From 7473bc060cad222dfef44da75dd8e49c60785b2c Mon Sep 17 00:00:00 2001
From: jstuart <jstuart@redhat.com>
Date: Tue, 3 Mar 2026 12:53:35 -0600
Subject: [PATCH] Exclude trusted artifact step

We replace each image reference with an updated cli
image. When doing that we need to exlcude the
trusted artifacts image.

https://issues.redhat.com/browse/EC-1685
---
 .tekton/cli-main-pull-request.yaml | 4 +++-
 .tekton/cli-main-push.yaml         | 5 +++--
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/.tekton/cli-main-pull-request.yaml b/.tekton/cli-main-pull-request.yaml
index b9eb67220..f5e23483b 100644
--- a/.tekton/cli-main-pull-request.yaml
+++ b/.tekton/cli-main-pull-request.yaml
@@ -307,6 +307,8 @@ spec:
         value: $(params.revision)
       - name: SOURCE_ARTIFACT
         value: $(tasks.clone-repository.results.SOURCE_ARTIFACT)
+      - name: STEPS_IMAGE_STEP_NAMES
+        value: "!use-trusted-artifact,!create-trusted-artifact"
       runAfter:
       - build-image-index
       taskRef:
@@ -314,7 +316,7 @@ spec:
         - name: name
           value: tkn-bundle-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-tkn-bundle-oci-ta:0.2@sha256:356a021208054be1b9bf7083b4532b8466832f51490abb0d0519dde4e163e764
+          value: quay.io/konflux-ci/tekton-catalog/task-tkn-bundle-oci-ta:0.2@sha256:0e12654b0532ca720523693a5a85e67e0221d3678e2f54c675a61e72c5c240b3
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cli-main-push.yaml b/.tekton/cli-main-push.yaml
index afc19018d..0e28b3e58 100644
--- a/.tekton/cli-main-push.yaml
+++ b/.tekton/cli-main-push.yaml
@@ -309,6 +309,8 @@ spec:
         value: $(params.revision)
       - name: SOURCE_ARTIFACT
         value: $(tasks.clone-repository.results.SOURCE_ARTIFACT)
+      - name: STEPS_IMAGE_STEP_NAMES
+        value: "!use-trusted-artifact,!create-trusted-artifact"
       runAfter:
       - build-image-index
       taskRef:
@@ -316,8 +318,7 @@ spec:
         - name: name
           value: tkn-bundle-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-tkn-bundle-oci-ta:0.2@sha256:356a021208054be1b9bf7083b4532b8466832f51490abb0d0519dde4e163e764
-        - name: kind
+          value: quay.io/konflux-ci/tekton-catalog/task-tkn-bundle-oci-ta:0.2@sha256:0e12654b0532ca720523693a5a85e67e0221d3678e2f54c675a61e72c5c240b3
           value: task
         resolver: bundles
     - name: deprecated-base-image-check