openshift-pipelines
diff --git a/‎head
Lines changed: 1 addition & 1 deletion b/‎head
Lines changed: 1 addition & 1 deletion
diff --git a/‎upstream/.github/dependabot.yml
Lines changed: 0 additions & 13 deletions b/‎upstream/.github/dependabot.yml
Lines changed: 0 additions & 13 deletions
diff --git a/‎upstream/.github/pull_request_template.md
Lines changed: 0 additions & 1 deletion b/‎upstream/.github/pull_request_template.md
Lines changed: 0 additions & 1 deletion
diff --git a/‎upstream/.github/workflows/ci.yaml
Lines changed: 0 additions & 110 deletions b/‎upstream/.github/workflows/ci.yaml
Lines changed: 0 additions & 110 deletions
diff --git a/‎upstream/.github/workflows/codeql-analysis.yml
Lines changed: 8 additions & 26 deletions b/‎upstream/.github/workflows/codeql-analysis.yml
Lines changed: 8 additions & 26 deletions
diff --git a/‎upstream/.github/workflows/dependency-review.yml
Lines changed: 0 additions & 29 deletions b/‎upstream/.github/workflows/dependency-review.yml
Lines changed: 0 additions & 29 deletions
diff --git a/‎upstream/.github/workflows/e2e-matrix.yml
Lines changed: 19 additions & 8 deletions b/‎upstream/.github/workflows/e2e-matrix.yml
Lines changed: 19 additions & 8 deletions
diff --git a/‎upstream/.github/workflows/scorecard.yml
Lines changed: 4 additions & 8 deletions b/‎upstream/.github/workflows/scorecard.yml
Lines changed: 4 additions & 8 deletions
diff --git a/‎upstream/.github/workflows/woke.yml
Lines changed: 2 additions & 6 deletions b/‎upstream/.github/workflows/woke.yml
Lines changed: 2 additions & 6 deletions
@@ -1 +1 @@
-579fe684ce5500480bf7561d27b7a3ac9bbc7c88
+5bd9a283f60317d54f953463c9268fef1f23a864
@@ -57,16 +57,3 @@ updates:
     - "dependencies"
     - "release-note-none"
     - "kind/misc"
-  - package-ecosystem: "docker"
-    directory: "/tekton"
-    schedule:
-      interval: "weekly"
-    labels:
-    - "ok-to-test"
-    - "dependencies"
-    - "release-note-none"
-    - "kind/misc"
-    groups:
-      all:
-        patterns:
-          - "*"
@@ -10,7 +10,6 @@ As the author of this PR, please check off the items in this checklist:
 
 - [ ] Has [Docs](https://github.com/tektoncd/community/blob/main/standards.md#docs) if any changes are user facing, including updates to minimum requirements e.g. Kubernetes version bumps
 - [ ] Has [Tests](https://github.com/tektoncd/community/blob/main/standards.md#tests) included if any functionality added or changed
-- [ ] [pre-commit](https://github.com/tektoncd/pipeline/blob/main/DEVELOPMENT.md#install-tools) Passed
 - [ ] Follows the [commit message standard](https://github.com/tektoncd/community/blob/main/standards.md#commits)
 - [ ] Meets the [Tekton contributor standards](https://github.com/tektoncd/community/blob/main/standards.md) (including functionality, content, code)
 - [ ] Has a kind label. You can add one by adding a comment on this PR that contains `/kind <type>`. Valid types are bug, cleanup, design, documentation, feature, flake, misc, question, tep
 
@@ -48,42 +48,23 @@ jobs:
         # Learn more about CodeQL language support at https://git.io/codeql-language-support
 
     steps:
-    - name: Harden Runner
-      uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
-      with:
-        egress-policy: audit
-
     - name: Checkout repository
-      uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
-    - name: Setup go
-      uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5
-      with:
-        go-version: '1.22.x'
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
+      uses: github/codeql-action/init@e5f05b81d5b6ff8cfa111c80c22c5fd02a384118 # v3.23.0
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
         # By default, queries listed here will override any specified in a config file.
         # Prefix the list here with "+" to use these queries and those in the config file.
         # queries: ./path/to/local/query, your-org/your-repo/queries@main
 
-    - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1
-      with:
-        path: |
-          ~/.cache/go-build
-          ~/.cache/pip
-          ~/go/pkg/mod
-        key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
-        restore-keys: |
-          ${{ runner.os }}-go-
-
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
-    # - name: Autobuild
-    #   uses: github/codeql-action/autobuild@1b1aada464948af03b950897e5eb522f92603cc2 # v3.24.9
+    - name: Autobuild
+      uses: github/codeql-action/autobuild@e5f05b81d5b6ff8cfa111c80c22c5fd02a384118 # v3.23.0
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 https://git.io/JvXDl
@@ -92,8 +73,9 @@ jobs:
     #    and modify them (or add more) to build your code if your project
     #    uses a compiled language
 
-    - run: |
-        make -j 4 all
+    #- run: |
+    #   make bootstrap
+    #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
+      uses: github/codeql-action/analyze@e5f05b81d5b6ff8cfa111c80c22c5fd02a384118 # v3.23.0
@@ -1,17 +1,14 @@
 name: Tekton Integration
 # Adapted from https://github.com/mattmoor/mink/blob/master/.github/workflows/minkind.yaml
 
-on: [workflow_call]
+on: [ pull_request ]
 
 defaults:
   run:
     shell: bash
 
 jobs:
   e2e-tests:
-    concurrency:
-      group: ${{ github.workflow }}-${{ matrix.k8s-name }}-${{ matrix.feature-flags }}-${{ github.event.pull_request.number || github.ref }}
-      cancel-in-progress: true
     name: e2e tests
     runs-on: ubuntu-latest
     strategy:
@@ -39,20 +36,33 @@ jobs:
         - feature-flags: beta
           env-file: prow-beta
     env:
+      GOPATH: ${{ github.workspace }}
+      GO111MODULE: on
       KO_DOCKER_REPO: registry.local:5000/tekton
       CLUSTER_DOMAIN: c${{ github.run_id }}.local
       ARTIFACTS: ${{ github.workspace }}/artifacts
 
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
-    - uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a  # v5.2.0
+    - name: Check out code onto GOPATH
+      uses: actions/checkout@v4
       with:
-        go-version-file: "go.mod"
-    - uses: ko-build/[email protected]
+        path: ${{ github.workspace }}/src/github.com/tektoncd/pipeline
+
+
+    - name: Set up Go 1.22
+      uses: actions/setup-go@v5
+      with:
+        go-version: 1.22.5
 
     - name: Install Dependencies
       working-directory: ./
       run: |
+        echo '::group:: install ko'
+        curl -L https://github.com/ko-build/ko/releases/download/v0.15.4/ko_0.15.4_Linux_x86_64.tar.gz | tar xzf - ko
+        chmod +x ./ko
+        sudo mv ko /usr/local/bin
+        echo '::endgroup::'
+
         echo '::group:: install go-junit-report'
         go install github.com/jstemmer/[email protected]
         echo '::endgroup::'
@@ -64,6 +74,7 @@ jobs:
         echo "${GOPATH}/bin" >> "$GITHUB_PATH"
 
     - name: Run tests
+      working-directory: ${{ github.workspace }}/src/github.com/tektoncd/pipeline
       run: |
         ./hack/setup-kind.sh \
           --registry-url $(echo ${KO_DOCKER_REPO} | cut -d'/' -f 1) \
 
@@ -28,17 +28,13 @@ jobs:
       id-token: write
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
-        with:
-          egress-policy: audit
       - name: "Checkout code"
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
+        uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1
         with:
           results_file: results.sarif
           results_format: sarif
@@ -53,14 +49,14 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+        uses: actions/upload-artifact@1eb3cb2b3e0f29609092a73eb033bb759a334595 # v4.1.0
         with:
           name: SARIF file
           path: results.sarif
           retention-days: 5
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
+        uses: github/codeql-action/upload-sarif@e5f05b81d5b6ff8cfa111c80c22c5fd02a384118 # v3.23.0
         with:
           sarif_file: results.sarif
@@ -10,16 +10,12 @@ jobs:
     name: 'woke'
     runs-on: ubuntu-latest
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
-        with:
-          egress-policy: audit
       - name: 'Checkout'
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Get changed files
         id: changed-files
-        uses: tj-actions/changed-files@c3a1bb2c992d77180ae65be6ae6c166cf40f857c # v45.0.3
+        uses: tj-actions/changed-files@62f4729b5df35e6e0e01265fa70a82ccaf196b4b # v41.1.1
         with:
           write_output_files: true
           files: |
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-579fe684ce5500480bf7561d27b7a3ac9bbc7c88`
	`1`	`+5bd9a283f60317d54f953463c9268fef1f23a864`