[release-1.36] Sync Konflux configurations (#3372)

Co-authored-by: serverless-qe <[email protected]>

Author: serverless-qe

.tekton/docker-build.yaml

@@ -468,9 +468,9 @@ spec:
     taskRef:
       params:
       - name: name
-        value: sast-shell-check-oci-ta
+        value: sast-unicode-check-oci-ta
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:b00fa0294e6318ff8130ca11358ae0b3764c4e6c9a12ec7a953e1a813ca2e231
+        value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.1@sha256:3a128580c41abdac5bd76d0d1e066f2f3473278ba9fab90639878a27ced7a0e6
       - name: kind
         value: task
       resolver: bundles

.tekton/fbc-builder.yaml

@@ -321,6 +321,32 @@ spec:
       operator: in
       values:
       - "false"
+  - name: fbc-target-index-pruning-check
+    params:
+    - name: IMAGE_URL
+      value: $(tasks.build-image-index.results.IMAGE_URL)
+    - name: IMAGE_DIGEST
+      value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+    - name: TARGET_INDEX
+      value: registry.redhat.io/redhat/redhat-operator-index
+    - name: RENDERED_CATALOG_DIGEST
+      value: $(tasks.validate-fbc.results.RENDERED_CATALOG_DIGEST)
+    runAfter:
+    - validate-fbc
+    taskRef:
+      params:
+      - name: name
+        value: fbc-target-index-pruning-check
+      - name: bundle
+        value: quay.io/konflux-ci/tekton-catalog/task-fbc-target-index-pruning-check:0.1@sha256:299c44a5d6930f7a2c878f20853c705f155231cae36d9f37add4cdb7e75e2e12
+      - name: kind
+        value: task
+      resolver: bundles
+    when:
+    - input: $(params.skip-checks)
+      operator: in
+      values:
+      - "false"
   workspaces:
   - name: git-auth
     optional: true

.tekton/serverless-bundle-136-pull-request.yaml

@@ -8,7 +8,6 @@ metadata:
     build.appstudio.redhat.com/target_branch: '{{target_branch}}'
     pipelinesascode.tekton.dev/max-keep-runs: "3"
     pipelinesascode.tekton.dev/on-cel-expression: event == "pull_request" && target_branch == "main" && ( files.all.exists(x, x.matches('^olm-catalog/serverless-operator/')) || files.all.exists(x, x.matches('^.tekton/')) )
-    build.appstudio.openshift.io/build-nudge-files: ".*Dockerfile.*,olm-catalog/.*.yaml,olm-catalog/.*.yml,.*Containerfile.*"
   creationTimestamp: null
   labels:
     appstudio.openshift.io/application: serverless-operator-136

.tekton/serverless-bundle-136-push.yaml

@@ -7,7 +7,6 @@ metadata:
     build.appstudio.redhat.com/target_branch: '{{target_branch}}'
     pipelinesascode.tekton.dev/max-keep-runs: "3"
     pipelinesascode.tekton.dev/on-cel-expression: event == "push" && target_branch == "main" && ( files.all.exists(x, x.matches('^olm-catalog/serverless-operator/')) || files.all.exists(x, x.matches('^.tekton/')) )
-    build.appstudio.openshift.io/build-nudge-files: ".*Dockerfile.*,olm-catalog/.*.yaml,olm-catalog/.*.yml,.*Containerfile.*"
   creationTimestamp: null
   labels:
     appstudio.openshift.io/application: serverless-operator-136

.tekton/serverless-ingress-136-pull-request.yaml

@@ -8,7 +8,6 @@ metadata:
     build.appstudio.redhat.com/target_branch: '{{target_branch}}'
     pipelinesascode.tekton.dev/max-keep-runs: "3"
     pipelinesascode.tekton.dev/on-cel-expression: event == "pull_request" && target_branch == "main" && files.all.exists(x, !x.matches('^olm-catalog/') && !x.matches('^.konflux-release/'))
-    build.appstudio.openshift.io/build-nudge-files: ".*Dockerfile.*,olm-catalog/.*.yaml,olm-catalog/.*.yml,.*Containerfile.*"
   creationTimestamp: null
   labels:
     appstudio.openshift.io/application: serverless-operator-136

.tekton/serverless-ingress-136-push.yaml

@@ -7,7 +7,6 @@ metadata:
     build.appstudio.redhat.com/target_branch: '{{target_branch}}'
     pipelinesascode.tekton.dev/max-keep-runs: "3"
     pipelinesascode.tekton.dev/on-cel-expression: event == "push" && target_branch == "main" && files.all.exists(x, !x.matches('^olm-catalog/') && !x.matches('^.konflux-release/'))
-    build.appstudio.openshift.io/build-nudge-files: ".*Dockerfile.*,olm-catalog/.*.yaml,olm-catalog/.*.yml,.*Containerfile.*"
   creationTimestamp: null
   labels:
     appstudio.openshift.io/application: serverless-operator-136

.tekton/serverless-kn-operator-136-pull-request.yaml

@@ -8,7 +8,6 @@ metadata:
     build.appstudio.redhat.com/target_branch: '{{target_branch}}'
     pipelinesascode.tekton.dev/max-keep-runs: "3"
     pipelinesascode.tekton.dev/on-cel-expression: event == "pull_request" && target_branch == "main" && files.all.exists(x, !x.matches('^olm-catalog/') && !x.matches('^.konflux-release/'))
-    build.appstudio.openshift.io/build-nudge-files: ".*Dockerfile.*,olm-catalog/.*.yaml,olm-catalog/.*.yml,.*Containerfile.*"
   creationTimestamp: null
   labels:
     appstudio.openshift.io/application: serverless-operator-136

.tekton/serverless-kn-operator-136-push.yaml

@@ -7,7 +7,6 @@ metadata:
     build.appstudio.redhat.com/target_branch: '{{target_branch}}'
     pipelinesascode.tekton.dev/max-keep-runs: "3"
     pipelinesascode.tekton.dev/on-cel-expression: event == "push" && target_branch == "main" && files.all.exists(x, !x.matches('^olm-catalog/') && !x.matches('^.konflux-release/'))
-    build.appstudio.openshift.io/build-nudge-files: ".*Dockerfile.*,olm-catalog/.*.yaml,olm-catalog/.*.yml,.*Containerfile.*"
   creationTimestamp: null
   labels:
     appstudio.openshift.io/application: serverless-operator-136

.tekton/serverless-metadata-webhook-136-pull-request.yaml

@@ -8,7 +8,6 @@ metadata:
     build.appstudio.redhat.com/target_branch: '{{target_branch}}'
     pipelinesascode.tekton.dev/max-keep-runs: "3"
     pipelinesascode.tekton.dev/on-cel-expression: event == "pull_request" && target_branch == "main" && files.all.exists(x, !x.matches('^olm-catalog/') && !x.matches('^.konflux-release/'))
-    build.appstudio.openshift.io/build-nudge-files: ".*Dockerfile.*,olm-catalog/.*.yaml,olm-catalog/.*.yml,.*Containerfile.*"
   creationTimestamp: null
   labels:
     appstudio.openshift.io/application: serverless-operator-136

.tekton/serverless-metadata-webhook-136-push.yaml

@@ -7,7 +7,6 @@ metadata:
     build.appstudio.redhat.com/target_branch: '{{target_branch}}'
     pipelinesascode.tekton.dev/max-keep-runs: "3"
     pipelinesascode.tekton.dev/on-cel-expression: event == "push" && target_branch == "main" && files.all.exists(x, !x.matches('^olm-catalog/') && !x.matches('^.konflux-release/'))
-    build.appstudio.openshift.io/build-nudge-files: ".*Dockerfile.*,olm-catalog/.*.yaml,olm-catalog/.*.yml,.*Containerfile.*"
   creationTimestamp: null
   labels:
     appstudio.openshift.io/application: serverless-operator-136