65eee141 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:932e0493c1ea791cadc241018c32efefd9141b154e574b038b37d75b2c5480ad - name: kind value: task resolver: bundles @@ -264,7 +264,7 @@ spec: - name: name value: build-image-index - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:ba7fbed5c4862968c1a77d6b90d5bdd497925ab1de41b859c027dd5c3069cd3e + value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:8e5dfb2fac011148f8715bbe0b99415f88297683d269eae0dfcad52562195d45 - name: kind value: task resolver: bundles @@ -290,7 +290,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:21d33596cf7ff61cab38b68caf578e55509748962bf6f4030bf1dfb8cd68a257 + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:b0d6cb28a23f20db4f5cf78ed78ae3a91b9a5adfe989696ed0bbc63840a485b6 - name: kind value: task resolver: bundles @@ -584,7 +584,7 @@ spec: - name: name value: push-dockerfile-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:06529ba66b37bdc1f55590359aa849bc570b4e9c110c983e27f07081dc09a12b + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:49f778479f468e71c2cfef722e96aa813d7ef98bde8a612e1bf1a13cd70849ec - name: kind value: task resolver: bundles From 77a6541804ca8d5a35584f68dabb9279a365bb94 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Thu, 18 Sep 2025 20:31:32 +0000 Subject: [PATCH 22/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 2 +- .tekton/jetstack-cert-manager-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index c53b31a3..ce5edbbf 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -238,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:932e0493c1ea791cadc241018c32efefd9141b154e574b038b37d75b2c5480ad + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:08bbee8bda1e6d0f7a4690a494f0a2713e0279c75412402a28008a8aa34283ca - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index 739f62ef..5b08171f 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -235,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:932e0493c1ea791cadc241018c32efefd9141b154e574b038b37d75b2c5480ad + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:08bbee8bda1e6d0f7a4690a494f0a2713e0279c75412402a28008a8aa34283ca - name: kind value: task resolver: bundles From 3a5b0b8b6e860c97e3a7dad31de30d6141e328da Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 19 Sep 2025 12:29:12 +0000 Subject: [PATCH 23/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 2 +- .tekton/jetstack-cert-manager-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index ce5edbbf..3bdf89d0 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -238,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:08bbee8bda1e6d0f7a4690a494f0a2713e0279c75412402a28008a8aa34283ca + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:17a0b093c9e9d21e9e374c60a88eb293a0fa57e4e2b67baf20ccac9735aa20ff - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index 5b08171f..41265a9a 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -235,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:08bbee8bda1e6d0f7a4690a494f0a2713e0279c75412402a28008a8aa34283ca + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:17a0b093c9e9d21e9e374c60a88eb293a0fa57e4e2b67baf20ccac9735aa20ff - name: kind value: task resolver: bundles From cf0554d1b62a680b530a10a76b331ae0cc4310d3 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Tue, 23 Sep 2025 15:55:55 +0000 Subject: [PATCH 24/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 4 ++-- .tekton/jetstack-cert-manager-1-18-push.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index 3bdf89d0..d2bbd17f 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -238,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:17a0b093c9e9d21e9e374c60a88eb293a0fa57e4e2b67baf20ccac9735aa20ff + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:a60e433e02bfda6811719690edbf1e924820d107ad658c8a9690498d4c7e9c7b - name: kind value: task resolver: bundles @@ -267,7 +267,7 @@ spec: - name: name value: build-image-index - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:8e5dfb2fac011148f8715bbe0b99415f88297683d269eae0dfcad52562195d45 + value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:79784d53749584bc5a8de32142ec4e2f01cdbf42c20d94e59280e0b927c8597d - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index 41265a9a..220d1e71 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -235,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:17a0b093c9e9d21e9e374c60a88eb293a0fa57e4e2b67baf20ccac9735aa20ff + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:a60e433e02bfda6811719690edbf1e924820d107ad658c8a9690498d4c7e9c7b - name: kind value: task resolver: bundles @@ -264,7 +264,7 @@ spec: - name: name value: build-image-index - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:8e5dfb2fac011148f8715bbe0b99415f88297683d269eae0dfcad52562195d45 + value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:79784d53749584bc5a8de32142ec4e2f01cdbf42c20d94e59280e0b927c8597d - name: kind value: task resolver: bundles From 1c997d012d9a6e2df8b2c62318c4ab4562d10000 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Wed, 24 Sep 2025 14:41:01 +0000 Subject: [PATCH 25/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 2 +- .tekton/jetstack-cert-manager-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index d2bbd17f..37a32c60 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -186,7 +186,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:098322d6b789824f716f2d9caca1862d4afdc083ebaaee61aadd22a8c179480a + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:dc82a7270aace9b1c26f7e96f8ccab2752e53d32980c41a45e1733baad76cde6 - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index 220d1e71..8ed66bd5 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -183,7 +183,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:098322d6b789824f716f2d9caca1862d4afdc083ebaaee61aadd22a8c179480a + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:dc82a7270aace9b1c26f7e96f8ccab2752e53d32980c41a45e1733baad76cde6 - name: kind value: task resolver: bundles From 952942001a2ba3c5d2d0c56cde24ddc10e9154ae Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Thu, 25 Sep 2025 21:53:33 +0000 Subject: [PATCH 26/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 2 +- .tekton/jetstack-cert-manager-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index 37a32c60..df5269b7 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -238,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:a60e433e02bfda6811719690edbf1e924820d107ad658c8a9690498d4c7e9c7b + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:650b0bca57c626c1e82f35cdfadf44a7792230b2b992aaa9c369d615aae6590d - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index 8ed66bd5..ce1c8b50 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -235,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:a60e433e02bfda6811719690edbf1e924820d107ad658c8a9690498d4c7e9c7b + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:650b0bca57c626c1e82f35cdfadf44a7792230b2b992aaa9c369d615aae6590d - name: kind value: task resolver: bundles From 6faa478cb2d512d1a15d9359b63cf7813425c568 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 26 Sep 2025 13:46:56 +0000 Subject: [PATCH 27/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 11 ++++++++++- .tekton/jetstack-cert-manager-1-18-push.yaml | 11 ++++++++++- 2 files changed, 20 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index df5269b7..7e6c79d1 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -90,6 +90,11 @@ spec: description: Add built image into an OCI image index name: build-image-index type: string + - default: docker + description: The format for the resulting image's mediaType. Valid values are + oci or docker. + name: buildah-format + type: string - default: [] description: Array of --build-arg values ("arg=value" strings) for buildah name: build-args @@ -136,7 +141,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ec962d0be18f36ca7d331c99bf243800f569fc0a2ea6f8c8c3d3a574b71c44dc + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:abf231cfc5a68b56f68a8ac9bb26dca3c3e434c88dd9627c72bdec0b8c335c67 - name: kind value: task resolver: bundles @@ -225,6 +230,8 @@ spec: value: $(params.privileged-nested) - name: SOURCE_URL value: $(tasks.clone-repository.results.url) + - name: BUILDAH_FORMAT + value: $(params.buildah-format) - name: SOURCE_ARTIFACT value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) - name: CACHI2_ARTIFACT @@ -260,6 +267,8 @@ spec: - name: IMAGES value: - $(tasks.build-images.results.IMAGE_REF[*]) + - name: BUILDAH_FORMAT + value: $(params.buildah-format) runAfter: - build-images taskRef: diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index ce1c8b50..7257347b 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -87,6 +87,11 @@ spec: description: Add built image into an OCI image index name: build-image-index type: string + - default: docker + description: The format for the resulting image's mediaType. Valid values are + oci or docker. + name: buildah-format + type: string - default: [] description: Array of --build-arg values ("arg=value" strings) for buildah name: build-args @@ -133,7 +138,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ec962d0be18f36ca7d331c99bf243800f569fc0a2ea6f8c8c3d3a574b71c44dc + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:abf231cfc5a68b56f68a8ac9bb26dca3c3e434c88dd9627c72bdec0b8c335c67 - name: kind value: task resolver: bundles @@ -222,6 +227,8 @@ spec: value: $(params.privileged-nested) - name: SOURCE_URL value: $(tasks.clone-repository.results.url) + - name: BUILDAH_FORMAT + value: $(params.buildah-format) - name: SOURCE_ARTIFACT value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) - name: CACHI2_ARTIFACT @@ -257,6 +264,8 @@ spec: - name: IMAGES value: - $(tasks.build-images.results.IMAGE_REF[*]) + - name: BUILDAH_FORMAT + value: $(params.buildah-format) runAfter: - build-images taskRef: From 852b82a9ea29b4bb158cfcca5d7032d808b9561b Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Mon, 29 Sep 2025 17:36:17 +0000 Subject: [PATCH 28/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 2 +- .tekton/jetstack-cert-manager-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index 7e6c79d1..6bcb5d27 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -141,7 +141,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:abf231cfc5a68b56f68a8ac9bb26dca3c3e434c88dd9627c72bdec0b8c335c67 + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:afc8d0af71c24285599120946b29eea2ab56663c5f49c6ca80ba12bf56ef2371 - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index 7257347b..a484743e 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -138,7 +138,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:abf231cfc5a68b56f68a8ac9bb26dca3c3e434c88dd9627c72bdec0b8c335c67 + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:afc8d0af71c24285599120946b29eea2ab56663c5f49c6ca80ba12bf56ef2371 - name: kind value: task resolver: bundles From edc4c5a876a579a2559273503b29794baae0f654 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Tue, 30 Sep 2025 15:33:45 +0000 Subject: [PATCH 29/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 2 +- .tekton/jetstack-cert-manager-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index 6bcb5d27..ae1441b3 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -141,7 +141,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:afc8d0af71c24285599120946b29eea2ab56663c5f49c6ca80ba12bf56ef2371 + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:526a104a3342e36dad5c5e7f98c647da6b2a33897e458f772ff4afe523e0690a - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index a484743e..7d7605a7 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -138,7 +138,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:afc8d0af71c24285599120946b29eea2ab56663c5f49c6ca80ba12bf56ef2371 + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:526a104a3342e36dad5c5e7f98c647da6b2a33897e458f772ff4afe523e0690a - name: kind value: task resolver: bundles From 5677e853b03ad863432309916f6d804422a90b0b Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Wed, 1 Oct 2025 23:33:41 +0000 Subject: [PATCH 30/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 2 +- .tekton/jetstack-cert-manager-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index ae1441b3..05d057bf 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -406,7 +406,7 @@ spec: - name: name value: sast-snyk-check-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:783f5de1b4def2fb3fad20b914f4b3afee46ffb8f652114946e321ef3fa86449 + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:181d63c126e3119a9d57b8feed4eb66a875b5208c3e90724c22758e65dca8733 - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index 7d7605a7..d142f5ff 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -403,7 +403,7 @@ spec: - name: name value: sast-snyk-check-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:783f5de1b4def2fb3fad20b914f4b3afee46ffb8f652114946e321ef3fa86449 + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:181d63c126e3119a9d57b8feed4eb66a875b5208c3e90724c22758e65dca8733 - name: kind value: task resolver: bundles From 63e4236134f317926ab5a6023e2cc78f29c2a545 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 3 Oct 2025 09:06:26 +0000 Subject: [PATCH 31/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 10 +++++----- .tekton/jetstack-cert-manager-1-18-push.yaml | 10 +++++----- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index 05d057bf..14db7980 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -141,7 +141,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:526a104a3342e36dad5c5e7f98c647da6b2a33897e458f772ff4afe523e0690a + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:bbf313b09740fb39b3343bc69ee94b2a2c21d16a9304f9b7c111c305558fc346 - name: kind value: task resolver: bundles @@ -162,7 +162,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:3f1b468066b301083d8550e036f5a654fcb064810bd29eb06fec6d8ad3e35b9c + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:1144353cf608f0a44a6416a70db6408727733ff40070d382158d6f6984096d8e - name: kind value: task resolver: bundles @@ -245,7 +245,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:650b0bca57c626c1e82f35cdfadf44a7792230b2b992aaa9c369d615aae6590d + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:5e59c05455619580f4383010726f7db8440ecf6959882e9053ac697dd6d277fd - name: kind value: task resolver: bundles @@ -302,7 +302,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:b0d6cb28a23f20db4f5cf78ed78ae3a91b9a5adfe989696ed0bbc63840a485b6 + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:36d44f2924f60da00a079a9ab7ce25ad8b2ad593c16d90509203c125ff0ccd46 - name: kind value: task resolver: bundles @@ -596,7 +596,7 @@ spec: - name: name value: push-dockerfile-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:49f778479f468e71c2cfef722e96aa813d7ef98bde8a612e1bf1a13cd70849ec + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:2bc5b3afc5de56da0f06eac60b65e86f6b861b16a63f48579fc0bac7d657e14c - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index d142f5ff..deed52c6 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -138,7 +138,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:526a104a3342e36dad5c5e7f98c647da6b2a33897e458f772ff4afe523e0690a + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:bbf313b09740fb39b3343bc69ee94b2a2c21d16a9304f9b7c111c305558fc346 - name: kind value: task resolver: bundles @@ -159,7 +159,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:3f1b468066b301083d8550e036f5a654fcb064810bd29eb06fec6d8ad3e35b9c + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:1144353cf608f0a44a6416a70db6408727733ff40070d382158d6f6984096d8e - name: kind value: task resolver: bundles @@ -242,7 +242,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:650b0bca57c626c1e82f35cdfadf44a7792230b2b992aaa9c369d615aae6590d + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:5e59c05455619580f4383010726f7db8440ecf6959882e9053ac697dd6d277fd - name: kind value: task resolver: bundles @@ -299,7 +299,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:b0d6cb28a23f20db4f5cf78ed78ae3a91b9a5adfe989696ed0bbc63840a485b6 + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:36d44f2924f60da00a079a9ab7ce25ad8b2ad593c16d90509203c125ff0ccd46 - name: kind value: task resolver: bundles @@ -593,7 +593,7 @@ spec: - name: name value: push-dockerfile-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:49f778479f468e71c2cfef722e96aa813d7ef98bde8a612e1bf1a13cd70849ec + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:2bc5b3afc5de56da0f06eac60b65e86f6b861b16a63f48579fc0bac7d657e14c - name: kind value: task resolver: bundles From 709d817fa9a8cc014f2cc4272a6b95ef4e3f610f Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 3 Oct 2025 17:06:58 +0000 Subject: [PATCH 32/32] Red Hat Konflux update jetstack-cert-manager-1-18 Signed-off-by: red-hat-konflux --- .tekton/jetstack-cert-manager-1-18-pull-request.yaml | 2 +- .tekton/jetstack-cert-manager-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml index 14db7980..cf65f9ee 100644 --- a/.tekton/jetstack-cert-manager-1-18-pull-request.yaml +++ b/.tekton/jetstack-cert-manager-1-18-pull-request.yaml @@ -162,7 +162,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:1144353cf608f0a44a6416a70db6408727733ff40070d382158d6f6984096d8e + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:0d80f66610efd1f957700f61dcd5080689321b10ad544e136d58fc4673290d1b - name: kind value: task resolver: bundles diff --git a/.tekton/jetstack-cert-manager-1-18-push.yaml b/.tekton/jetstack-cert-manager-1-18-push.yaml index deed52c6..2aebde9a 100644 --- a/.tekton/jetstack-cert-manager-1-18-push.yaml +++ b/.tekton/jetstack-cert-manager-1-18-push.yaml @@ -159,7 +159,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:1144353cf608f0a44a6416a70db6408727733ff40070d382158d6f6984096d8e + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:0d80f66610efd1f957700f61dcd5080689321b10ad544e136d58fc4673290d1b - name: kind value: task resolver: bundles