From 6dc353561f3d788cabad7386ea14b0ff63b58354 Mon Sep 17 00:00:00 2001 From: Ralph Bean Date: Thu, 18 Sep 2025 15:28:53 -0400 Subject: [PATCH] chore(KONFLUX-6210): fix and set name and cpe label for gitsign For https://issues.redhat.com/browse/KONFLUX-6210, clair needs access to a name and cpe label that it can use to look up the image in VEX statements. See also release-engineering/rhtap-ec-policy#149 Signed-off-by: Ralph Bean Assisted-by: Gemini --- Dockerfile.gitsign.rh | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Dockerfile.gitsign.rh b/Dockerfile.gitsign.rh index c842cbf4..f6bc8d0b 100644 --- a/Dockerfile.gitsign.rh +++ b/Dockerfile.gitsign.rh @@ -33,7 +33,8 @@ LABEL io.k8s.display-name="Gitsign container image for Red Hat Trusted Artifact LABEL io.openshift.tags="gitsign trusted-artifact-signer" LABEL summary="Provides the gitsign CLI binary for signing and verifying container images." LABEL com.redhat.component="gitsign" -LABEL name="gitsign" +LABEL name="rhtas/gitsign-rhel9" +LABEL cpe="cpe:/a:redhat:trusted_artifact_signer:1.2::el9" COPY --from=build-env /gitsign/gitsign_cli_darwin_amd64.gz /usr/local/bin/gitsign_cli_darwin_amd64.gz COPY --from=build-env /gitsign/gitsign_cli_linux_amd64.gz /usr/local/bin/gitsign_cli_linux_amd64.gz