From 7551714383fc77a4550d3017c52ea22a7579e752 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 29 Aug 2025 06:18:42 +0000 Subject: [PATCH 01/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- ...t-manager-istio-csr-1-18-pull-request.yaml | 620 ++++++++++++++++++ .tekton/cert-manager-istio-csr-1-18-push.yaml | 617 +++++++++++++++++ 2 files changed, 1237 insertions(+) create mode 100644 .tekton/cert-manager-istio-csr-1-18-pull-request.yaml create mode 100644 .tekton/cert-manager-istio-csr-1-18-push.yaml diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml new file mode 100644 index 00000000..7d27da8a --- /dev/null +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -0,0 +1,620 @@ +apiVersion: tekton.dev/v1 +kind: PipelineRun +metadata: + annotations: + build.appstudio.openshift.io/repo: https://github.com/openshift/cert-manager-operator-release?rev={{revision}} + build.appstudio.redhat.com/commit_sha: '{{revision}}' + build.appstudio.redhat.com/pull_request_number: '{{pull_request_number}}' + build.appstudio.redhat.com/target_branch: '{{target_branch}}' + pipelinesascode.tekton.dev/cancel-in-progress: "true" + pipelinesascode.tekton.dev/max-keep-runs: "3" + pipelinesascode.tekton.dev/on-cel-expression: event == "pull_request" && target_branch + == "release-1.18" + creationTimestamp: null + labels: + appstudio.openshift.io/application: cert-manager-istio-csr-1-18 + appstudio.openshift.io/component: cert-manager-istio-csr-1-18 + pipelines.appstudio.openshift.io/type: build + name: cert-manager-istio-csr-1-18-on-pull-request + namespace: cert-manager-oape-tenant +spec: + params: + - name: git-url + value: '{{source_url}}' + - name: revision + value: '{{revision}}' + - name: output-image + value: quay.io/redhat-user-workloads/cert-manager-oape-tenant/cert-manager-istio-csr-1-18/cert-manager-istio-csr-1-18:on-pr-{{revision}} + - name: image-expires-after + value: 5d + - name: build-platforms + value: + - linux/x86_64 + - name: dockerfile + value: Containerfile.cert-manager-istio-csr + - name: path-context + value: . + pipelineSpec: + description: | + This pipeline is ideal for building multi-arch container images from a Containerfile while maintaining trust after pipeline customization. + + _Uses `buildah` to create a multi-platform container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. This pipeline requires that the [multi platform controller](https://github.com/konflux-ci/multi-platform-controller) is deployed and configured on your Konflux instance. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks. + This pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-multi-platform-oci-ta?tab=tags)_ + params: + - description: Source Repository URL + name: git-url + type: string + - default: "" + description: Revision of the Source Repository + name: revision + type: string + - description: Fully Qualified Output Image + name: output-image + type: string + - default: . + description: Path to the source code of an application's component from where + to build image. + name: path-context + type: string + - default: Dockerfile + description: Path to the Dockerfile inside the context specified by parameter + path-context + name: dockerfile + type: string + - default: "false" + description: Force rebuild image + name: rebuild + type: string + - default: "false" + description: Skip checks against built image + name: skip-checks + type: string + - default: "false" + description: Execute the build with network isolation + name: hermetic + type: string + - default: "" + description: Build dependencies to be prefetched + name: prefetch-input + type: string + - default: "" + description: Image tag expiration time, time values could be something like + 1h, 2d, 3w for hours, days, and weeks, respectively. + name: image-expires-after + type: string + - default: "false" + description: Build a source image. + name: build-source-image + type: string + - default: "true" + description: Add built image into an OCI image index + name: build-image-index + type: string + - default: [] + description: Array of --build-arg values ("arg=value" strings) for buildah + name: build-args + type: array + - default: "" + description: Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file + name: build-args-file + type: string + - default: "false" + description: Whether to enable privileged mode, should be used only with remote + VMs + name: privileged-nested + type: string + - default: + - linux/x86_64 + description: List of platforms to build the container images on. The available + set of values is determined by the configuration of the multi-platform-controller. + name: build-platforms + type: array + results: + - description: "" + name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + - description: "" + name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - description: "" + name: CHAINS-GIT_URL + value: $(tasks.clone-repository.results.url) + - description: "" + name: CHAINS-GIT_COMMIT + value: $(tasks.clone-repository.results.commit) + tasks: + - name: init + params: + - name: image-url + value: $(params.output-image) + - name: rebuild + value: $(params.rebuild) + - name: skip-checks + value: $(params.skip-checks) + taskRef: + params: + - name: name + value: init + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ded314206f09712b2116deb050b774ae7efef9ab243794334c8e616871a3ffa5 + - name: kind + value: task + resolver: bundles + - name: clone-repository + params: + - name: url + value: $(params.git-url) + - name: revision + value: $(params.revision) + - name: ociStorage + value: $(params.output-image).git + - name: ociArtifactExpiresAfter + value: $(params.image-expires-after) + runAfter: + - init + taskRef: + params: + - name: name + value: git-clone-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:4a601aeec58a1dd89c271e728fd8f0d84777825b46940c3aec27f15bab3edacf + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + workspaces: + - name: basic-auth + workspace: git-auth + - name: prefetch-dependencies + params: + - name: input + value: $(params.prefetch-input) + - name: SOURCE_ARTIFACT + value: $(tasks.clone-repository.results.SOURCE_ARTIFACT) + - name: ociStorage + value: $(params.output-image).prefetch + - name: ociArtifactExpiresAfter + value: $(params.image-expires-after) + runAfter: + - clone-repository + taskRef: + params: + - name: name + value: prefetch-dependencies-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:22290579c9fe0b5c1689bb9023b3eddec73c285b680226d9f460346ae849a2cb + - name: kind + value: task + resolver: bundles + workspaces: + - name: git-basic-auth + workspace: git-auth + - name: netrc + workspace: netrc + - matrix: + params: + - name: PLATFORM + value: + - $(params.build-platforms) + name: build-images + params: + - name: IMAGE + value: $(params.output-image) + - name: DOCKERFILE + value: $(params.dockerfile) + - name: CONTEXT + value: $(params.path-context) + - name: HERMETIC + value: $(params.hermetic) + - name: PREFETCH_INPUT + value: $(params.prefetch-input) + - name: IMAGE_EXPIRES_AFTER + value: $(params.image-expires-after) + - name: COMMIT_SHA + value: $(tasks.clone-repository.results.commit) + - name: BUILD_ARGS + value: + - $(params.build-args[*]) + - name: BUILD_ARGS_FILE + value: $(params.build-args-file) + - name: PRIVILEGED_NESTED + value: $(params.privileged-nested) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + - name: IMAGE_APPEND_PLATFORM + value: "true" + runAfter: + - prefetch-dependencies + taskRef: + params: + - name: name + value: buildah-remote-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:cd9ef1eb119700a6883edcf93fd7c71dc33ee43467f3c2728b2a002c77915e8d + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + - name: build-image-index + params: + - name: IMAGE + value: $(params.output-image) + - name: COMMIT_SHA + value: $(tasks.clone-repository.results.commit) + - name: IMAGE_EXPIRES_AFTER + value: $(params.image-expires-after) + - name: ALWAYS_BUILD_INDEX + value: $(params.build-image-index) + - name: IMAGES + value: + - $(tasks.build-images.results.IMAGE_REF[*]) + runAfter: + - build-images + taskRef: + params: + - name: name + value: build-image-index + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:ba7fbed5c4862968c1a77d6b90d5bdd497925ab1de41b859c027dd5c3069cd3e + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + - name: build-source-image + params: + - name: BINARY_IMAGE + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: BINARY_IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: source-build-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:7a36cc284c5932c18e117fe5995f3246b5dcc11ec742b66a2f9ae710034b064f + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + - input: $(params.build-source-image) + operator: in + values: + - "true" + - name: deprecated-base-image-check + params: + - name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: deprecated-image-check + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:1d07d16810c26713f3d875083924d93697900147364360587ccb5a63f2c31012 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: clair-scan + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: clair-scan + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:893ffa3ce26b061e21bb4d8db9ef7ed4ddd4044fe7aa5451ef391034da3ff759 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - matrix: + params: + - name: platform + value: + - $(params.build-platforms) + name: ecosystem-cert-preflight-checks + params: + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: ecosystem-cert-preflight-checks + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:e106b6182e72c8f34ceae3f56b0b1aa2b4dc60f573877d9e51c3791029a7acb6 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-snyk-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: sast-snyk-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:322c86ad5ee252c04440184d9f5046d276415148cb6bfaf571be1b102101786b + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - matrix: + params: + - name: image-arch + value: + - $(params.build-platforms) + name: clamav-scan + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: clamav-scan + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:b0bd59748cda4a7abf311e4f448e6c1d00c6b6d8c0ecc1c2eb33e08dc0e0b802 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-coverity-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE + value: $(params.output-image) + - name: DOCKERFILE + value: $(params.dockerfile) + - name: CONTEXT + value: $(params.path-context) + - name: HERMETIC + value: $(params.hermetic) + - name: PREFETCH_INPUT + value: $(params.prefetch-input) + - name: IMAGE_EXPIRES_AFTER + value: $(params.image-expires-after) + - name: COMMIT_SHA + value: $(tasks.clone-repository.results.commit) + - name: BUILD_ARGS + value: + - $(params.build-args[*]) + - name: BUILD_ARGS_FILE + value: $(params.build-args-file) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - coverity-availability-check + taskRef: + params: + - name: name + value: sast-coverity-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:cdbe1a968676e4f5519b082bf1e27a4cdcf66dd60af66dbc26b3e604f957f7e9 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - input: $(tasks.coverity-availability-check.results.STATUS) + operator: in + values: + - success + - name: coverity-availability-check + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: coverity-availability-check + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check:0.2@sha256:db2b267dc15e4ed17f704ee91b8e9b38068e1a35b1018a328fdca621819d74c6 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-shell-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: sast-shell-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:bf7bdde00b7212f730c1356672290af6f38d070da2c8a316987b5c32fd49e0b9 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-unicode-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: sast-unicode-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.3@sha256:a2bde66f6b4164620298c7d709b8f08515409404000fa1dc2260d2508b135651 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: apply-tags + params: + - name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: apply-tags + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:e0de426d492e195f59c99d2ea1ca0df7bfb8c689f5d1468fe7f70eb8684b8d02 + - name: kind + value: task + resolver: bundles + - name: push-dockerfile + params: + - name: IMAGE + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: DOCKERFILE + value: $(params.dockerfile) + - name: CONTEXT + value: $(params.path-context) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: push-dockerfile-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:235ef6e835de8171c07b8a7f8947d0b40bfcff999e1ff3cb6ddd9acc65c48430 + - name: kind + value: task + resolver: bundles + - name: rpms-signature-scan + params: + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: rpms-signature-scan + - name: bundle + value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:e127e0e0a5aab1364b560436594fe7ed67abcd5f8d6dd3ef14ac1f35cf81078c + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + workspaces: + - name: git-auth + optional: true + - name: netrc + optional: true + taskRunTemplate: + serviceAccountName: build-pipeline-cert-manager-istio-csr-1-18 + workspaces: + - name: git-auth + secret: + secretName: '{{ git_auth_secret }}' +status: {} diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml new file mode 100644 index 00000000..d3b919d0 --- /dev/null +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -0,0 +1,617 @@ +apiVersion: tekton.dev/v1 +kind: PipelineRun +metadata: + annotations: + build.appstudio.openshift.io/repo: https://github.com/openshift/cert-manager-operator-release?rev={{revision}} + build.appstudio.redhat.com/commit_sha: '{{revision}}' + build.appstudio.redhat.com/target_branch: '{{target_branch}}' + pipelinesascode.tekton.dev/cancel-in-progress: "false" + pipelinesascode.tekton.dev/max-keep-runs: "3" + pipelinesascode.tekton.dev/on-cel-expression: event == "push" && target_branch + == "release-1.18" + creationTimestamp: null + labels: + appstudio.openshift.io/application: cert-manager-istio-csr-1-18 + appstudio.openshift.io/component: cert-manager-istio-csr-1-18 + pipelines.appstudio.openshift.io/type: build + name: cert-manager-istio-csr-1-18-on-push + namespace: cert-manager-oape-tenant +spec: + params: + - name: git-url + value: '{{source_url}}' + - name: revision + value: '{{revision}}' + - name: output-image + value: quay.io/redhat-user-workloads/cert-manager-oape-tenant/cert-manager-istio-csr-1-18/cert-manager-istio-csr-1-18:{{revision}} + - name: build-platforms + value: + - linux/x86_64 + - name: dockerfile + value: Containerfile.cert-manager-istio-csr + - name: path-context + value: . + pipelineSpec: + description: | + This pipeline is ideal for building multi-arch container images from a Containerfile while maintaining trust after pipeline customization. + + _Uses `buildah` to create a multi-platform container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. This pipeline requires that the [multi platform controller](https://github.com/konflux-ci/multi-platform-controller) is deployed and configured on your Konflux instance. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks. + This pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-multi-platform-oci-ta?tab=tags)_ + params: + - description: Source Repository URL + name: git-url + type: string + - default: "" + description: Revision of the Source Repository + name: revision + type: string + - description: Fully Qualified Output Image + name: output-image + type: string + - default: . + description: Path to the source code of an application's component from where + to build image. + name: path-context + type: string + - default: Dockerfile + description: Path to the Dockerfile inside the context specified by parameter + path-context + name: dockerfile + type: string + - default: "false" + description: Force rebuild image + name: rebuild + type: string + - default: "false" + description: Skip checks against built image + name: skip-checks + type: string + - default: "false" + description: Execute the build with network isolation + name: hermetic + type: string + - default: "" + description: Build dependencies to be prefetched + name: prefetch-input + type: string + - default: "" + description: Image tag expiration time, time values could be something like + 1h, 2d, 3w for hours, days, and weeks, respectively. + name: image-expires-after + type: string + - default: "false" + description: Build a source image. + name: build-source-image + type: string + - default: "true" + description: Add built image into an OCI image index + name: build-image-index + type: string + - default: [] + description: Array of --build-arg values ("arg=value" strings) for buildah + name: build-args + type: array + - default: "" + description: Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file + name: build-args-file + type: string + - default: "false" + description: Whether to enable privileged mode, should be used only with remote + VMs + name: privileged-nested + type: string + - default: + - linux/x86_64 + description: List of platforms to build the container images on. The available + set of values is determined by the configuration of the multi-platform-controller. + name: build-platforms + type: array + results: + - description: "" + name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + - description: "" + name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - description: "" + name: CHAINS-GIT_URL + value: $(tasks.clone-repository.results.url) + - description: "" + name: CHAINS-GIT_COMMIT + value: $(tasks.clone-repository.results.commit) + tasks: + - name: init + params: + - name: image-url + value: $(params.output-image) + - name: rebuild + value: $(params.rebuild) + - name: skip-checks + value: $(params.skip-checks) + taskRef: + params: + - name: name + value: init + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ded314206f09712b2116deb050b774ae7efef9ab243794334c8e616871a3ffa5 + - name: kind + value: task + resolver: bundles + - name: clone-repository + params: + - name: url + value: $(params.git-url) + - name: revision + value: $(params.revision) + - name: ociStorage + value: $(params.output-image).git + - name: ociArtifactExpiresAfter + value: $(params.image-expires-after) + runAfter: + - init + taskRef: + params: + - name: name + value: git-clone-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:4a601aeec58a1dd89c271e728fd8f0d84777825b46940c3aec27f15bab3edacf + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + workspaces: + - name: basic-auth + workspace: git-auth + - name: prefetch-dependencies + params: + - name: input + value: $(params.prefetch-input) + - name: SOURCE_ARTIFACT + value: $(tasks.clone-repository.results.SOURCE_ARTIFACT) + - name: ociStorage + value: $(params.output-image).prefetch + - name: ociArtifactExpiresAfter + value: $(params.image-expires-after) + runAfter: + - clone-repository + taskRef: + params: + - name: name + value: prefetch-dependencies-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:22290579c9fe0b5c1689bb9023b3eddec73c285b680226d9f460346ae849a2cb + - name: kind + value: task + resolver: bundles + workspaces: + - name: git-basic-auth + workspace: git-auth + - name: netrc + workspace: netrc + - matrix: + params: + - name: PLATFORM + value: + - $(params.build-platforms) + name: build-images + params: + - name: IMAGE + value: $(params.output-image) + - name: DOCKERFILE + value: $(params.dockerfile) + - name: CONTEXT + value: $(params.path-context) + - name: HERMETIC + value: $(params.hermetic) + - name: PREFETCH_INPUT + value: $(params.prefetch-input) + - name: IMAGE_EXPIRES_AFTER + value: $(params.image-expires-after) + - name: COMMIT_SHA + value: $(tasks.clone-repository.results.commit) + - name: BUILD_ARGS + value: + - $(params.build-args[*]) + - name: BUILD_ARGS_FILE + value: $(params.build-args-file) + - name: PRIVILEGED_NESTED + value: $(params.privileged-nested) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + - name: IMAGE_APPEND_PLATFORM + value: "true" + runAfter: + - prefetch-dependencies + taskRef: + params: + - name: name + value: buildah-remote-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:cd9ef1eb119700a6883edcf93fd7c71dc33ee43467f3c2728b2a002c77915e8d + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + - name: build-image-index + params: + - name: IMAGE + value: $(params.output-image) + - name: COMMIT_SHA + value: $(tasks.clone-repository.results.commit) + - name: IMAGE_EXPIRES_AFTER + value: $(params.image-expires-after) + - name: ALWAYS_BUILD_INDEX + value: $(params.build-image-index) + - name: IMAGES + value: + - $(tasks.build-images.results.IMAGE_REF[*]) + runAfter: + - build-images + taskRef: + params: + - name: name + value: build-image-index + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:ba7fbed5c4862968c1a77d6b90d5bdd497925ab1de41b859c027dd5c3069cd3e + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + - name: build-source-image + params: + - name: BINARY_IMAGE + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: BINARY_IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: source-build-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:7a36cc284c5932c18e117fe5995f3246b5dcc11ec742b66a2f9ae710034b064f + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + - input: $(params.build-source-image) + operator: in + values: + - "true" + - name: deprecated-base-image-check + params: + - name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: deprecated-image-check + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:1d07d16810c26713f3d875083924d93697900147364360587ccb5a63f2c31012 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: clair-scan + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: clair-scan + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:893ffa3ce26b061e21bb4d8db9ef7ed4ddd4044fe7aa5451ef391034da3ff759 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - matrix: + params: + - name: platform + value: + - $(params.build-platforms) + name: ecosystem-cert-preflight-checks + params: + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: ecosystem-cert-preflight-checks + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:e106b6182e72c8f34ceae3f56b0b1aa2b4dc60f573877d9e51c3791029a7acb6 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-snyk-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: sast-snyk-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:322c86ad5ee252c04440184d9f5046d276415148cb6bfaf571be1b102101786b + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - matrix: + params: + - name: image-arch + value: + - $(params.build-platforms) + name: clamav-scan + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: clamav-scan + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:b0bd59748cda4a7abf311e4f448e6c1d00c6b6d8c0ecc1c2eb33e08dc0e0b802 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-coverity-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE + value: $(params.output-image) + - name: DOCKERFILE + value: $(params.dockerfile) + - name: CONTEXT + value: $(params.path-context) + - name: HERMETIC + value: $(params.hermetic) + - name: PREFETCH_INPUT + value: $(params.prefetch-input) + - name: IMAGE_EXPIRES_AFTER + value: $(params.image-expires-after) + - name: COMMIT_SHA + value: $(tasks.clone-repository.results.commit) + - name: BUILD_ARGS + value: + - $(params.build-args[*]) + - name: BUILD_ARGS_FILE + value: $(params.build-args-file) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - coverity-availability-check + taskRef: + params: + - name: name + value: sast-coverity-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:cdbe1a968676e4f5519b082bf1e27a4cdcf66dd60af66dbc26b3e604f957f7e9 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - input: $(tasks.coverity-availability-check.results.STATUS) + operator: in + values: + - success + - name: coverity-availability-check + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: coverity-availability-check + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check:0.2@sha256:db2b267dc15e4ed17f704ee91b8e9b38068e1a35b1018a328fdca621819d74c6 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-shell-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: sast-shell-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:bf7bdde00b7212f730c1356672290af6f38d070da2c8a316987b5c32fd49e0b9 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-unicode-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: sast-unicode-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.3@sha256:a2bde66f6b4164620298c7d709b8f08515409404000fa1dc2260d2508b135651 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: apply-tags + params: + - name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: apply-tags + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:e0de426d492e195f59c99d2ea1ca0df7bfb8c689f5d1468fe7f70eb8684b8d02 + - name: kind + value: task + resolver: bundles + - name: push-dockerfile + params: + - name: IMAGE + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: DOCKERFILE + value: $(params.dockerfile) + - name: CONTEXT + value: $(params.path-context) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: push-dockerfile-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:235ef6e835de8171c07b8a7f8947d0b40bfcff999e1ff3cb6ddd9acc65c48430 + - name: kind + value: task + resolver: bundles + - name: rpms-signature-scan + params: + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: rpms-signature-scan + - name: bundle + value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:e127e0e0a5aab1364b560436594fe7ed67abcd5f8d6dd3ef14ac1f35cf81078c + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + workspaces: + - name: git-auth + optional: true + - name: netrc + optional: true + taskRunTemplate: + serviceAccountName: build-pipeline-cert-manager-istio-csr-1-18 + workspaces: + - name: git-auth + secret: + secretName: '{{ git_auth_secret }}' +status: {} From c65369df494f495eed4e33588c6b38524ecc1abc Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Mon, 1 Sep 2025 11:57:37 +0000 Subject: [PATCH 02/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index 7d27da8a..617599c0 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -186,7 +186,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:22290579c9fe0b5c1689bb9023b3eddec73c285b680226d9f460346ae849a2cb + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:24230408f0353d339dc573aaa96d2cfee9e29b89ece931a90a7866bc772c79b7 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index d3b919d0..b20eeb1e 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -183,7 +183,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:22290579c9fe0b5c1689bb9023b3eddec73c285b680226d9f460346ae849a2cb + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:24230408f0353d339dc573aaa96d2cfee9e29b89ece931a90a7866bc772c79b7 - name: kind value: task resolver: bundles From 7e1dfe611e162f9975814a7b9d9d28fcd44d46c6 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Mon, 1 Sep 2025 20:48:38 +0000 Subject: [PATCH 03/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index 617599c0..3c194641 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -236,7 +236,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:cd9ef1eb119700a6883edcf93fd7c71dc33ee43467f3c2728b2a002c77915e8d + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:dc2f0ee60851a8865ce4fb5040f63b08dbd3442558a4e1c82f6f0079581215e5 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index b20eeb1e..6e875ac8 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -233,7 +233,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:cd9ef1eb119700a6883edcf93fd7c71dc33ee43467f3c2728b2a002c77915e8d + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:dc2f0ee60851a8865ce4fb5040f63b08dbd3442558a4e1c82f6f0079581215e5 - name: kind value: task resolver: bundles From 7c676ef4dd8db83ae97200cb10d26a76d670a3c4 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Tue, 2 Sep 2025 19:23:20 +0000 Subject: [PATCH 04/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index 3c194641..f2636222 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -186,7 +186,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:24230408f0353d339dc573aaa96d2cfee9e29b89ece931a90a7866bc772c79b7 + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:05551e144d090844903d61893a383fa4dc69ab563797f03ffaab0f8624bf530d - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index 6e875ac8..48b5b7ee 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -183,7 +183,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:24230408f0353d339dc573aaa96d2cfee9e29b89ece931a90a7866bc772c79b7 + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:05551e144d090844903d61893a383fa4dc69ab563797f03ffaab0f8624bf530d - name: kind value: task resolver: bundles From 1eea91036c859414769ccb4e4319e4105f6b67da Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Wed, 3 Sep 2025 05:03:53 +0000 Subject: [PATCH 05/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index f2636222..1037efea 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -390,7 +390,7 @@ spec: - name: name value: sast-snyk-check-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:322c86ad5ee252c04440184d9f5046d276415148cb6bfaf571be1b102101786b + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:e371aa09c65ab309138b4aeae9ea4dd93f83119c5cc61e9f2057fe5bb518fbe9 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index 48b5b7ee..38e3ceea 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -387,7 +387,7 @@ spec: - name: name value: sast-snyk-check-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:322c86ad5ee252c04440184d9f5046d276415148cb6bfaf571be1b102101786b + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:e371aa09c65ab309138b4aeae9ea4dd93f83119c5cc61e9f2057fe5bb518fbe9 - name: kind value: task resolver: bundles From 3a4aa1fb35fe5a67e6af2c203e1f81277ab35a26 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Wed, 3 Sep 2025 14:39:42 +0000 Subject: [PATCH 06/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index 1037efea..40020a65 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -236,7 +236,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:dc2f0ee60851a8865ce4fb5040f63b08dbd3442558a4e1c82f6f0079581215e5 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:252e5c94fb2375c43bdfd4b65097d246f4f37392956b08e5c38f366623a0b9ce - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index 38e3ceea..87d00c0b 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -233,7 +233,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:dc2f0ee60851a8865ce4fb5040f63b08dbd3442558a4e1c82f6f0079581215e5 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:252e5c94fb2375c43bdfd4b65097d246f4f37392956b08e5c38f366623a0b9ce - name: kind value: task resolver: bundles From 683b93ea43fd9b02100b931019470dc63652265a Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 5 Sep 2025 05:29:19 +0000 Subject: [PATCH 07/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 4 ++-- .tekton/cert-manager-istio-csr-1-18-push.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index 40020a65..05186438 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -186,7 +186,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:05551e144d090844903d61893a383fa4dc69ab563797f03ffaab0f8624bf530d + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:0b58e5132333dd3b710ef9c18ecebe0d5e5b22066ba56481d34431c989cb21dd - name: kind value: task resolver: bundles @@ -364,7 +364,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:e106b6182e72c8f34ceae3f56b0b1aa2b4dc60f573877d9e51c3791029a7acb6 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:51ee3ca7b8142f39a2861ed0f94f67e02c538e3b7e57de56ed301fbb9774aa12 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index 87d00c0b..d9af974e 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -183,7 +183,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:05551e144d090844903d61893a383fa4dc69ab563797f03ffaab0f8624bf530d + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:0b58e5132333dd3b710ef9c18ecebe0d5e5b22066ba56481d34431c989cb21dd - name: kind value: task resolver: bundles @@ -361,7 +361,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:e106b6182e72c8f34ceae3f56b0b1aa2b4dc60f573877d9e51c3791029a7acb6 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:51ee3ca7b8142f39a2861ed0f94f67e02c538e3b7e57de56ed301fbb9774aa12 - name: kind value: task resolver: bundles From 2a25f639ad9e248cc4fc1659be82ba210b1c9d77 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 5 Sep 2025 14:28:33 +0000 Subject: [PATCH 08/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 4 ++-- .tekton/cert-manager-istio-csr-1-18-push.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index 05186438..2180548b 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -291,7 +291,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:7a36cc284c5932c18e117fe5995f3246b5dcc11ec742b66a2f9ae710034b064f + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a48c950350c5e9945cc4ad6bfad7fc653aa437c9eff74a25fd1d42fda4fe344d - name: kind value: task resolver: bundles @@ -364,7 +364,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:51ee3ca7b8142f39a2861ed0f94f67e02c538e3b7e57de56ed301fbb9774aa12 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:365c65ed8dfbd83c4a49300dcb9c74c5c3f027efec0be1a1f0baa9633c29b249 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index d9af974e..cf5e37c4 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -288,7 +288,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:7a36cc284c5932c18e117fe5995f3246b5dcc11ec742b66a2f9ae710034b064f + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a48c950350c5e9945cc4ad6bfad7fc653aa437c9eff74a25fd1d42fda4fe344d - name: kind value: task resolver: bundles @@ -361,7 +361,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:51ee3ca7b8142f39a2861ed0f94f67e02c538e3b7e57de56ed301fbb9774aa12 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:365c65ed8dfbd83c4a49300dcb9c74c5c3f027efec0be1a1f0baa9633c29b249 - name: kind value: task resolver: bundles From bac997dbcf4c427571346e63182a6f09d48619a3 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Sun, 7 Sep 2025 11:53:17 +0000 Subject: [PATCH 09/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index 2180548b..ec56b33e 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -597,7 +597,7 @@ spec: - name: name value: rpms-signature-scan - name: bundle - value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:e127e0e0a5aab1364b560436594fe7ed67abcd5f8d6dd3ef14ac1f35cf81078c + value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:49ff6d117c3e9dc3966d1244e118e168b3501742ec14c3a4161a276ff48d04d5 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index cf5e37c4..a3cd147a 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -594,7 +594,7 @@ spec: - name: name value: rpms-signature-scan - name: bundle - value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:e127e0e0a5aab1364b560436594fe7ed67abcd5f8d6dd3ef14ac1f35cf81078c + value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:49ff6d117c3e9dc3966d1244e118e168b3501742ec14c3a4161a276ff48d04d5 - name: kind value: task resolver: bundles From 01ca234c1ec0da80664d26b2862580d7a6ff0f52 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Tue, 9 Sep 2025 18:27:52 +0000 Subject: [PATCH 10/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index ec56b33e..fc9762bd 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -364,7 +364,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:365c65ed8dfbd83c4a49300dcb9c74c5c3f027efec0be1a1f0baa9633c29b249 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9f93749cfc4f665d0c1b8cd99d16ed90514e795d18d5d27b43d504bddeed3690 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index a3cd147a..d9cf6d7d 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -361,7 +361,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:365c65ed8dfbd83c4a49300dcb9c74c5c3f027efec0be1a1f0baa9633c29b249 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9f93749cfc4f665d0c1b8cd99d16ed90514e795d18d5d27b43d504bddeed3690 - name: kind value: task resolver: bundles From 1d510f1abc98602597b7e6ea8d2f156ba5c07815 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Wed, 10 Sep 2025 07:14:25 +0000 Subject: [PATCH 11/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index fc9762bd..302a59f4 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -557,7 +557,7 @@ spec: - name: name value: apply-tags - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:e0de426d492e195f59c99d2ea1ca0df7bfb8c689f5d1468fe7f70eb8684b8d02 + value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:f44be1bf0262471f2f503f5e19da5f0628dcaf968c86272a2ad6b4871e708448 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index d9cf6d7d..c2cf9cea 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -554,7 +554,7 @@ spec: - name: name value: apply-tags - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:e0de426d492e195f59c99d2ea1ca0df7bfb8c689f5d1468fe7f70eb8684b8d02 + value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:f44be1bf0262471f2f503f5e19da5f0628dcaf968c86272a2ad6b4871e708448 - name: kind value: task resolver: bundles From 0ce2f9af9ca4019bc16519675ec905b1947624a9 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Wed, 10 Sep 2025 17:25:28 +0000 Subject: [PATCH 12/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 11 ++++++++--- .tekton/cert-manager-istio-csr-1-18-push.yaml | 11 ++++++++--- 2 files changed, 16 insertions(+), 6 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index 302a59f4..8bdf19f6 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -186,7 +186,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:0b58e5132333dd3b710ef9c18ecebe0d5e5b22066ba56481d34431c989cb21dd + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:b89fb66464d0069dd72ef070c8c2c16d79c4200702d8f91e20bfe46e0aa0ae8d - name: kind value: task resolver: bundles @@ -326,7 +326,12 @@ spec: operator: in values: - "false" - - name: clair-scan + - matrix: + params: + - name: image-platform + value: + - $(params.build-platforms) + name: clair-scan params: - name: image-digest value: $(tasks.build-image-index.results.IMAGE_DIGEST) @@ -339,7 +344,7 @@ spec: - name: name value: clair-scan - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:893ffa3ce26b061e21bb4d8db9ef7ed4ddd4044fe7aa5451ef391034da3ff759 + value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:a7cc183967f89c4ac100d04ab8f81e54733beee60a0528208107c9a22d3c43af - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index c2cf9cea..1a998796 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -183,7 +183,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:0b58e5132333dd3b710ef9c18ecebe0d5e5b22066ba56481d34431c989cb21dd + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:b89fb66464d0069dd72ef070c8c2c16d79c4200702d8f91e20bfe46e0aa0ae8d - name: kind value: task resolver: bundles @@ -323,7 +323,12 @@ spec: operator: in values: - "false" - - name: clair-scan + - matrix: + params: + - name: image-platform + value: + - $(params.build-platforms) + name: clair-scan params: - name: image-digest value: $(tasks.build-image-index.results.IMAGE_DIGEST) @@ -336,7 +341,7 @@ spec: - name: name value: clair-scan - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:893ffa3ce26b061e21bb4d8db9ef7ed4ddd4044fe7aa5451ef391034da3ff759 + value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:a7cc183967f89c4ac100d04ab8f81e54733beee60a0528208107c9a22d3c43af - name: kind value: task resolver: bundles From ef4265d397198a622afc62a390d53ddc6d90d4c6 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Wed, 10 Sep 2025 22:25:52 +0000 Subject: [PATCH 13/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index 8bdf19f6..cfe3d8a9 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -369,7 +369,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9f93749cfc4f665d0c1b8cd99d16ed90514e795d18d5d27b43d504bddeed3690 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:dae8e28761cee4ab0baf04ab9f8f1a4b3cee3c7decf461fda2bacc5c01652a60 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index 1a998796..5e686323 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -366,7 +366,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9f93749cfc4f665d0c1b8cd99d16ed90514e795d18d5d27b43d504bddeed3690 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:dae8e28761cee4ab0baf04ab9f8f1a4b3cee3c7decf461fda2bacc5c01652a60 - name: kind value: task resolver: bundles From c017dc8d0928af81d17eafaa2cb645ada3ae8126 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Thu, 11 Sep 2025 13:56:12 +0000 Subject: [PATCH 14/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .../cert-manager-istio-csr-1-18-pull-request.yaml | 12 ++++++------ .tekton/cert-manager-istio-csr-1-18-push.yaml | 12 ++++++------ 2 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index cfe3d8a9..f0ce28ac 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -136,7 +136,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ded314206f09712b2116deb050b774ae7efef9ab243794334c8e616871a3ffa5 + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ec962d0be18f36ca7d331c99bf243800f569fc0a2ea6f8c8c3d3a574b71c44dc - name: kind value: task resolver: bundles @@ -157,7 +157,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:4a601aeec58a1dd89c271e728fd8f0d84777825b46940c3aec27f15bab3edacf + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:efcce59f226b1426f7685917e41a50b73478f38fe9ac56c98f1e961effd4b6f0 - name: kind value: task resolver: bundles @@ -236,7 +236,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:252e5c94fb2375c43bdfd4b65097d246f4f37392956b08e5c38f366623a0b9ce + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:7ff1a2e486924478e7724005464d60dab9a85e2ae4734818057ece3845797509 - name: kind value: task resolver: bundles @@ -291,7 +291,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a48c950350c5e9945cc4ad6bfad7fc653aa437c9eff74a25fd1d42fda4fe344d + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a54c27a0d8f913c787755422a09c4561971b506a043d872b5b07af8123ef0f41 - name: kind value: task resolver: bundles @@ -395,7 +395,7 @@ spec: - name: name value: sast-snyk-check-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:e371aa09c65ab309138b4aeae9ea4dd93f83119c5cc61e9f2057fe5bb518fbe9 + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:783f5de1b4def2fb3fad20b914f4b3afee46ffb8f652114946e321ef3fa86449 - name: kind value: task resolver: bundles @@ -585,7 +585,7 @@ spec: - name: name value: push-dockerfile-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:235ef6e835de8171c07b8a7f8947d0b40bfcff999e1ff3cb6ddd9acc65c48430 + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:06529ba66b37bdc1f55590359aa849bc570b4e9c110c983e27f07081dc09a12b - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index 5e686323..f78bad5f 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -133,7 +133,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ded314206f09712b2116deb050b774ae7efef9ab243794334c8e616871a3ffa5 + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ec962d0be18f36ca7d331c99bf243800f569fc0a2ea6f8c8c3d3a574b71c44dc - name: kind value: task resolver: bundles @@ -154,7 +154,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:4a601aeec58a1dd89c271e728fd8f0d84777825b46940c3aec27f15bab3edacf + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:efcce59f226b1426f7685917e41a50b73478f38fe9ac56c98f1e961effd4b6f0 - name: kind value: task resolver: bundles @@ -233,7 +233,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:252e5c94fb2375c43bdfd4b65097d246f4f37392956b08e5c38f366623a0b9ce + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:7ff1a2e486924478e7724005464d60dab9a85e2ae4734818057ece3845797509 - name: kind value: task resolver: bundles @@ -288,7 +288,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a48c950350c5e9945cc4ad6bfad7fc653aa437c9eff74a25fd1d42fda4fe344d + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a54c27a0d8f913c787755422a09c4561971b506a043d872b5b07af8123ef0f41 - name: kind value: task resolver: bundles @@ -392,7 +392,7 @@ spec: - name: name value: sast-snyk-check-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:e371aa09c65ab309138b4aeae9ea4dd93f83119c5cc61e9f2057fe5bb518fbe9 + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:783f5de1b4def2fb3fad20b914f4b3afee46ffb8f652114946e321ef3fa86449 - name: kind value: task resolver: bundles @@ -582,7 +582,7 @@ spec: - name: name value: push-dockerfile-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:235ef6e835de8171c07b8a7f8947d0b40bfcff999e1ff3cb6ddd9acc65c48430 + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:06529ba66b37bdc1f55590359aa849bc570b4e9c110c983e27f07081dc09a12b - name: kind value: task resolver: bundles From 2b6482cd943453273c0d46c99269296626facdde Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 12 Sep 2025 00:05:01 +0000 Subject: [PATCH 15/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index f0ce28ac..b09669d7 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -186,7 +186,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:b89fb66464d0069dd72ef070c8c2c16d79c4200702d8f91e20bfe46e0aa0ae8d + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:d08e349032c57367d543c0bbd070386709614ade1db8e5eddeab29b1338f6653 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index f78bad5f..2f730bd7 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -183,7 +183,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:b89fb66464d0069dd72ef070c8c2c16d79c4200702d8f91e20bfe46e0aa0ae8d + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:d08e349032c57367d543c0bbd070386709614ade1db8e5eddeab29b1338f6653 - name: kind value: task resolver: bundles From 6f7859afb84fed3d9c5a7fb1f49cd0cc8d4a6d08 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 12 Sep 2025 20:27:47 +0000 Subject: [PATCH 16/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index b09669d7..6e22c3fa 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -291,7 +291,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a54c27a0d8f913c787755422a09c4561971b506a043d872b5b07af8123ef0f41 + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:21d33596cf7ff61cab38b68caf578e55509748962bf6f4030bf1dfb8cd68a257 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index 2f730bd7..6f95a692 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -288,7 +288,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a54c27a0d8f913c787755422a09c4561971b506a043d872b5b07af8123ef0f41 + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:21d33596cf7ff61cab38b68caf578e55509748962bf6f4030bf1dfb8cd68a257 - name: kind value: task resolver: bundles From 649656449c5827ef17b00c15b0cdcf3166130fae Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Mon, 15 Sep 2025 09:41:20 +0000 Subject: [PATCH 17/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index 6e22c3fa..6166b08e 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -186,7 +186,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:d08e349032c57367d543c0bbd070386709614ade1db8e5eddeab29b1338f6653 + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:098322d6b789824f716f2d9caca1862d4afdc083ebaaee61aadd22a8c179480a - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index 6f95a692..c1d3434e 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -183,7 +183,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:d08e349032c57367d543c0bbd070386709614ade1db8e5eddeab29b1338f6653 + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:098322d6b789824f716f2d9caca1862d4afdc083ebaaee61aadd22a8c179480a - name: kind value: task resolver: bundles From a97781289990eba3a0284bc16560490920a89f55 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Tue, 16 Sep 2025 16:27:46 +0000 Subject: [PATCH 18/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 4 +++- .tekton/cert-manager-istio-csr-1-18-push.yaml | 4 +++- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index 6166b08e..a70fe7fd 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -223,6 +223,8 @@ spec: value: $(params.build-args-file) - name: PRIVILEGED_NESTED value: $(params.privileged-nested) + - name: SOURCE_URL + value: $(tasks.clone-repository.results.url) - name: SOURCE_ARTIFACT value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) - name: CACHI2_ARTIFACT @@ -236,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:7ff1a2e486924478e7724005464d60dab9a85e2ae4734818057ece3845797509 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:c1bd994e10b284d10e3713914f897f03e751588ae2a2f9bdfc873136fec4b641 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index c1d3434e..8db82b9e 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -220,6 +220,8 @@ spec: value: $(params.build-args-file) - name: PRIVILEGED_NESTED value: $(params.privileged-nested) + - name: SOURCE_URL + value: $(tasks.clone-repository.results.url) - name: SOURCE_ARTIFACT value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) - name: CACHI2_ARTIFACT @@ -233,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:7ff1a2e486924478e7724005464d60dab9a85e2ae4734818057ece3845797509 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:c1bd994e10b284d10e3713914f897f03e751588ae2a2f9bdfc873136fec4b641 - name: kind value: task resolver: bundles From b4878713a330ee9d9c1ba283679f1dbe8ac19d6e Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Tue, 16 Sep 2025 18:01:24 +0000 Subject: [PATCH 19/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index a70fe7fd..ba0db1ec 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -238,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:c1bd994e10b284d10e3713914f897f03e751588ae2a2f9bdfc873136fec4b641 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:312a42ce2fe4b59fb9bdd5ee227e05fdff22a2346bc3c9c0ec62d2b0214a2788 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index 8db82b9e..dd3dc729 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -235,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:c1bd994e10b284d10e3713914f897f03e751588ae2a2f9bdfc873136fec4b641 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:312a42ce2fe4b59fb9bdd5ee227e05fdff22a2346bc3c9c0ec62d2b0214a2788 - name: kind value: task resolver: bundles From 69505bd6d03e86eae1d84663e9022c139572ff07 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Thu, 18 Sep 2025 01:25:53 +0000 Subject: [PATCH 20/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index ba0db1ec..1f9479a8 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -238,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:312a42ce2fe4b59fb9bdd5ee227e05fdff22a2346bc3c9c0ec62d2b0214a2788 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:ec87447b59e05ca85b7ae33b01cfc585b34aacf95b4fed5e705e4f5a65eee141 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index dd3dc729..085713eb 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -235,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:312a42ce2fe4b59fb9bdd5ee227e05fdff22a2346bc3c9c0ec62d2b0214a2788 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:ec87447b59e05ca85b7ae33b01cfc585b34aacf95b4fed5e705e4f5a65eee141 - name: kind value: task resolver: bundles From 84f344feb4e0900cbf2fa27382627d251c40d59a Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Thu, 18 Sep 2025 10:53:46 +0000 Subject: [PATCH 21/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 10 +++++----- .tekton/cert-manager-istio-csr-1-18-push.yaml | 10 +++++----- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index 1f9479a8..dc87b8b1 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -157,7 +157,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:efcce59f226b1426f7685917e41a50b73478f38fe9ac56c98f1e961effd4b6f0 + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:3f1b468066b301083d8550e036f5a654fcb064810bd29eb06fec6d8ad3e35b9c - name: kind value: task resolver: bundles @@ -238,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:ec87447b59e05ca85b7ae33b01cfc585b34aacf95b4fed5e705e4f5a65eee141 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:932e0493c1ea791cadc241018c32efefd9141b154e574b038b37d75b2c5480ad - name: kind value: task resolver: bundles @@ -267,7 +267,7 @@ spec: - name: name value: build-image-index - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:ba7fbed5c4862968c1a77d6b90d5bdd497925ab1de41b859c027dd5c3069cd3e + value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:8e5dfb2fac011148f8715bbe0b99415f88297683d269eae0dfcad52562195d45 - name: kind value: task resolver: bundles @@ -293,7 +293,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:21d33596cf7ff61cab38b68caf578e55509748962bf6f4030bf1dfb8cd68a257 + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:b0d6cb28a23f20db4f5cf78ed78ae3a91b9a5adfe989696ed0bbc63840a485b6 - name: kind value: task resolver: bundles @@ -587,7 +587,7 @@ spec: - name: name value: push-dockerfile-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:06529ba66b37bdc1f55590359aa849bc570b4e9c110c983e27f07081dc09a12b + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:49f778479f468e71c2cfef722e96aa813d7ef98bde8a612e1bf1a13cd70849ec - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index 085713eb..98953a99 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -154,7 +154,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:efcce59f226b1426f7685917e41a50b73478f38fe9ac56c98f1e961effd4b6f0 + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:3f1b468066b301083d8550e036f5a654fcb064810bd29eb06fec6d8ad3e35b9c - name: kind value: task resolver: bundles @@ -235,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:ec87447b59e05ca85b7ae33b01cfc585b34aacf95b4fed5e705e4f5a65eee141 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:932e0493c1ea791cadc241018c32efefd9141b154e574b038b37d75b2c5480ad - name: kind value: task resolver: bundles @@ -264,7 +264,7 @@ spec: - name: name value: build-image-index - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:ba7fbed5c4862968c1a77d6b90d5bdd497925ab1de41b859c027dd5c3069cd3e + value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:8e5dfb2fac011148f8715bbe0b99415f88297683d269eae0dfcad52562195d45 - name: kind value: task resolver: bundles @@ -290,7 +290,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:21d33596cf7ff61cab38b68caf578e55509748962bf6f4030bf1dfb8cd68a257 + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:b0d6cb28a23f20db4f5cf78ed78ae3a91b9a5adfe989696ed0bbc63840a485b6 - name: kind value: task resolver: bundles @@ -584,7 +584,7 @@ spec: - name: name value: push-dockerfile-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:06529ba66b37bdc1f55590359aa849bc570b4e9c110c983e27f07081dc09a12b + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:49f778479f468e71c2cfef722e96aa813d7ef98bde8a612e1bf1a13cd70849ec - name: kind value: task resolver: bundles From 4e934f30353fcd5eaf07fdd809b11abc1853162f Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Thu, 18 Sep 2025 20:31:53 +0000 Subject: [PATCH 22/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index dc87b8b1..1d4c57f4 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -238,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:932e0493c1ea791cadc241018c32efefd9141b154e574b038b37d75b2c5480ad + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:08bbee8bda1e6d0f7a4690a494f0a2713e0279c75412402a28008a8aa34283ca - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index 98953a99..c6df452f 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -235,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:932e0493c1ea791cadc241018c32efefd9141b154e574b038b37d75b2c5480ad + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:08bbee8bda1e6d0f7a4690a494f0a2713e0279c75412402a28008a8aa34283ca - name: kind value: task resolver: bundles From c8399922c6ad7cd05ed39a36ff7d9099884448a7 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 19 Sep 2025 12:29:33 +0000 Subject: [PATCH 23/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index 1d4c57f4..87ff858d 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -238,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:08bbee8bda1e6d0f7a4690a494f0a2713e0279c75412402a28008a8aa34283ca + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:17a0b093c9e9d21e9e374c60a88eb293a0fa57e4e2b67baf20ccac9735aa20ff - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index c6df452f..398c2b1f 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -235,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:08bbee8bda1e6d0f7a4690a494f0a2713e0279c75412402a28008a8aa34283ca + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:17a0b093c9e9d21e9e374c60a88eb293a0fa57e4e2b67baf20ccac9735aa20ff - name: kind value: task resolver: bundles From 393cf0b7f7c0601bad591c3c350559b0d30ace1a Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Tue, 23 Sep 2025 15:55:13 +0000 Subject: [PATCH 24/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 4 ++-- .tekton/cert-manager-istio-csr-1-18-push.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index 87ff858d..3f3c4c91 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -238,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:17a0b093c9e9d21e9e374c60a88eb293a0fa57e4e2b67baf20ccac9735aa20ff + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:a60e433e02bfda6811719690edbf1e924820d107ad658c8a9690498d4c7e9c7b - name: kind value: task resolver: bundles @@ -267,7 +267,7 @@ spec: - name: name value: build-image-index - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:8e5dfb2fac011148f8715bbe0b99415f88297683d269eae0dfcad52562195d45 + value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:79784d53749584bc5a8de32142ec4e2f01cdbf42c20d94e59280e0b927c8597d - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index 398c2b1f..d88c4fb4 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -235,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:17a0b093c9e9d21e9e374c60a88eb293a0fa57e4e2b67baf20ccac9735aa20ff + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:a60e433e02bfda6811719690edbf1e924820d107ad658c8a9690498d4c7e9c7b - name: kind value: task resolver: bundles @@ -264,7 +264,7 @@ spec: - name: name value: build-image-index - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:8e5dfb2fac011148f8715bbe0b99415f88297683d269eae0dfcad52562195d45 + value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:79784d53749584bc5a8de32142ec4e2f01cdbf42c20d94e59280e0b927c8597d - name: kind value: task resolver: bundles From 345ef24b5817ea5a625bcfb9a1bf51f75e7a0e74 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Wed, 24 Sep 2025 14:38:12 +0000 Subject: [PATCH 25/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index 3f3c4c91..6e42588a 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -186,7 +186,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:098322d6b789824f716f2d9caca1862d4afdc083ebaaee61aadd22a8c179480a + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:dc82a7270aace9b1c26f7e96f8ccab2752e53d32980c41a45e1733baad76cde6 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index d88c4fb4..b72282fe 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -183,7 +183,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:098322d6b789824f716f2d9caca1862d4afdc083ebaaee61aadd22a8c179480a + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:dc82a7270aace9b1c26f7e96f8ccab2752e53d32980c41a45e1733baad76cde6 - name: kind value: task resolver: bundles From 22806e92e82779a25d5014cf116ffac9aa3295d2 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Thu, 25 Sep 2025 21:50:14 +0000 Subject: [PATCH 26/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index 6e42588a..a60b8e2f 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -238,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:a60e433e02bfda6811719690edbf1e924820d107ad658c8a9690498d4c7e9c7b + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:650b0bca57c626c1e82f35cdfadf44a7792230b2b992aaa9c369d615aae6590d - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index b72282fe..34ad696a 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -235,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:a60e433e02bfda6811719690edbf1e924820d107ad658c8a9690498d4c7e9c7b + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:650b0bca57c626c1e82f35cdfadf44a7792230b2b992aaa9c369d615aae6590d - name: kind value: task resolver: bundles From c40a3e1f53ddb550ef88ea90b26058860868e823 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 26 Sep 2025 13:48:04 +0000 Subject: [PATCH 27/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 11 ++++++++++- .tekton/cert-manager-istio-csr-1-18-push.yaml | 11 ++++++++++- 2 files changed, 20 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index a60b8e2f..69cad43b 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -90,6 +90,11 @@ spec: description: Add built image into an OCI image index name: build-image-index type: string + - default: docker + description: The format for the resulting image's mediaType. Valid values are + oci or docker. + name: buildah-format + type: string - default: [] description: Array of --build-arg values ("arg=value" strings) for buildah name: build-args @@ -136,7 +141,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ec962d0be18f36ca7d331c99bf243800f569fc0a2ea6f8c8c3d3a574b71c44dc + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:abf231cfc5a68b56f68a8ac9bb26dca3c3e434c88dd9627c72bdec0b8c335c67 - name: kind value: task resolver: bundles @@ -225,6 +230,8 @@ spec: value: $(params.privileged-nested) - name: SOURCE_URL value: $(tasks.clone-repository.results.url) + - name: BUILDAH_FORMAT + value: $(params.buildah-format) - name: SOURCE_ARTIFACT value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) - name: CACHI2_ARTIFACT @@ -260,6 +267,8 @@ spec: - name: IMAGES value: - $(tasks.build-images.results.IMAGE_REF[*]) + - name: BUILDAH_FORMAT + value: $(params.buildah-format) runAfter: - build-images taskRef: diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index 34ad696a..78968ea1 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -87,6 +87,11 @@ spec: description: Add built image into an OCI image index name: build-image-index type: string + - default: docker + description: The format for the resulting image's mediaType. Valid values are + oci or docker. + name: buildah-format + type: string - default: [] description: Array of --build-arg values ("arg=value" strings) for buildah name: build-args @@ -133,7 +138,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ec962d0be18f36ca7d331c99bf243800f569fc0a2ea6f8c8c3d3a574b71c44dc + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:abf231cfc5a68b56f68a8ac9bb26dca3c3e434c88dd9627c72bdec0b8c335c67 - name: kind value: task resolver: bundles @@ -222,6 +227,8 @@ spec: value: $(params.privileged-nested) - name: SOURCE_URL value: $(tasks.clone-repository.results.url) + - name: BUILDAH_FORMAT + value: $(params.buildah-format) - name: SOURCE_ARTIFACT value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) - name: CACHI2_ARTIFACT @@ -257,6 +264,8 @@ spec: - name: IMAGES value: - $(tasks.build-images.results.IMAGE_REF[*]) + - name: BUILDAH_FORMAT + value: $(params.buildah-format) runAfter: - build-images taskRef: From 098504f4ad52ba1bd8930041d199ce35c93a1bf7 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Mon, 29 Sep 2025 17:35:36 +0000 Subject: [PATCH 28/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index 69cad43b..4945fc69 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -141,7 +141,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:abf231cfc5a68b56f68a8ac9bb26dca3c3e434c88dd9627c72bdec0b8c335c67 + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:afc8d0af71c24285599120946b29eea2ab56663c5f49c6ca80ba12bf56ef2371 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index 78968ea1..a91b0de6 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -138,7 +138,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:abf231cfc5a68b56f68a8ac9bb26dca3c3e434c88dd9627c72bdec0b8c335c67 + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:afc8d0af71c24285599120946b29eea2ab56663c5f49c6ca80ba12bf56ef2371 - name: kind value: task resolver: bundles From 095bf6e7af8e5abad0e2b7827942f455005a7a1d Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Tue, 30 Sep 2025 15:34:55 +0000 Subject: [PATCH 29/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index 4945fc69..5ab91007 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -141,7 +141,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:afc8d0af71c24285599120946b29eea2ab56663c5f49c6ca80ba12bf56ef2371 + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:526a104a3342e36dad5c5e7f98c647da6b2a33897e458f772ff4afe523e0690a - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index a91b0de6..dd122704 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -138,7 +138,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:afc8d0af71c24285599120946b29eea2ab56663c5f49c6ca80ba12bf56ef2371 + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:526a104a3342e36dad5c5e7f98c647da6b2a33897e458f772ff4afe523e0690a - name: kind value: task resolver: bundles From 07afdc37672977dd4a9383861757769a31e617b6 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Wed, 1 Oct 2025 23:31:16 +0000 Subject: [PATCH 30/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index 5ab91007..9aca29f9 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -406,7 +406,7 @@ spec: - name: name value: sast-snyk-check-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:783f5de1b4def2fb3fad20b914f4b3afee46ffb8f652114946e321ef3fa86449 + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:181d63c126e3119a9d57b8feed4eb66a875b5208c3e90724c22758e65dca8733 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index dd122704..068f80c5 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -403,7 +403,7 @@ spec: - name: name value: sast-snyk-check-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:783f5de1b4def2fb3fad20b914f4b3afee46ffb8f652114946e321ef3fa86449 + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:181d63c126e3119a9d57b8feed4eb66a875b5208c3e90724c22758e65dca8733 - name: kind value: task resolver: bundles From 8d7993eefd3c102bf6ce5a16eda9331379761950 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 3 Oct 2025 09:07:32 +0000 Subject: [PATCH 31/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 10 +++++----- .tekton/cert-manager-istio-csr-1-18-push.yaml | 10 +++++----- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index 9aca29f9..097efff5 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -141,7 +141,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:526a104a3342e36dad5c5e7f98c647da6b2a33897e458f772ff4afe523e0690a + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:bbf313b09740fb39b3343bc69ee94b2a2c21d16a9304f9b7c111c305558fc346 - name: kind value: task resolver: bundles @@ -162,7 +162,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:3f1b468066b301083d8550e036f5a654fcb064810bd29eb06fec6d8ad3e35b9c + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:1144353cf608f0a44a6416a70db6408727733ff40070d382158d6f6984096d8e - name: kind value: task resolver: bundles @@ -245,7 +245,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:650b0bca57c626c1e82f35cdfadf44a7792230b2b992aaa9c369d615aae6590d + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:5e59c05455619580f4383010726f7db8440ecf6959882e9053ac697dd6d277fd - name: kind value: task resolver: bundles @@ -302,7 +302,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:b0d6cb28a23f20db4f5cf78ed78ae3a91b9a5adfe989696ed0bbc63840a485b6 + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:36d44f2924f60da00a079a9ab7ce25ad8b2ad593c16d90509203c125ff0ccd46 - name: kind value: task resolver: bundles @@ -596,7 +596,7 @@ spec: - name: name value: push-dockerfile-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:49f778479f468e71c2cfef722e96aa813d7ef98bde8a612e1bf1a13cd70849ec + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:2bc5b3afc5de56da0f06eac60b65e86f6b861b16a63f48579fc0bac7d657e14c - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index 068f80c5..a463450c 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -138,7 +138,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:526a104a3342e36dad5c5e7f98c647da6b2a33897e458f772ff4afe523e0690a + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:bbf313b09740fb39b3343bc69ee94b2a2c21d16a9304f9b7c111c305558fc346 - name: kind value: task resolver: bundles @@ -159,7 +159,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:3f1b468066b301083d8550e036f5a654fcb064810bd29eb06fec6d8ad3e35b9c + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:1144353cf608f0a44a6416a70db6408727733ff40070d382158d6f6984096d8e - name: kind value: task resolver: bundles @@ -242,7 +242,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:650b0bca57c626c1e82f35cdfadf44a7792230b2b992aaa9c369d615aae6590d + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:5e59c05455619580f4383010726f7db8440ecf6959882e9053ac697dd6d277fd - name: kind value: task resolver: bundles @@ -299,7 +299,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:b0d6cb28a23f20db4f5cf78ed78ae3a91b9a5adfe989696ed0bbc63840a485b6 + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:36d44f2924f60da00a079a9ab7ce25ad8b2ad593c16d90509203c125ff0ccd46 - name: kind value: task resolver: bundles @@ -593,7 +593,7 @@ spec: - name: name value: push-dockerfile-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:49f778479f468e71c2cfef722e96aa813d7ef98bde8a612e1bf1a13cd70849ec + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:2bc5b3afc5de56da0f06eac60b65e86f6b861b16a63f48579fc0bac7d657e14c - name: kind value: task resolver: bundles From b34384fdad7fdca25ac9f87cb0c1eea18d581faf Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 3 Oct 2025 17:17:27 +0000 Subject: [PATCH 32/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index 097efff5..4014ab2d 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -162,7 +162,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:1144353cf608f0a44a6416a70db6408727733ff40070d382158d6f6984096d8e + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:0d80f66610efd1f957700f61dcd5080689321b10ad544e136d58fc4673290d1b - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index a463450c..638e8b1c 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -159,7 +159,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:1144353cf608f0a44a6416a70db6408727733ff40070d382158d6f6984096d8e + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:0d80f66610efd1f957700f61dcd5080689321b10ad544e136d58fc4673290d1b - name: kind value: task resolver: bundles From 057c6c9a83e955b7d5c612049afec5c07be7d947 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Sun, 5 Oct 2025 16:02:54 +0000 Subject: [PATCH 33/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index 4014ab2d..9d0be1a2 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -613,7 +613,7 @@ spec: - name: name value: rpms-signature-scan - name: bundle - value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:49ff6d117c3e9dc3966d1244e118e168b3501742ec14c3a4161a276ff48d04d5 + value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:06977232e67509e5540528ff6c3b081b23fc5bf3e40fb3e2d09a086d5c3243fc - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index 638e8b1c..e2321295 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -610,7 +610,7 @@ spec: - name: name value: rpms-signature-scan - name: bundle - value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:49ff6d117c3e9dc3966d1244e118e168b3501742ec14c3a4161a276ff48d04d5 + value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:06977232e67509e5540528ff6c3b081b23fc5bf3e40fb3e2d09a086d5c3243fc - name: kind value: task resolver: bundles From d168d4f752c5a076ebbc6633cf85043a28246bf3 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Mon, 6 Oct 2025 18:06:26 +0000 Subject: [PATCH 34/34] Red Hat Konflux update cert-manager-istio-csr-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-istio-csr-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-istio-csr-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml index 9d0be1a2..fef301d7 100644 --- a/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-pull-request.yaml @@ -162,7 +162,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:0d80f66610efd1f957700f61dcd5080689321b10ad544e136d58fc4673290d1b + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:f21c34e50500edc84e4889d85fd71a80d79182b16c044adc7f5ecda021c6dfc7 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-istio-csr-1-18-push.yaml b/.tekton/cert-manager-istio-csr-1-18-push.yaml index e2321295..3f397da8 100644 --- a/.tekton/cert-manager-istio-csr-1-18-push.yaml +++ b/.tekton/cert-manager-istio-csr-1-18-push.yaml @@ -159,7 +159,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:0d80f66610efd1f957700f61dcd5080689321b10ad544e136d58fc4673290d1b + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:f21c34e50500edc84e4889d85fd71a80d79182b16c044adc7f5ecda021c6dfc7 - name: kind value: task resolver: bundles