From af49d4850ba678fc6c9fbc84443faec133c93244 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Wed, 23 Jul 2025 08:14:27 +0000
Subject: [PATCH 01/65] Red Hat Konflux update cert-manager-operator-1-17
 Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>

---
 ...rt-manager-operator-1-17-pull-request.yaml | 594 +++++++++++++++++-
 .tekton/cert-manager-operator-1-17-push.yaml  | 594 +++++++++++++++++-
 2 files changed, 1170 insertions(+), 18 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 8ae259a1..cc073204 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -9,8 +9,7 @@ metadata:
     pipelinesascode.tekton.dev/cancel-in-progress: "true"
     pipelinesascode.tekton.dev/max-keep-runs: "3"
     pipelinesascode.tekton.dev/on-cel-expression: event == "pull_request" && target_branch
-      == "release-1.17" && (".tekton/cert-manager-operator-1-17-pull-request.yaml".pathChanged() ||
-      "Containerfile.cert-manager-operator".pathChanged() || "cert-manager-operator/***".pathChanged())
+      == "release-1.17"
   creationTimestamp: null
   labels:
     appstudio.openshift.io/application: cert-manager-operator-1-17
@@ -28,17 +27,594 @@ spec:
     value: quay.io/redhat-user-workloads/cert-manager-oape-tenant/cert-manager-operator-1-17/cert-manager-operator-1-17:on-pr-{{revision}}
   - name: image-expires-after
     value: 5d
+  - name: build-platforms
+    value:
+    - linux/x86_64
   - name: dockerfile
     value: Containerfile.cert-manager-operator
   - name: path-context
     value: .
-  - name: build-args
-    value:
-    - RELEASE_VERSION=v1.17.0
-    - COMMIT_SHA={{revision}}
-    - SOURCE_URL={{source_url}}
-  pipelineRef:
-    name: multi-arch-build-pipeline
+  pipelineSpec:
+    description: |
+      This pipeline is ideal for building multi-arch container images from a Containerfile while maintaining trust after pipeline customization.
+
+      _Uses `buildah` to create a multi-platform container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. This pipeline requires that the [multi platform controller](https://github.com/konflux-ci/multi-platform-controller) is deployed and configured on your Konflux instance. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.
+      This pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-multi-platform-oci-ta?tab=tags)_
+    finally:
+    - name: show-sbom
+      params:
+      - name: IMAGE_URL
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      taskRef:
+        params:
+        - name: name
+          value: show-sbom
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-show-sbom:0.1@sha256:86c069cac0a669797e8049faa8aa4088e70ff7fcd579d5bdc37626a9e0488a05
+        - name: kind
+          value: task
+        resolver: bundles
+    params:
+    - description: Source Repository URL
+      name: git-url
+      type: string
+    - default: ""
+      description: Revision of the Source Repository
+      name: revision
+      type: string
+    - description: Fully Qualified Output Image
+      name: output-image
+      type: string
+    - default: .
+      description: Path to the source code of an application's component from where
+        to build image.
+      name: path-context
+      type: string
+    - default: Dockerfile
+      description: Path to the Dockerfile inside the context specified by parameter
+        path-context
+      name: dockerfile
+      type: string
+    - default: "false"
+      description: Force rebuild image
+      name: rebuild
+      type: string
+    - default: "false"
+      description: Skip checks against built image
+      name: skip-checks
+      type: string
+    - default: "false"
+      description: Execute the build with network isolation
+      name: hermetic
+      type: string
+    - default: ""
+      description: Build dependencies to be prefetched by Cachi2
+      name: prefetch-input
+      type: string
+    - default: ""
+      description: Image tag expiration time, time values could be something like
+        1h, 2d, 3w for hours, days, and weeks, respectively.
+      name: image-expires-after
+      type: string
+    - default: "false"
+      description: Build a source image.
+      name: build-source-image
+      type: string
+    - default: "true"
+      description: Add built image into an OCI image index
+      name: build-image-index
+      type: string
+    - default: []
+      description: Array of --build-arg values ("arg=value" strings) for buildah
+      name: build-args
+      type: array
+    - default: ""
+      description: Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file
+      name: build-args-file
+      type: string
+    - default: "false"
+      description: Whether to enable privileged mode, should be used only with remote
+        VMs
+      name: privileged-nested
+      type: string
+    - default:
+      - linux/x86_64
+      description: List of platforms to build the container images on. The available
+        set of values is determined by the configuration of the multi-platform-controller.
+      name: build-platforms
+      type: array
+    results:
+    - description: ""
+      name: IMAGE_URL
+      value: $(tasks.build-image-index.results.IMAGE_URL)
+    - description: ""
+      name: IMAGE_DIGEST
+      value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+    - description: ""
+      name: CHAINS-GIT_URL
+      value: $(tasks.clone-repository.results.url)
+    - description: ""
+      name: CHAINS-GIT_COMMIT
+      value: $(tasks.clone-repository.results.commit)
+    tasks:
+    - name: init
+      params:
+      - name: image-url
+        value: $(params.output-image)
+      - name: rebuild
+        value: $(params.rebuild)
+      - name: skip-checks
+        value: $(params.skip-checks)
+      taskRef:
+        params:
+        - name: name
+          value: init
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:1d8221c84f91b923d89de50bf16481ea729e3b68ea04a9a7cbe8485ddbb27ee6
+        - name: kind
+          value: task
+        resolver: bundles
+    - name: clone-repository
+      params:
+      - name: url
+        value: $(params.git-url)
+      - name: revision
+        value: $(params.revision)
+      - name: ociStorage
+        value: $(params.output-image).git
+      - name: ociArtifactExpiresAfter
+        value: $(params.image-expires-after)
+      runAfter:
+      - init
+      taskRef:
+        params:
+        - name: name
+          value: git-clone-oci-ta
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:d35e5d501cb5f5f88369511f76249857cb5ac30250e1dcf086939321964ff6b9
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(tasks.init.results.build)
+        operator: in
+        values:
+        - "true"
+      workspaces:
+      - name: basic-auth
+        workspace: git-auth
+    - name: prefetch-dependencies
+      params:
+      - name: input
+        value: $(params.prefetch-input)
+      - name: SOURCE_ARTIFACT
+        value: $(tasks.clone-repository.results.SOURCE_ARTIFACT)
+      - name: ociStorage
+        value: $(params.output-image).prefetch
+      - name: ociArtifactExpiresAfter
+        value: $(params.image-expires-after)
+      runAfter:
+      - clone-repository
+      taskRef:
+        params:
+        - name: name
+          value: prefetch-dependencies-oci-ta
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:092491ac0f6e1009d10c58a1319d1029371bf637cc1293cceba53c6da5314ed1
+        - name: kind
+          value: task
+        resolver: bundles
+      workspaces:
+      - name: git-basic-auth
+        workspace: git-auth
+      - name: netrc
+        workspace: netrc
+    - matrix:
+        params:
+        - name: PLATFORM
+          value:
+          - $(params.build-platforms)
+      name: build-images
+      params:
+      - name: IMAGE
+        value: $(params.output-image)
+      - name: DOCKERFILE
+        value: $(params.dockerfile)
+      - name: CONTEXT
+        value: $(params.path-context)
+      - name: HERMETIC
+        value: $(params.hermetic)
+      - name: PREFETCH_INPUT
+        value: $(params.prefetch-input)
+      - name: IMAGE_EXPIRES_AFTER
+        value: $(params.image-expires-after)
+      - name: COMMIT_SHA
+        value: $(tasks.clone-repository.results.commit)
+      - name: BUILD_ARGS
+        value:
+        - $(params.build-args[*])
+      - name: BUILD_ARGS_FILE
+        value: $(params.build-args-file)
+      - name: PRIVILEGED_NESTED
+        value: $(params.privileged-nested)
+      - name: SOURCE_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
+      - name: CACHI2_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
+      - name: IMAGE_APPEND_PLATFORM
+        value: "true"
+      runAfter:
+      - prefetch-dependencies
+      taskRef:
+        params:
+        - name: name
+          value: buildah-remote-oci-ta
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:9e866d4d0489a6ab84ae263db416c9f86d2d6117ef4444f495a0e97388ae3ac0
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(tasks.init.results.build)
+        operator: in
+        values:
+        - "true"
+    - name: build-image-index
+      params:
+      - name: IMAGE
+        value: $(params.output-image)
+      - name: COMMIT_SHA
+        value: $(tasks.clone-repository.results.commit)
+      - name: IMAGE_EXPIRES_AFTER
+        value: $(params.image-expires-after)
+      - name: ALWAYS_BUILD_INDEX
+        value: $(params.build-image-index)
+      - name: IMAGES
+        value:
+        - $(tasks.build-images.results.IMAGE_REF[*])
+      runAfter:
+      - build-images
+      taskRef:
+        params:
+        - name: name
+          value: build-image-index
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:3499772af90aad0d3935629be6d37dd9292195fb629e6f43ec839c7f545a0faa
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(tasks.init.results.build)
+        operator: in
+        values:
+        - "true"
+    - name: build-source-image
+      params:
+      - name: BINARY_IMAGE
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      - name: BINARY_IMAGE_DIGEST
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+      - name: SOURCE_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
+      - name: CACHI2_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: source-build-oci-ta
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:b1eb49583b41872b27356fee20d5f0eb6ff7f5cdeacde7ffb39655f031104728
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(tasks.init.results.build)
+        operator: in
+        values:
+        - "true"
+      - input: $(params.build-source-image)
+        operator: in
+        values:
+        - "true"
+    - name: deprecated-base-image-check
+      params:
+      - name: IMAGE_URL
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      - name: IMAGE_DIGEST
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: deprecated-image-check
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3c8b81fa868e27c6266e7660a4bfb4c822846dcf4304606e71e20893b0d3e515
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(params.skip-checks)
+        operator: in
+        values:
+        - "false"
+    - name: clair-scan
+      params:
+      - name: image-digest
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+      - name: image-url
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: clair-scan
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:417f44117f8d87a4a62fea6589b5746612ac61640b454dbd88f74892380411f2
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(params.skip-checks)
+        operator: in
+        values:
+        - "false"
+    - name: ecosystem-cert-preflight-checks
+      params:
+      - name: image-url
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: ecosystem-cert-preflight-checks
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:f99d2bdb02f13223d494077a2cde31418d09369f33c02134a8e7e5fad2f61eda
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(params.skip-checks)
+        operator: in
+        values:
+        - "false"
+    - name: sast-snyk-check
+      params:
+      - name: image-digest
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+      - name: image-url
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      - name: SOURCE_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
+      - name: CACHI2_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: sast-snyk-check-oci-ta
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:fe5e5ba3a72632cd505910de2eacd62c9d11ed570c325173188f8d568ac60771
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(params.skip-checks)
+        operator: in
+        values:
+        - "false"
+    - name: clamav-scan
+      params:
+      - name: image-digest
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+      - name: image-url
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: clamav-scan
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.2@sha256:7749146f7e4fe530846f1b15c9366178ec9f44776ef1922a60d3e7e2b8c6426b
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(params.skip-checks)
+        operator: in
+        values:
+        - "false"
+    - name: sast-coverity-check
+      params:
+      - name: image-digest
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+      - name: image-url
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      - name: IMAGE
+        value: $(params.output-image)
+      - name: DOCKERFILE
+        value: $(params.dockerfile)
+      - name: CONTEXT
+        value: $(params.path-context)
+      - name: HERMETIC
+        value: $(params.hermetic)
+      - name: PREFETCH_INPUT
+        value: $(params.prefetch-input)
+      - name: IMAGE_EXPIRES_AFTER
+        value: $(params.image-expires-after)
+      - name: COMMIT_SHA
+        value: $(tasks.clone-repository.results.commit)
+      - name: BUILD_ARGS
+        value:
+        - $(params.build-args[*])
+      - name: BUILD_ARGS_FILE
+        value: $(params.build-args-file)
+      - name: SOURCE_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
+      - name: CACHI2_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
+      runAfter:
+      - coverity-availability-check
+      taskRef:
+        params:
+        - name: name
+          value: sast-coverity-check-oci-ta
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:f9ca942208dc2e63b479384ccc56a611cc793397ecc837637b5b9f89c2ecbefe
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(params.skip-checks)
+        operator: in
+        values:
+        - "false"
+      - input: $(tasks.coverity-availability-check.results.STATUS)
+        operator: in
+        values:
+        - success
+    - name: coverity-availability-check
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: coverity-availability-check
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check:0.2@sha256:db2b267dc15e4ed17f704ee91b8e9b38068e1a35b1018a328fdca621819d74c6
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(params.skip-checks)
+        operator: in
+        values:
+        - "false"
+    - name: sast-shell-check
+      params:
+      - name: image-digest
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+      - name: image-url
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      - name: SOURCE_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
+      - name: CACHI2_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: sast-shell-check-oci-ta
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:bf7bdde00b7212f730c1356672290af6f38d070da2c8a316987b5c32fd49e0b9
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(params.skip-checks)
+        operator: in
+        values:
+        - "false"
+    - name: sast-unicode-check
+      params:
+      - name: image-digest
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+      - name: image-url
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      - name: SOURCE_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
+      - name: CACHI2_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: sast-unicode-check-oci-ta
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.2@sha256:3f99dc4634a62e1530324cd565d12323ca82be3cfa8a031a36b210becfa7b552
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(params.skip-checks)
+        operator: in
+        values:
+        - "false"
+    - name: apply-tags
+      params:
+      - name: IMAGE_URL
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      - name: IMAGE_DIGEST
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: apply-tags
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:517a51e260c0b59654a9d7b842e1ab07d76bce15ca7ce9c8fd2489a19be6463d
+        - name: kind
+          value: task
+        resolver: bundles
+    - name: push-dockerfile
+      params:
+      - name: IMAGE
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      - name: IMAGE_DIGEST
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+      - name: DOCKERFILE
+        value: $(params.dockerfile)
+      - name: CONTEXT
+        value: $(params.path-context)
+      - name: SOURCE_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: push-dockerfile-oci-ta
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:8c75c4a747e635e5f3e12266a3bb6e5d3132bf54e37eaa53d505f89897dd8eca
+        - name: kind
+          value: task
+        resolver: bundles
+    - name: rpms-signature-scan
+      params:
+      - name: image-url
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      - name: image-digest
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: rpms-signature-scan
+        - name: bundle
+          value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:7d1c087d7d33dd97effb3b4c9f3788e4c3138da2032040d69da6929e9a3aaceb
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(params.skip-checks)
+        operator: in
+        values:
+        - "false"
+    workspaces:
+    - name: git-auth
+      optional: true
+    - name: netrc
+      optional: true
   taskRunTemplate:
     serviceAccountName: build-pipeline-cert-manager-operator-1-17
   workspaces:
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index f2ccc4e5..fdbbc233 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -8,8 +8,7 @@ metadata:
     pipelinesascode.tekton.dev/cancel-in-progress: "false"
     pipelinesascode.tekton.dev/max-keep-runs: "3"
     pipelinesascode.tekton.dev/on-cel-expression: event == "push" && target_branch
-      == "release-1.17" && (".tekton/cert-manager-operator-1-17-push.yaml".pathChanged() ||
-      "Containerfile.cert-manager-operator".pathChanged() || "cert-manager-operator/***".pathChanged())
+      == "release-1.17"
   creationTimestamp: null
   labels:
     appstudio.openshift.io/application: cert-manager-operator-1-17
@@ -25,17 +24,594 @@ spec:
     value: '{{revision}}'
   - name: output-image
     value: quay.io/redhat-user-workloads/cert-manager-oape-tenant/cert-manager-operator-1-17/cert-manager-operator-1-17:{{revision}}
+  - name: build-platforms
+    value:
+    - linux/x86_64
   - name: dockerfile
     value: Containerfile.cert-manager-operator
   - name: path-context
     value: .
-  - name: build-args
-    value:
-    - RELEASE_VERSION=v1.17.0
-    - COMMIT_SHA={{revision}}
-    - SOURCE_URL={{source_url}}
-  pipelineRef:
-    name: multi-arch-build-pipeline
+  pipelineSpec:
+    description: |
+      This pipeline is ideal for building multi-arch container images from a Containerfile while maintaining trust after pipeline customization.
+
+      _Uses `buildah` to create a multi-platform container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. This pipeline requires that the [multi platform controller](https://github.com/konflux-ci/multi-platform-controller) is deployed and configured on your Konflux instance. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.
+      This pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-multi-platform-oci-ta?tab=tags)_
+    finally:
+    - name: show-sbom
+      params:
+      - name: IMAGE_URL
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      taskRef:
+        params:
+        - name: name
+          value: show-sbom
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-show-sbom:0.1@sha256:86c069cac0a669797e8049faa8aa4088e70ff7fcd579d5bdc37626a9e0488a05
+        - name: kind
+          value: task
+        resolver: bundles
+    params:
+    - description: Source Repository URL
+      name: git-url
+      type: string
+    - default: ""
+      description: Revision of the Source Repository
+      name: revision
+      type: string
+    - description: Fully Qualified Output Image
+      name: output-image
+      type: string
+    - default: .
+      description: Path to the source code of an application's component from where
+        to build image.
+      name: path-context
+      type: string
+    - default: Dockerfile
+      description: Path to the Dockerfile inside the context specified by parameter
+        path-context
+      name: dockerfile
+      type: string
+    - default: "false"
+      description: Force rebuild image
+      name: rebuild
+      type: string
+    - default: "false"
+      description: Skip checks against built image
+      name: skip-checks
+      type: string
+    - default: "false"
+      description: Execute the build with network isolation
+      name: hermetic
+      type: string
+    - default: ""
+      description: Build dependencies to be prefetched by Cachi2
+      name: prefetch-input
+      type: string
+    - default: ""
+      description: Image tag expiration time, time values could be something like
+        1h, 2d, 3w for hours, days, and weeks, respectively.
+      name: image-expires-after
+      type: string
+    - default: "false"
+      description: Build a source image.
+      name: build-source-image
+      type: string
+    - default: "true"
+      description: Add built image into an OCI image index
+      name: build-image-index
+      type: string
+    - default: []
+      description: Array of --build-arg values ("arg=value" strings) for buildah
+      name: build-args
+      type: array
+    - default: ""
+      description: Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file
+      name: build-args-file
+      type: string
+    - default: "false"
+      description: Whether to enable privileged mode, should be used only with remote
+        VMs
+      name: privileged-nested
+      type: string
+    - default:
+      - linux/x86_64
+      description: List of platforms to build the container images on. The available
+        set of values is determined by the configuration of the multi-platform-controller.
+      name: build-platforms
+      type: array
+    results:
+    - description: ""
+      name: IMAGE_URL
+      value: $(tasks.build-image-index.results.IMAGE_URL)
+    - description: ""
+      name: IMAGE_DIGEST
+      value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+    - description: ""
+      name: CHAINS-GIT_URL
+      value: $(tasks.clone-repository.results.url)
+    - description: ""
+      name: CHAINS-GIT_COMMIT
+      value: $(tasks.clone-repository.results.commit)
+    tasks:
+    - name: init
+      params:
+      - name: image-url
+        value: $(params.output-image)
+      - name: rebuild
+        value: $(params.rebuild)
+      - name: skip-checks
+        value: $(params.skip-checks)
+      taskRef:
+        params:
+        - name: name
+          value: init
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:1d8221c84f91b923d89de50bf16481ea729e3b68ea04a9a7cbe8485ddbb27ee6
+        - name: kind
+          value: task
+        resolver: bundles
+    - name: clone-repository
+      params:
+      - name: url
+        value: $(params.git-url)
+      - name: revision
+        value: $(params.revision)
+      - name: ociStorage
+        value: $(params.output-image).git
+      - name: ociArtifactExpiresAfter
+        value: $(params.image-expires-after)
+      runAfter:
+      - init
+      taskRef:
+        params:
+        - name: name
+          value: git-clone-oci-ta
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:d35e5d501cb5f5f88369511f76249857cb5ac30250e1dcf086939321964ff6b9
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(tasks.init.results.build)
+        operator: in
+        values:
+        - "true"
+      workspaces:
+      - name: basic-auth
+        workspace: git-auth
+    - name: prefetch-dependencies
+      params:
+      - name: input
+        value: $(params.prefetch-input)
+      - name: SOURCE_ARTIFACT
+        value: $(tasks.clone-repository.results.SOURCE_ARTIFACT)
+      - name: ociStorage
+        value: $(params.output-image).prefetch
+      - name: ociArtifactExpiresAfter
+        value: $(params.image-expires-after)
+      runAfter:
+      - clone-repository
+      taskRef:
+        params:
+        - name: name
+          value: prefetch-dependencies-oci-ta
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:092491ac0f6e1009d10c58a1319d1029371bf637cc1293cceba53c6da5314ed1
+        - name: kind
+          value: task
+        resolver: bundles
+      workspaces:
+      - name: git-basic-auth
+        workspace: git-auth
+      - name: netrc
+        workspace: netrc
+    - matrix:
+        params:
+        - name: PLATFORM
+          value:
+          - $(params.build-platforms)
+      name: build-images
+      params:
+      - name: IMAGE
+        value: $(params.output-image)
+      - name: DOCKERFILE
+        value: $(params.dockerfile)
+      - name: CONTEXT
+        value: $(params.path-context)
+      - name: HERMETIC
+        value: $(params.hermetic)
+      - name: PREFETCH_INPUT
+        value: $(params.prefetch-input)
+      - name: IMAGE_EXPIRES_AFTER
+        value: $(params.image-expires-after)
+      - name: COMMIT_SHA
+        value: $(tasks.clone-repository.results.commit)
+      - name: BUILD_ARGS
+        value:
+        - $(params.build-args[*])
+      - name: BUILD_ARGS_FILE
+        value: $(params.build-args-file)
+      - name: PRIVILEGED_NESTED
+        value: $(params.privileged-nested)
+      - name: SOURCE_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
+      - name: CACHI2_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
+      - name: IMAGE_APPEND_PLATFORM
+        value: "true"
+      runAfter:
+      - prefetch-dependencies
+      taskRef:
+        params:
+        - name: name
+          value: buildah-remote-oci-ta
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:9e866d4d0489a6ab84ae263db416c9f86d2d6117ef4444f495a0e97388ae3ac0
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(tasks.init.results.build)
+        operator: in
+        values:
+        - "true"
+    - name: build-image-index
+      params:
+      - name: IMAGE
+        value: $(params.output-image)
+      - name: COMMIT_SHA
+        value: $(tasks.clone-repository.results.commit)
+      - name: IMAGE_EXPIRES_AFTER
+        value: $(params.image-expires-after)
+      - name: ALWAYS_BUILD_INDEX
+        value: $(params.build-image-index)
+      - name: IMAGES
+        value:
+        - $(tasks.build-images.results.IMAGE_REF[*])
+      runAfter:
+      - build-images
+      taskRef:
+        params:
+        - name: name
+          value: build-image-index
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:3499772af90aad0d3935629be6d37dd9292195fb629e6f43ec839c7f545a0faa
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(tasks.init.results.build)
+        operator: in
+        values:
+        - "true"
+    - name: build-source-image
+      params:
+      - name: BINARY_IMAGE
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      - name: BINARY_IMAGE_DIGEST
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+      - name: SOURCE_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
+      - name: CACHI2_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: source-build-oci-ta
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:b1eb49583b41872b27356fee20d5f0eb6ff7f5cdeacde7ffb39655f031104728
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(tasks.init.results.build)
+        operator: in
+        values:
+        - "true"
+      - input: $(params.build-source-image)
+        operator: in
+        values:
+        - "true"
+    - name: deprecated-base-image-check
+      params:
+      - name: IMAGE_URL
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      - name: IMAGE_DIGEST
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: deprecated-image-check
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3c8b81fa868e27c6266e7660a4bfb4c822846dcf4304606e71e20893b0d3e515
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(params.skip-checks)
+        operator: in
+        values:
+        - "false"
+    - name: clair-scan
+      params:
+      - name: image-digest
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+      - name: image-url
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: clair-scan
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:417f44117f8d87a4a62fea6589b5746612ac61640b454dbd88f74892380411f2
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(params.skip-checks)
+        operator: in
+        values:
+        - "false"
+    - name: ecosystem-cert-preflight-checks
+      params:
+      - name: image-url
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: ecosystem-cert-preflight-checks
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:f99d2bdb02f13223d494077a2cde31418d09369f33c02134a8e7e5fad2f61eda
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(params.skip-checks)
+        operator: in
+        values:
+        - "false"
+    - name: sast-snyk-check
+      params:
+      - name: image-digest
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+      - name: image-url
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      - name: SOURCE_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
+      - name: CACHI2_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: sast-snyk-check-oci-ta
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:fe5e5ba3a72632cd505910de2eacd62c9d11ed570c325173188f8d568ac60771
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(params.skip-checks)
+        operator: in
+        values:
+        - "false"
+    - name: clamav-scan
+      params:
+      - name: image-digest
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+      - name: image-url
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: clamav-scan
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.2@sha256:7749146f7e4fe530846f1b15c9366178ec9f44776ef1922a60d3e7e2b8c6426b
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(params.skip-checks)
+        operator: in
+        values:
+        - "false"
+    - name: sast-coverity-check
+      params:
+      - name: image-digest
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+      - name: image-url
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      - name: IMAGE
+        value: $(params.output-image)
+      - name: DOCKERFILE
+        value: $(params.dockerfile)
+      - name: CONTEXT
+        value: $(params.path-context)
+      - name: HERMETIC
+        value: $(params.hermetic)
+      - name: PREFETCH_INPUT
+        value: $(params.prefetch-input)
+      - name: IMAGE_EXPIRES_AFTER
+        value: $(params.image-expires-after)
+      - name: COMMIT_SHA
+        value: $(tasks.clone-repository.results.commit)
+      - name: BUILD_ARGS
+        value:
+        - $(params.build-args[*])
+      - name: BUILD_ARGS_FILE
+        value: $(params.build-args-file)
+      - name: SOURCE_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
+      - name: CACHI2_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
+      runAfter:
+      - coverity-availability-check
+      taskRef:
+        params:
+        - name: name
+          value: sast-coverity-check-oci-ta
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:f9ca942208dc2e63b479384ccc56a611cc793397ecc837637b5b9f89c2ecbefe
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(params.skip-checks)
+        operator: in
+        values:
+        - "false"
+      - input: $(tasks.coverity-availability-check.results.STATUS)
+        operator: in
+        values:
+        - success
+    - name: coverity-availability-check
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: coverity-availability-check
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check:0.2@sha256:db2b267dc15e4ed17f704ee91b8e9b38068e1a35b1018a328fdca621819d74c6
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(params.skip-checks)
+        operator: in
+        values:
+        - "false"
+    - name: sast-shell-check
+      params:
+      - name: image-digest
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+      - name: image-url
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      - name: SOURCE_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
+      - name: CACHI2_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: sast-shell-check-oci-ta
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:bf7bdde00b7212f730c1356672290af6f38d070da2c8a316987b5c32fd49e0b9
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(params.skip-checks)
+        operator: in
+        values:
+        - "false"
+    - name: sast-unicode-check
+      params:
+      - name: image-digest
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+      - name: image-url
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      - name: SOURCE_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
+      - name: CACHI2_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: sast-unicode-check-oci-ta
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.2@sha256:3f99dc4634a62e1530324cd565d12323ca82be3cfa8a031a36b210becfa7b552
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(params.skip-checks)
+        operator: in
+        values:
+        - "false"
+    - name: apply-tags
+      params:
+      - name: IMAGE_URL
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      - name: IMAGE_DIGEST
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: apply-tags
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:517a51e260c0b59654a9d7b842e1ab07d76bce15ca7ce9c8fd2489a19be6463d
+        - name: kind
+          value: task
+        resolver: bundles
+    - name: push-dockerfile
+      params:
+      - name: IMAGE
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      - name: IMAGE_DIGEST
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+      - name: DOCKERFILE
+        value: $(params.dockerfile)
+      - name: CONTEXT
+        value: $(params.path-context)
+      - name: SOURCE_ARTIFACT
+        value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: push-dockerfile-oci-ta
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:8c75c4a747e635e5f3e12266a3bb6e5d3132bf54e37eaa53d505f89897dd8eca
+        - name: kind
+          value: task
+        resolver: bundles
+    - name: rpms-signature-scan
+      params:
+      - name: image-url
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      - name: image-digest
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+      runAfter:
+      - build-image-index
+      taskRef:
+        params:
+        - name: name
+          value: rpms-signature-scan
+        - name: bundle
+          value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:7d1c087d7d33dd97effb3b4c9f3788e4c3138da2032040d69da6929e9a3aaceb
+        - name: kind
+          value: task
+        resolver: bundles
+      when:
+      - input: $(params.skip-checks)
+        operator: in
+        values:
+        - "false"
+    workspaces:
+    - name: git-auth
+      optional: true
+    - name: netrc
+      optional: true
   taskRunTemplate:
     serviceAccountName: build-pipeline-cert-manager-operator-1-17
   workspaces:

From cbabb902c23c66f931133e356eebc940ec230557 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Mon, 28 Jul 2025 14:03:29 +0000
Subject: [PATCH 02/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 ...rt-manager-operator-1-17-pull-request.yaml | 31 +++++++++++--------
 .tekton/cert-manager-operator-1-17-push.yaml  | 31 +++++++++++--------
 2 files changed, 36 insertions(+), 26 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index cc073204..340a9b0f 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -50,7 +50,7 @@ spec:
         - name: name
           value: show-sbom
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-show-sbom:0.1@sha256:86c069cac0a669797e8049faa8aa4088e70ff7fcd579d5bdc37626a9e0488a05
+          value: quay.io/konflux-ci/tekton-catalog/task-show-sbom:0.1@sha256:beb0616db051952b4b861dd8c3e00fa1c0eccbd926feddf71194d3bb3ace9ce7
         - name: kind
           value: task
         resolver: bundles
@@ -150,7 +150,7 @@ spec:
         - name: name
           value: init
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:1d8221c84f91b923d89de50bf16481ea729e3b68ea04a9a7cbe8485ddbb27ee6
+          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:08e18a4dc5f947c1d20e8353a19d013144bea87b72f67236b165dd4778523951
         - name: kind
           value: task
         resolver: bundles
@@ -171,7 +171,7 @@ spec:
         - name: name
           value: git-clone-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:d35e5d501cb5f5f88369511f76249857cb5ac30250e1dcf086939321964ff6b9
+          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:be82c55346e8810bd1edc5547f864064da6945979baccca7dfc99990b392a02b
         - name: kind
           value: task
         resolver: bundles
@@ -200,7 +200,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:092491ac0f6e1009d10c58a1319d1029371bf637cc1293cceba53c6da5314ed1
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:125aea525bcdb31ff86cb37d56e3d8369587ead48da3bc454d4344682724ca54
         - name: kind
           value: task
         resolver: bundles
@@ -250,7 +250,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:9e866d4d0489a6ab84ae263db416c9f86d2d6117ef4444f495a0e97388ae3ac0
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:1ed04fe149488b2ea63347f2adfaa3eeb4062e594dc266358a705597dd304d7e
         - name: kind
           value: task
         resolver: bundles
@@ -279,7 +279,7 @@ spec:
         - name: name
           value: build-image-index
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:3499772af90aad0d3935629be6d37dd9292195fb629e6f43ec839c7f545a0faa
+          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:72f77a8c62f9d6f69ab5c35170839e4b190026e6cc3d7d4ceafa7033fc30ad7b
         - name: kind
           value: task
         resolver: bundles
@@ -305,7 +305,7 @@ spec:
         - name: name
           value: source-build-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:b1eb49583b41872b27356fee20d5f0eb6ff7f5cdeacde7ffb39655f031104728
+          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:bfec1fabb0ed7c191e6c85d75e6cc577a04cabe9e6b35f9476529e8e5b3c0c82
         - name: kind
           value: task
         resolver: bundles
@@ -331,7 +331,7 @@ spec:
         - name: name
           value: deprecated-image-check
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3c8b81fa868e27c6266e7660a4bfb4c822846dcf4304606e71e20893b0d3e515
+          value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:f485ef8bfdaf6e6d8d7795eb2e25f9c5ee8619d52220f4d64b5e28078d568c89
         - name: kind
           value: task
         resolver: bundles
@@ -408,7 +408,12 @@ spec:
         operator: in
         values:
         - "false"
-    - name: clamav-scan
+    - matrix:
+        params:
+        - name: image-arch
+          value:
+          - $(params.build-platforms)
+      name: clamav-scan
       params:
       - name: image-digest
         value: $(tasks.build-image-index.results.IMAGE_DIGEST)
@@ -421,7 +426,7 @@ spec:
         - name: name
           value: clamav-scan
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.2@sha256:7749146f7e4fe530846f1b15c9366178ec9f44776ef1922a60d3e7e2b8c6426b
+          value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:cce2dfcc5bd6e91ee54aacdadad523b013eeae5cdaa7f6a4624b8cbcc040f439
         - name: kind
           value: task
         resolver: bundles
@@ -466,7 +471,7 @@ spec:
         - name: name
           value: sast-coverity-check-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:f9ca942208dc2e63b479384ccc56a611cc793397ecc837637b5b9f89c2ecbefe
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:ff78675c38ad6f98570043666f67ef870364587e9009eaefd5f3a681de80a35e
         - name: kind
           value: task
         resolver: bundles
@@ -561,7 +566,7 @@ spec:
         - name: name
           value: apply-tags
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:517a51e260c0b59654a9d7b842e1ab07d76bce15ca7ce9c8fd2489a19be6463d
+          value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:264fa9591929fb60e3aca033ff168e5d98b1aafb458d6988e327a99ff494b00b
         - name: kind
           value: task
         resolver: bundles
@@ -584,7 +589,7 @@ spec:
         - name: name
           value: push-dockerfile-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:8c75c4a747e635e5f3e12266a3bb6e5d3132bf54e37eaa53d505f89897dd8eca
+          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:8640726ef7c5875e3b2e64c9f823921ea970674593f077cadfce3c45c9b9a2b9
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index fdbbc233..ff376583 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -47,7 +47,7 @@ spec:
         - name: name
           value: show-sbom
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-show-sbom:0.1@sha256:86c069cac0a669797e8049faa8aa4088e70ff7fcd579d5bdc37626a9e0488a05
+          value: quay.io/konflux-ci/tekton-catalog/task-show-sbom:0.1@sha256:beb0616db051952b4b861dd8c3e00fa1c0eccbd926feddf71194d3bb3ace9ce7
         - name: kind
           value: task
         resolver: bundles
@@ -147,7 +147,7 @@ spec:
         - name: name
           value: init
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:1d8221c84f91b923d89de50bf16481ea729e3b68ea04a9a7cbe8485ddbb27ee6
+          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:08e18a4dc5f947c1d20e8353a19d013144bea87b72f67236b165dd4778523951
         - name: kind
           value: task
         resolver: bundles
@@ -168,7 +168,7 @@ spec:
         - name: name
           value: git-clone-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:d35e5d501cb5f5f88369511f76249857cb5ac30250e1dcf086939321964ff6b9
+          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:be82c55346e8810bd1edc5547f864064da6945979baccca7dfc99990b392a02b
         - name: kind
           value: task
         resolver: bundles
@@ -197,7 +197,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:092491ac0f6e1009d10c58a1319d1029371bf637cc1293cceba53c6da5314ed1
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:125aea525bcdb31ff86cb37d56e3d8369587ead48da3bc454d4344682724ca54
         - name: kind
           value: task
         resolver: bundles
@@ -247,7 +247,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:9e866d4d0489a6ab84ae263db416c9f86d2d6117ef4444f495a0e97388ae3ac0
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:1ed04fe149488b2ea63347f2adfaa3eeb4062e594dc266358a705597dd304d7e
         - name: kind
           value: task
         resolver: bundles
@@ -276,7 +276,7 @@ spec:
         - name: name
           value: build-image-index
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:3499772af90aad0d3935629be6d37dd9292195fb629e6f43ec839c7f545a0faa
+          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:72f77a8c62f9d6f69ab5c35170839e4b190026e6cc3d7d4ceafa7033fc30ad7b
         - name: kind
           value: task
         resolver: bundles
@@ -302,7 +302,7 @@ spec:
         - name: name
           value: source-build-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:b1eb49583b41872b27356fee20d5f0eb6ff7f5cdeacde7ffb39655f031104728
+          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:bfec1fabb0ed7c191e6c85d75e6cc577a04cabe9e6b35f9476529e8e5b3c0c82
         - name: kind
           value: task
         resolver: bundles
@@ -328,7 +328,7 @@ spec:
         - name: name
           value: deprecated-image-check
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3c8b81fa868e27c6266e7660a4bfb4c822846dcf4304606e71e20893b0d3e515
+          value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:f485ef8bfdaf6e6d8d7795eb2e25f9c5ee8619d52220f4d64b5e28078d568c89
         - name: kind
           value: task
         resolver: bundles
@@ -405,7 +405,12 @@ spec:
         operator: in
         values:
         - "false"
-    - name: clamav-scan
+    - matrix:
+        params:
+        - name: image-arch
+          value:
+          - $(params.build-platforms)
+      name: clamav-scan
       params:
       - name: image-digest
         value: $(tasks.build-image-index.results.IMAGE_DIGEST)
@@ -418,7 +423,7 @@ spec:
         - name: name
           value: clamav-scan
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.2@sha256:7749146f7e4fe530846f1b15c9366178ec9f44776ef1922a60d3e7e2b8c6426b
+          value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:cce2dfcc5bd6e91ee54aacdadad523b013eeae5cdaa7f6a4624b8cbcc040f439
         - name: kind
           value: task
         resolver: bundles
@@ -463,7 +468,7 @@ spec:
         - name: name
           value: sast-coverity-check-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:f9ca942208dc2e63b479384ccc56a611cc793397ecc837637b5b9f89c2ecbefe
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:ff78675c38ad6f98570043666f67ef870364587e9009eaefd5f3a681de80a35e
         - name: kind
           value: task
         resolver: bundles
@@ -558,7 +563,7 @@ spec:
         - name: name
           value: apply-tags
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:517a51e260c0b59654a9d7b842e1ab07d76bce15ca7ce9c8fd2489a19be6463d
+          value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:264fa9591929fb60e3aca033ff168e5d98b1aafb458d6988e327a99ff494b00b
         - name: kind
           value: task
         resolver: bundles
@@ -581,7 +586,7 @@ spec:
         - name: name
           value: push-dockerfile-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:8c75c4a747e635e5f3e12266a3bb6e5d3132bf54e37eaa53d505f89897dd8eca
+          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:8640726ef7c5875e3b2e64c9f823921ea970674593f077cadfce3c45c9b9a2b9
         - name: kind
           value: task
         resolver: bundles

From 5d8e7548d414b51b10b4427f8dcbfda4632d1d5e Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Tue, 29 Jul 2025 06:25:35 +0000
Subject: [PATCH 03/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 340a9b0f..f0173fa6 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -471,7 +471,7 @@ spec:
         - name: name
           value: sast-coverity-check-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:ff78675c38ad6f98570043666f67ef870364587e9009eaefd5f3a681de80a35e
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:5f81372e21a3c6f4a745b723e444b6eb81a11bdff8740e0ce4b96ad42924e45e
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index ff376583..7409bf48 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -468,7 +468,7 @@ spec:
         - name: name
           value: sast-coverity-check-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:ff78675c38ad6f98570043666f67ef870364587e9009eaefd5f3a681de80a35e
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:5f81372e21a3c6f4a745b723e444b6eb81a11bdff8740e0ce4b96ad42924e45e
         - name: kind
           value: task
         resolver: bundles

From 7cf855b22cd1962e7d005ef6d3d3431459ddcdd8 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Thu, 31 Jul 2025 14:38:57 +0000
Subject: [PATCH 04/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index f0173fa6..9139e651 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -250,7 +250,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:1ed04fe149488b2ea63347f2adfaa3eeb4062e594dc266358a705597dd304d7e
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:133f78ffc883475262651744af912831cf19b49dddbd826ef64e2d4ab2e0af7b
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 7409bf48..3bffdab5 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -247,7 +247,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:1ed04fe149488b2ea63347f2adfaa3eeb4062e594dc266358a705597dd304d7e
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:133f78ffc883475262651744af912831cf19b49dddbd826ef64e2d4ab2e0af7b
         - name: kind
           value: task
         resolver: bundles

From d55a8bb2160545d6acc84c51bbe2662699e1234c Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Fri, 1 Aug 2025 17:59:47 +0000
Subject: [PATCH 05/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 6 +++---
 .tekton/cert-manager-operator-1-17-push.yaml         | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 9139e651..943d0767 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -200,7 +200,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:125aea525bcdb31ff86cb37d56e3d8369587ead48da3bc454d4344682724ca54
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:63448dd12b8ace978df27c155b3662cb1a8b285906843e03da99ce483d50f1eb
         - name: kind
           value: task
         resolver: bundles
@@ -250,7 +250,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:133f78ffc883475262651744af912831cf19b49dddbd826ef64e2d4ab2e0af7b
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:bbcd0f1ef282950c8349b893b19694bd7a21889251529d5da126c0946a4ca045
         - name: kind
           value: task
         resolver: bundles
@@ -566,7 +566,7 @@ spec:
         - name: name
           value: apply-tags
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:264fa9591929fb60e3aca033ff168e5d98b1aafb458d6988e327a99ff494b00b
+          value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:70881c97a4c51ee1f4d023fa1110e0bdfcfd2f51d9a261fa543c3862b9a4eee9
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 3bffdab5..5c066401 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -197,7 +197,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:125aea525bcdb31ff86cb37d56e3d8369587ead48da3bc454d4344682724ca54
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:63448dd12b8ace978df27c155b3662cb1a8b285906843e03da99ce483d50f1eb
         - name: kind
           value: task
         resolver: bundles
@@ -247,7 +247,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:133f78ffc883475262651744af912831cf19b49dddbd826ef64e2d4ab2e0af7b
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:bbcd0f1ef282950c8349b893b19694bd7a21889251529d5da126c0946a4ca045
         - name: kind
           value: task
         resolver: bundles
@@ -563,7 +563,7 @@ spec:
         - name: name
           value: apply-tags
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:264fa9591929fb60e3aca033ff168e5d98b1aafb458d6988e327a99ff494b00b
+          value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:70881c97a4c51ee1f4d023fa1110e0bdfcfd2f51d9a261fa543c3862b9a4eee9
         - name: kind
           value: task
         resolver: bundles

From 64f06d3a22390d8605d55c4cec803def4e54f762 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Tue, 5 Aug 2025 07:51:14 +0000
Subject: [PATCH 06/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 9 +++++++--
 .tekton/cert-manager-operator-1-17-push.yaml         | 9 +++++++--
 2 files changed, 14 insertions(+), 4 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 943d0767..ddd444a6 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -362,7 +362,12 @@ spec:
         operator: in
         values:
         - "false"
-    - name: ecosystem-cert-preflight-checks
+    - matrix:
+        params:
+        - name: platform
+          value:
+          - $(params.build-platforms)
+      name: ecosystem-cert-preflight-checks
       params:
       - name: image-url
         value: $(tasks.build-image-index.results.IMAGE_URL)
@@ -373,7 +378,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:f99d2bdb02f13223d494077a2cde31418d09369f33c02134a8e7e5fad2f61eda
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:f0c7632803ea659ae224ce16db6e0728ac1d79996c85bb43eea80a9de2a8a8d6
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 5c066401..94ec2541 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -359,7 +359,12 @@ spec:
         operator: in
         values:
         - "false"
-    - name: ecosystem-cert-preflight-checks
+    - matrix:
+        params:
+        - name: platform
+          value:
+          - $(params.build-platforms)
+      name: ecosystem-cert-preflight-checks
       params:
       - name: image-url
         value: $(tasks.build-image-index.results.IMAGE_URL)
@@ -370,7 +375,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:f99d2bdb02f13223d494077a2cde31418d09369f33c02134a8e7e5fad2f61eda
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:f0c7632803ea659ae224ce16db6e0728ac1d79996c85bb43eea80a9de2a8a8d6
         - name: kind
           value: task
         resolver: bundles

From 9e232bf70ce0cd88ff5a584f228e7ff51aaafb53 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Wed, 6 Aug 2025 00:32:37 +0000
Subject: [PATCH 07/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 4 ++--
 .tekton/cert-manager-operator-1-17-push.yaml         | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index ddd444a6..0f0e5386 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -331,7 +331,7 @@ spec:
         - name: name
           value: deprecated-image-check
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:f485ef8bfdaf6e6d8d7795eb2e25f9c5ee8619d52220f4d64b5e28078d568c89
+          value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:1d07d16810c26713f3d875083924d93697900147364360587ccb5a63f2c31012
         - name: kind
           value: task
         resolver: bundles
@@ -353,7 +353,7 @@ spec:
         - name: name
           value: clair-scan
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:417f44117f8d87a4a62fea6589b5746612ac61640b454dbd88f74892380411f2
+          value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:893ffa3ce26b061e21bb4d8db9ef7ed4ddd4044fe7aa5451ef391034da3ff759
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 94ec2541..6f435955 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -328,7 +328,7 @@ spec:
         - name: name
           value: deprecated-image-check
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:f485ef8bfdaf6e6d8d7795eb2e25f9c5ee8619d52220f4d64b5e28078d568c89
+          value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:1d07d16810c26713f3d875083924d93697900147364360587ccb5a63f2c31012
         - name: kind
           value: task
         resolver: bundles
@@ -350,7 +350,7 @@ spec:
         - name: name
           value: clair-scan
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:417f44117f8d87a4a62fea6589b5746612ac61640b454dbd88f74892380411f2
+          value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:893ffa3ce26b061e21bb4d8db9ef7ed4ddd4044fe7aa5451ef391034da3ff759
         - name: kind
           value: task
         resolver: bundles

From b2cec99042eb3b0f3995342928881299dfdbcae8 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Wed, 6 Aug 2025 14:03:23 +0000
Subject: [PATCH 08/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 0f0e5386..31e7f9bd 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -549,7 +549,7 @@ spec:
         - name: name
           value: sast-unicode-check-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.2@sha256:3f99dc4634a62e1530324cd565d12323ca82be3cfa8a031a36b210becfa7b552
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.3@sha256:a2bde66f6b4164620298c7d709b8f08515409404000fa1dc2260d2508b135651
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 6f435955..75b8fa2c 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -546,7 +546,7 @@ spec:
         - name: name
           value: sast-unicode-check-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.2@sha256:3f99dc4634a62e1530324cd565d12323ca82be3cfa8a031a36b210becfa7b552
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.3@sha256:a2bde66f6b4164620298c7d709b8f08515409404000fa1dc2260d2508b135651
         - name: kind
           value: task
         resolver: bundles

From 8523ddaca6819039e782aa3f4de35c92652cbbb2 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Wed, 6 Aug 2025 15:10:29 +0000
Subject: [PATCH 09/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 31e7f9bd..97eb2813 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -378,7 +378,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:f0c7632803ea659ae224ce16db6e0728ac1d79996c85bb43eea80a9de2a8a8d6
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:51d698844b207f7bedff69cc8718858cbc7407b0cadbea3033e5965e71ae5e96
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 75b8fa2c..af0b596a 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -375,7 +375,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:f0c7632803ea659ae224ce16db6e0728ac1d79996c85bb43eea80a9de2a8a8d6
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:51d698844b207f7bedff69cc8718858cbc7407b0cadbea3033e5965e71ae5e96
         - name: kind
           value: task
         resolver: bundles

From b49f540d0ed27de90e77a4f5305589bc098004c6 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Thu, 7 Aug 2025 00:27:08 +0000
Subject: [PATCH 10/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 97eb2813..c491f5be 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -200,7 +200,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:63448dd12b8ace978df27c155b3662cb1a8b285906843e03da99ce483d50f1eb
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:e38599be9aafc4622545e66673c5bc2292b323834c5d852f4a39cb7d01784574
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index af0b596a..299e5a13 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -197,7 +197,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:63448dd12b8ace978df27c155b3662cb1a8b285906843e03da99ce483d50f1eb
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:e38599be9aafc4622545e66673c5bc2292b323834c5d852f4a39cb7d01784574
         - name: kind
           value: task
         resolver: bundles

From 46e2871d9835638b9c75536e5d71660e7be05380 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Thu, 7 Aug 2025 14:11:57 +0000
Subject: [PATCH 11/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index c491f5be..410eca2e 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -250,7 +250,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:bbcd0f1ef282950c8349b893b19694bd7a21889251529d5da126c0946a4ca045
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:e1c03f2be119f8000100ac10cba614cf7d0d77597a04aa74bc72d91df183bc5b
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 299e5a13..c5c3e140 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -247,7 +247,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:bbcd0f1ef282950c8349b893b19694bd7a21889251529d5da126c0946a4ca045
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:e1c03f2be119f8000100ac10cba614cf7d0d77597a04aa74bc72d91df183bc5b
         - name: kind
           value: task
         resolver: bundles

From 8bea08a151c48befc6ae90c796c5717789eac227 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Fri, 8 Aug 2025 20:38:16 +0000
Subject: [PATCH 12/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 410eca2e..1170997f 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -378,7 +378,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:51d698844b207f7bedff69cc8718858cbc7407b0cadbea3033e5965e71ae5e96
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:4bafcaab0f0c998a89a1cc33bdbbf74f39eea52e6c0e43013c356a322f94940f
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index c5c3e140..372de96e 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -375,7 +375,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:51d698844b207f7bedff69cc8718858cbc7407b0cadbea3033e5965e71ae5e96
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:4bafcaab0f0c998a89a1cc33bdbbf74f39eea52e6c0e43013c356a322f94940f
         - name: kind
           value: task
         resolver: bundles

From 7904ae1c2aa341a8d33de0416c6b65a0cb1c1e3f Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Tue, 12 Aug 2025 08:27:49 +0000
Subject: [PATCH 13/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 6 +++---
 .tekton/cert-manager-operator-1-17-push.yaml         | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 1170997f..8f29a6b9 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -250,7 +250,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:e1c03f2be119f8000100ac10cba614cf7d0d77597a04aa74bc72d91df183bc5b
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:817312f371cf37c03d5583c4c8b62fda6ea11335ca2719d2159d0320e1d67dc1
         - name: kind
           value: task
         resolver: bundles
@@ -476,7 +476,7 @@ spec:
         - name: name
           value: sast-coverity-check-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:5f81372e21a3c6f4a745b723e444b6eb81a11bdff8740e0ce4b96ad42924e45e
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:4885741078917733a5cff8dfb3177b9fc8d42a4e04b7e8f07639e0c3b2a5b560
         - name: kind
           value: task
         resolver: bundles
@@ -594,7 +594,7 @@ spec:
         - name: name
           value: push-dockerfile-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:8640726ef7c5875e3b2e64c9f823921ea970674593f077cadfce3c45c9b9a2b9
+          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:972990bea93c13f8afd279c0e0d4bd8c2665b48bbb3369b2c43acf194b851f5c
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 372de96e..41de79b4 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -247,7 +247,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:e1c03f2be119f8000100ac10cba614cf7d0d77597a04aa74bc72d91df183bc5b
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:817312f371cf37c03d5583c4c8b62fda6ea11335ca2719d2159d0320e1d67dc1
         - name: kind
           value: task
         resolver: bundles
@@ -473,7 +473,7 @@ spec:
         - name: name
           value: sast-coverity-check-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:5f81372e21a3c6f4a745b723e444b6eb81a11bdff8740e0ce4b96ad42924e45e
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:4885741078917733a5cff8dfb3177b9fc8d42a4e04b7e8f07639e0c3b2a5b560
         - name: kind
           value: task
         resolver: bundles
@@ -591,7 +591,7 @@ spec:
         - name: name
           value: push-dockerfile-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:8640726ef7c5875e3b2e64c9f823921ea970674593f077cadfce3c45c9b9a2b9
+          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:972990bea93c13f8afd279c0e0d4bd8c2665b48bbb3369b2c43acf194b851f5c
         - name: kind
           value: task
         resolver: bundles

From f0e0f915956b31e3dc914508a3c3372ec09ee077 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Tue, 12 Aug 2025 12:26:25 +0000
Subject: [PATCH 14/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 8f29a6b9..63885a4f 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -200,7 +200,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:e38599be9aafc4622545e66673c5bc2292b323834c5d852f4a39cb7d01784574
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:c5ebd3040df2511b8af762c8be946fd4ac9de60c16b81a9461534aea5979d86f
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 41de79b4..9107b260 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -197,7 +197,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:e38599be9aafc4622545e66673c5bc2292b323834c5d852f4a39cb7d01784574
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:c5ebd3040df2511b8af762c8be946fd4ac9de60c16b81a9461534aea5979d86f
         - name: kind
           value: task
         resolver: bundles

From 020eb33799f36d410c3c68042524a9c572472201 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Tue, 12 Aug 2025 16:38:43 +0000
Subject: [PATCH 15/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 4 ++--
 .tekton/cert-manager-operator-1-17-push.yaml         | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 63885a4f..303c540d 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -250,7 +250,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:817312f371cf37c03d5583c4c8b62fda6ea11335ca2719d2159d0320e1d67dc1
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:fa90f4a5ac8485720999aabb00a1db4bb5da69b178acbc089870efc7eaf36721
         - name: kind
           value: task
         resolver: bundles
@@ -476,7 +476,7 @@ spec:
         - name: name
           value: sast-coverity-check-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:4885741078917733a5cff8dfb3177b9fc8d42a4e04b7e8f07639e0c3b2a5b560
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:0819ec70412034b7bb7ad2bf0d42b5c0f6904fee66599e03489c33350340c0cb
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 9107b260..575d8fdc 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -247,7 +247,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:817312f371cf37c03d5583c4c8b62fda6ea11335ca2719d2159d0320e1d67dc1
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:fa90f4a5ac8485720999aabb00a1db4bb5da69b178acbc089870efc7eaf36721
         - name: kind
           value: task
         resolver: bundles
@@ -473,7 +473,7 @@ spec:
         - name: name
           value: sast-coverity-check-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:4885741078917733a5cff8dfb3177b9fc8d42a4e04b7e8f07639e0c3b2a5b560
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:0819ec70412034b7bb7ad2bf0d42b5c0f6904fee66599e03489c33350340c0cb
         - name: kind
           value: task
         resolver: bundles

From 174d1fbb3d4326cf48573de6a51f583e22591a06 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Wed, 13 Aug 2025 04:41:21 +0000
Subject: [PATCH 16/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 4 ++--
 .tekton/cert-manager-operator-1-17-push.yaml         | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 303c540d..194272ad 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -378,7 +378,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:4bafcaab0f0c998a89a1cc33bdbbf74f39eea52e6c0e43013c356a322f94940f
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:17c8c04607c5d6ac6db521ab27aeb8216118f4265185896f5d00cb825f8d9efd
         - name: kind
           value: task
         resolver: bundles
@@ -611,7 +611,7 @@ spec:
         - name: name
           value: rpms-signature-scan
         - name: bundle
-          value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:7d1c087d7d33dd97effb3b4c9f3788e4c3138da2032040d69da6929e9a3aaceb
+          value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:00a29b6f86c2b8237077a5f5ca29a71aae59eab311dde57de27e5dcf4cae5d77
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 575d8fdc..19cc094b 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -375,7 +375,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:4bafcaab0f0c998a89a1cc33bdbbf74f39eea52e6c0e43013c356a322f94940f
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:17c8c04607c5d6ac6db521ab27aeb8216118f4265185896f5d00cb825f8d9efd
         - name: kind
           value: task
         resolver: bundles
@@ -608,7 +608,7 @@ spec:
         - name: name
           value: rpms-signature-scan
         - name: bundle
-          value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:7d1c087d7d33dd97effb3b4c9f3788e4c3138da2032040d69da6929e9a3aaceb
+          value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:00a29b6f86c2b8237077a5f5ca29a71aae59eab311dde57de27e5dcf4cae5d77
         - name: kind
           value: task
         resolver: bundles

From f032d2d2bf1867ad3db2713652300b11357a5634 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Thu, 14 Aug 2025 15:41:09 +0000
Subject: [PATCH 17/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 4 ++--
 .tekton/cert-manager-operator-1-17-push.yaml         | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 194272ad..b3545f94 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -200,7 +200,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:c5ebd3040df2511b8af762c8be946fd4ac9de60c16b81a9461534aea5979d86f
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:ca036c7232f63199824bc1a65126faad834bc3af030e5b8210cb057f4ae97d99
         - name: kind
           value: task
         resolver: bundles
@@ -378,7 +378,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:17c8c04607c5d6ac6db521ab27aeb8216118f4265185896f5d00cb825f8d9efd
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:33e601b3bf3744953af3297f898f6ac5cab662b2bcba10bff639d09a59b3817d
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 19cc094b..7514abdc 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -197,7 +197,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:c5ebd3040df2511b8af762c8be946fd4ac9de60c16b81a9461534aea5979d86f
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:ca036c7232f63199824bc1a65126faad834bc3af030e5b8210cb057f4ae97d99
         - name: kind
           value: task
         resolver: bundles
@@ -375,7 +375,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:17c8c04607c5d6ac6db521ab27aeb8216118f4265185896f5d00cb825f8d9efd
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:33e601b3bf3744953af3297f898f6ac5cab662b2bcba10bff639d09a59b3817d
         - name: kind
           value: task
         resolver: bundles

From bbe221bda0ee5a71c6070d7852596dea49ad3f92 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Sat, 16 Aug 2025 01:12:39 +0000
Subject: [PATCH 18/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index b3545f94..657caddb 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -378,7 +378,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:33e601b3bf3744953af3297f898f6ac5cab662b2bcba10bff639d09a59b3817d
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:1f151e00f7fc427654b7b76045a426bb02fe650d192ffe147a304d2184787e38
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 7514abdc..82dd09ba 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -375,7 +375,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:33e601b3bf3744953af3297f898f6ac5cab662b2bcba10bff639d09a59b3817d
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:1f151e00f7fc427654b7b76045a426bb02fe650d192ffe147a304d2184787e38
         - name: kind
           value: task
         resolver: bundles

From 943fb4cf2781c6cd93f32b7a7a5a3d7a2c65a77f Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Mon, 18 Aug 2025 13:23:05 +0000
Subject: [PATCH 19/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .../cert-manager-operator-1-17-pull-request.yaml | 16 ++++++++--------
 .tekton/cert-manager-operator-1-17-push.yaml     | 16 ++++++++--------
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 657caddb..c9e7633d 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -150,7 +150,7 @@ spec:
         - name: name
           value: init
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:08e18a4dc5f947c1d20e8353a19d013144bea87b72f67236b165dd4778523951
+          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ded314206f09712b2116deb050b774ae7efef9ab243794334c8e616871a3ffa5
         - name: kind
           value: task
         resolver: bundles
@@ -171,7 +171,7 @@ spec:
         - name: name
           value: git-clone-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:be82c55346e8810bd1edc5547f864064da6945979baccca7dfc99990b392a02b
+          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:9d94d0e0bd7bbd6f0adf4561122c9dc3854b37907d3fc952ab2f2d4a4173bef7
         - name: kind
           value: task
         resolver: bundles
@@ -250,7 +250,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:fa90f4a5ac8485720999aabb00a1db4bb5da69b178acbc089870efc7eaf36721
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:97b5d08b4ef51db85a53ff9fb8376ab3d2875caeb9287c99bdfa4c220ae44f41
         - name: kind
           value: task
         resolver: bundles
@@ -279,7 +279,7 @@ spec:
         - name: name
           value: build-image-index
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:72f77a8c62f9d6f69ab5c35170839e4b190026e6cc3d7d4ceafa7033fc30ad7b
+          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:a82586dda4866aacb468f1bb7d02dcdfb132f330c2396ab54c5fa7727680935d
         - name: kind
           value: task
         resolver: bundles
@@ -305,7 +305,7 @@ spec:
         - name: name
           value: source-build-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:bfec1fabb0ed7c191e6c85d75e6cc577a04cabe9e6b35f9476529e8e5b3c0c82
+          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:cec0aa832a7707c803d66c4630471bfe78e054b6c4ff6ee2980a6ddd954e3c1e
         - name: kind
           value: task
         resolver: bundles
@@ -476,7 +476,7 @@ spec:
         - name: name
           value: sast-coverity-check-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:0819ec70412034b7bb7ad2bf0d42b5c0f6904fee66599e03489c33350340c0cb
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:9c776c82aeaf36539a0aa68764ed285f78530d78207ddb011aaa0a01f9ccb16d
         - name: kind
           value: task
         resolver: bundles
@@ -571,7 +571,7 @@ spec:
         - name: name
           value: apply-tags
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:70881c97a4c51ee1f4d023fa1110e0bdfcfd2f51d9a261fa543c3862b9a4eee9
+          value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:e0de426d492e195f59c99d2ea1ca0df7bfb8c689f5d1468fe7f70eb8684b8d02
         - name: kind
           value: task
         resolver: bundles
@@ -594,7 +594,7 @@ spec:
         - name: name
           value: push-dockerfile-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:972990bea93c13f8afd279c0e0d4bd8c2665b48bbb3369b2c43acf194b851f5c
+          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:f8d7376d79e9edbd1b2326bca0818a1c6cf175f2f17dbd3e142fc1d324d1508b
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 82dd09ba..2b80df7a 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -147,7 +147,7 @@ spec:
         - name: name
           value: init
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:08e18a4dc5f947c1d20e8353a19d013144bea87b72f67236b165dd4778523951
+          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ded314206f09712b2116deb050b774ae7efef9ab243794334c8e616871a3ffa5
         - name: kind
           value: task
         resolver: bundles
@@ -168,7 +168,7 @@ spec:
         - name: name
           value: git-clone-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:be82c55346e8810bd1edc5547f864064da6945979baccca7dfc99990b392a02b
+          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:9d94d0e0bd7bbd6f0adf4561122c9dc3854b37907d3fc952ab2f2d4a4173bef7
         - name: kind
           value: task
         resolver: bundles
@@ -247,7 +247,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:fa90f4a5ac8485720999aabb00a1db4bb5da69b178acbc089870efc7eaf36721
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:97b5d08b4ef51db85a53ff9fb8376ab3d2875caeb9287c99bdfa4c220ae44f41
         - name: kind
           value: task
         resolver: bundles
@@ -276,7 +276,7 @@ spec:
         - name: name
           value: build-image-index
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:72f77a8c62f9d6f69ab5c35170839e4b190026e6cc3d7d4ceafa7033fc30ad7b
+          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:a82586dda4866aacb468f1bb7d02dcdfb132f330c2396ab54c5fa7727680935d
         - name: kind
           value: task
         resolver: bundles
@@ -302,7 +302,7 @@ spec:
         - name: name
           value: source-build-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:bfec1fabb0ed7c191e6c85d75e6cc577a04cabe9e6b35f9476529e8e5b3c0c82
+          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:cec0aa832a7707c803d66c4630471bfe78e054b6c4ff6ee2980a6ddd954e3c1e
         - name: kind
           value: task
         resolver: bundles
@@ -473,7 +473,7 @@ spec:
         - name: name
           value: sast-coverity-check-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:0819ec70412034b7bb7ad2bf0d42b5c0f6904fee66599e03489c33350340c0cb
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:9c776c82aeaf36539a0aa68764ed285f78530d78207ddb011aaa0a01f9ccb16d
         - name: kind
           value: task
         resolver: bundles
@@ -568,7 +568,7 @@ spec:
         - name: name
           value: apply-tags
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:70881c97a4c51ee1f4d023fa1110e0bdfcfd2f51d9a261fa543c3862b9a4eee9
+          value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:e0de426d492e195f59c99d2ea1ca0df7bfb8c689f5d1468fe7f70eb8684b8d02
         - name: kind
           value: task
         resolver: bundles
@@ -591,7 +591,7 @@ spec:
         - name: name
           value: push-dockerfile-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:972990bea93c13f8afd279c0e0d4bd8c2665b48bbb3369b2c43acf194b851f5c
+          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:f8d7376d79e9edbd1b2326bca0818a1c6cf175f2f17dbd3e142fc1d324d1508b
         - name: kind
           value: task
         resolver: bundles

From a3ab2dfd66a44d90740bbf4a5da775987472abb8 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Tue, 19 Aug 2025 11:54:34 +0000
Subject: [PATCH 20/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 10 +++++-----
 .tekton/cert-manager-operator-1-17-push.yaml         | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index c9e7633d..62f970c7 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -171,7 +171,7 @@ spec:
         - name: name
           value: git-clone-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:9d94d0e0bd7bbd6f0adf4561122c9dc3854b37907d3fc952ab2f2d4a4173bef7
+          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:4a601aeec58a1dd89c271e728fd8f0d84777825b46940c3aec27f15bab3edacf
         - name: kind
           value: task
         resolver: bundles
@@ -250,7 +250,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:97b5d08b4ef51db85a53ff9fb8376ab3d2875caeb9287c99bdfa4c220ae44f41
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:153d73cd52e904962ff1d3c9b13eba9e8bd4ef38bb768853db5e5b0ada3230d4
         - name: kind
           value: task
         resolver: bundles
@@ -279,7 +279,7 @@ spec:
         - name: name
           value: build-image-index
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:a82586dda4866aacb468f1bb7d02dcdfb132f330c2396ab54c5fa7727680935d
+          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:3bf6e4e83f911066430041534a69eec51dbd0f52f34a9bf41c6f3a24ec2ffb22
         - name: kind
           value: task
         resolver: bundles
@@ -305,7 +305,7 @@ spec:
         - name: name
           value: source-build-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:cec0aa832a7707c803d66c4630471bfe78e054b6c4ff6ee2980a6ddd954e3c1e
+          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:f1c0743939fe246b19e9e268a3b96b22b724096dcf946548c3d60e184136e32f
         - name: kind
           value: task
         resolver: bundles
@@ -594,7 +594,7 @@ spec:
         - name: name
           value: push-dockerfile-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:f8d7376d79e9edbd1b2326bca0818a1c6cf175f2f17dbd3e142fc1d324d1508b
+          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:235ef6e835de8171c07b8a7f8947d0b40bfcff999e1ff3cb6ddd9acc65c48430
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 2b80df7a..cab4a8f7 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -168,7 +168,7 @@ spec:
         - name: name
           value: git-clone-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:9d94d0e0bd7bbd6f0adf4561122c9dc3854b37907d3fc952ab2f2d4a4173bef7
+          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:4a601aeec58a1dd89c271e728fd8f0d84777825b46940c3aec27f15bab3edacf
         - name: kind
           value: task
         resolver: bundles
@@ -247,7 +247,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:97b5d08b4ef51db85a53ff9fb8376ab3d2875caeb9287c99bdfa4c220ae44f41
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:153d73cd52e904962ff1d3c9b13eba9e8bd4ef38bb768853db5e5b0ada3230d4
         - name: kind
           value: task
         resolver: bundles
@@ -276,7 +276,7 @@ spec:
         - name: name
           value: build-image-index
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:a82586dda4866aacb468f1bb7d02dcdfb132f330c2396ab54c5fa7727680935d
+          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:3bf6e4e83f911066430041534a69eec51dbd0f52f34a9bf41c6f3a24ec2ffb22
         - name: kind
           value: task
         resolver: bundles
@@ -302,7 +302,7 @@ spec:
         - name: name
           value: source-build-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:cec0aa832a7707c803d66c4630471bfe78e054b6c4ff6ee2980a6ddd954e3c1e
+          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:f1c0743939fe246b19e9e268a3b96b22b724096dcf946548c3d60e184136e32f
         - name: kind
           value: task
         resolver: bundles
@@ -591,7 +591,7 @@ spec:
         - name: name
           value: push-dockerfile-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:f8d7376d79e9edbd1b2326bca0818a1c6cf175f2f17dbd3e142fc1d324d1508b
+          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:235ef6e835de8171c07b8a7f8947d0b40bfcff999e1ff3cb6ddd9acc65c48430
         - name: kind
           value: task
         resolver: bundles

From 55902dc866881a38107b71e1cfa64a64d9dec104 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Tue, 19 Aug 2025 15:30:56 +0000
Subject: [PATCH 21/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 62f970c7..9494fa69 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -431,7 +431,7 @@ spec:
         - name: name
           value: clamav-scan
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:cce2dfcc5bd6e91ee54aacdadad523b013eeae5cdaa7f6a4624b8cbcc040f439
+          value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:b0bd59748cda4a7abf311e4f448e6c1d00c6b6d8c0ecc1c2eb33e08dc0e0b802
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index cab4a8f7..dbbf2c01 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -428,7 +428,7 @@ spec:
         - name: name
           value: clamav-scan
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:cce2dfcc5bd6e91ee54aacdadad523b013eeae5cdaa7f6a4624b8cbcc040f439
+          value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:b0bd59748cda4a7abf311e4f448e6c1d00c6b6d8c0ecc1c2eb33e08dc0e0b802
         - name: kind
           value: task
         resolver: bundles

From c5129927fec817dce418cc204bc601e707414bb5 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Wed, 20 Aug 2025 16:53:12 +0000
Subject: [PATCH 22/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 ...ert-manager-operator-1-17-pull-request.yaml | 18 ++----------------
 .tekton/cert-manager-operator-1-17-push.yaml   | 18 ++----------------
 2 files changed, 4 insertions(+), 32 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 9494fa69..7b7473d4 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -40,20 +40,6 @@ spec:
 
       _Uses `buildah` to create a multi-platform container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. This pipeline requires that the [multi platform controller](https://github.com/konflux-ci/multi-platform-controller) is deployed and configured on your Konflux instance. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.
       This pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-multi-platform-oci-ta?tab=tags)_
-    finally:
-    - name: show-sbom
-      params:
-      - name: IMAGE_URL
-        value: $(tasks.build-image-index.results.IMAGE_URL)
-      taskRef:
-        params:
-        - name: name
-          value: show-sbom
-        - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-show-sbom:0.1@sha256:beb0616db051952b4b861dd8c3e00fa1c0eccbd926feddf71194d3bb3ace9ce7
-        - name: kind
-          value: task
-        resolver: bundles
     params:
     - description: Source Repository URL
       name: git-url
@@ -200,7 +186,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:ca036c7232f63199824bc1a65126faad834bc3af030e5b8210cb057f4ae97d99
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:e0c526c2916212aa676d840831d70a9d57134eedbd0823063b1e1efb63f78842
         - name: kind
           value: task
         resolver: bundles
@@ -250,7 +236,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:153d73cd52e904962ff1d3c9b13eba9e8bd4ef38bb768853db5e5b0ada3230d4
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:bd1035554521c48412599a0ae7c77a0701070bba22eb5cec524eb0968d5f4223
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index dbbf2c01..8ddfde6e 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -37,20 +37,6 @@ spec:
 
       _Uses `buildah` to create a multi-platform container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. This pipeline requires that the [multi platform controller](https://github.com/konflux-ci/multi-platform-controller) is deployed and configured on your Konflux instance. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.
       This pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-multi-platform-oci-ta?tab=tags)_
-    finally:
-    - name: show-sbom
-      params:
-      - name: IMAGE_URL
-        value: $(tasks.build-image-index.results.IMAGE_URL)
-      taskRef:
-        params:
-        - name: name
-          value: show-sbom
-        - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-show-sbom:0.1@sha256:beb0616db051952b4b861dd8c3e00fa1c0eccbd926feddf71194d3bb3ace9ce7
-        - name: kind
-          value: task
-        resolver: bundles
     params:
     - description: Source Repository URL
       name: git-url
@@ -197,7 +183,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:ca036c7232f63199824bc1a65126faad834bc3af030e5b8210cb057f4ae97d99
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:e0c526c2916212aa676d840831d70a9d57134eedbd0823063b1e1efb63f78842
         - name: kind
           value: task
         resolver: bundles
@@ -247,7 +233,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:153d73cd52e904962ff1d3c9b13eba9e8bd4ef38bb768853db5e5b0ada3230d4
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:bd1035554521c48412599a0ae7c77a0701070bba22eb5cec524eb0968d5f4223
         - name: kind
           value: task
         resolver: bundles

From 58bde3b26d2e1c83fe98808cdda78267a72a4102 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Wed, 20 Aug 2025 18:24:40 +0000
Subject: [PATCH 23/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 7b7473d4..744257d0 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -186,7 +186,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:e0c526c2916212aa676d840831d70a9d57134eedbd0823063b1e1efb63f78842
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:29869c64ff27e964e26a8a7ea2c882a2ed5424210bd0603be45a07e2ebf308cc
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 8ddfde6e..7f2de1fa 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -183,7 +183,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:e0c526c2916212aa676d840831d70a9d57134eedbd0823063b1e1efb63f78842
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:29869c64ff27e964e26a8a7ea2c882a2ed5424210bd0603be45a07e2ebf308cc
         - name: kind
           value: task
         resolver: bundles

From fb63fd724c51e9b1ee7ff0bec7a0b273e8a9b6bf Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Thu, 21 Aug 2025 11:11:37 +0000
Subject: [PATCH 24/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 744257d0..52530d9c 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -597,7 +597,7 @@ spec:
         - name: name
           value: rpms-signature-scan
         - name: bundle
-          value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:00a29b6f86c2b8237077a5f5ca29a71aae59eab311dde57de27e5dcf4cae5d77
+          value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:e127e0e0a5aab1364b560436594fe7ed67abcd5f8d6dd3ef14ac1f35cf81078c
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 7f2de1fa..2041c6f6 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -594,7 +594,7 @@ spec:
         - name: name
           value: rpms-signature-scan
         - name: bundle
-          value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:00a29b6f86c2b8237077a5f5ca29a71aae59eab311dde57de27e5dcf4cae5d77
+          value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:e127e0e0a5aab1364b560436594fe7ed67abcd5f8d6dd3ef14ac1f35cf81078c
         - name: kind
           value: task
         resolver: bundles

From d09d1e7fa855e39f6bbbf582fe2e08f33edbae33 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Mon, 25 Aug 2025 09:05:50 +0000
Subject: [PATCH 25/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 52530d9c..cb067352 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -265,7 +265,7 @@ spec:
         - name: name
           value: build-image-index
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:3bf6e4e83f911066430041534a69eec51dbd0f52f34a9bf41c6f3a24ec2ffb22
+          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:ba7fbed5c4862968c1a77d6b90d5bdd497925ab1de41b859c027dd5c3069cd3e
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 2041c6f6..299c485a 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -262,7 +262,7 @@ spec:
         - name: name
           value: build-image-index
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:3bf6e4e83f911066430041534a69eec51dbd0f52f34a9bf41c6f3a24ec2ffb22
+          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:ba7fbed5c4862968c1a77d6b90d5bdd497925ab1de41b859c027dd5c3069cd3e
         - name: kind
           value: task
         resolver: bundles

From 38348fba5243f494d94bbb3046ffe671e663a0d9 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Mon, 25 Aug 2025 14:05:10 +0000
Subject: [PATCH 26/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 10 +++++-----
 .tekton/cert-manager-operator-1-17-push.yaml         | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index cb067352..202b5702 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -74,7 +74,7 @@ spec:
       name: hermetic
       type: string
     - default: ""
-      description: Build dependencies to be prefetched by Cachi2
+      description: Build dependencies to be prefetched
       name: prefetch-input
       type: string
     - default: ""
@@ -186,7 +186,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:29869c64ff27e964e26a8a7ea2c882a2ed5424210bd0603be45a07e2ebf308cc
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:981dbd9ddecdbb716f321e65e645c6f74886352098d50d958f1195da550fac73
         - name: kind
           value: task
         resolver: bundles
@@ -236,7 +236,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:bd1035554521c48412599a0ae7c77a0701070bba22eb5cec524eb0968d5f4223
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:cd9ef1eb119700a6883edcf93fd7c71dc33ee43467f3c2728b2a002c77915e8d
         - name: kind
           value: task
         resolver: bundles
@@ -291,7 +291,7 @@ spec:
         - name: name
           value: source-build-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:f1c0743939fe246b19e9e268a3b96b22b724096dcf946548c3d60e184136e32f
+          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:7a36cc284c5932c18e117fe5995f3246b5dcc11ec742b66a2f9ae710034b064f
         - name: kind
           value: task
         resolver: bundles
@@ -462,7 +462,7 @@ spec:
         - name: name
           value: sast-coverity-check-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:9c776c82aeaf36539a0aa68764ed285f78530d78207ddb011aaa0a01f9ccb16d
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:cdbe1a968676e4f5519b082bf1e27a4cdcf66dd60af66dbc26b3e604f957f7e9
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 299c485a..00231b34 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -71,7 +71,7 @@ spec:
       name: hermetic
       type: string
     - default: ""
-      description: Build dependencies to be prefetched by Cachi2
+      description: Build dependencies to be prefetched
       name: prefetch-input
       type: string
     - default: ""
@@ -183,7 +183,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:29869c64ff27e964e26a8a7ea2c882a2ed5424210bd0603be45a07e2ebf308cc
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:981dbd9ddecdbb716f321e65e645c6f74886352098d50d958f1195da550fac73
         - name: kind
           value: task
         resolver: bundles
@@ -233,7 +233,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:bd1035554521c48412599a0ae7c77a0701070bba22eb5cec524eb0968d5f4223
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:cd9ef1eb119700a6883edcf93fd7c71dc33ee43467f3c2728b2a002c77915e8d
         - name: kind
           value: task
         resolver: bundles
@@ -288,7 +288,7 @@ spec:
         - name: name
           value: source-build-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:f1c0743939fe246b19e9e268a3b96b22b724096dcf946548c3d60e184136e32f
+          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:7a36cc284c5932c18e117fe5995f3246b5dcc11ec742b66a2f9ae710034b064f
         - name: kind
           value: task
         resolver: bundles
@@ -459,7 +459,7 @@ spec:
         - name: name
           value: sast-coverity-check-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:9c776c82aeaf36539a0aa68764ed285f78530d78207ddb011aaa0a01f9ccb16d
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:cdbe1a968676e4f5519b082bf1e27a4cdcf66dd60af66dbc26b3e604f957f7e9
         - name: kind
           value: task
         resolver: bundles

From 6eeede3f5784f5657f3c7c62d87e30ca96539964 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Mon, 25 Aug 2025 15:43:09 +0000
Subject: [PATCH 27/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 202b5702..f7f70104 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -364,7 +364,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:1f151e00f7fc427654b7b76045a426bb02fe650d192ffe147a304d2184787e38
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:aae036fd1a5e7556c0dd53704e3e085c971d9fd834d58ab7a522641d566f7ab6
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 00231b34..b3ad44b8 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -361,7 +361,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:1f151e00f7fc427654b7b76045a426bb02fe650d192ffe147a304d2184787e38
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:aae036fd1a5e7556c0dd53704e3e085c971d9fd834d58ab7a522641d566f7ab6
         - name: kind
           value: task
         resolver: bundles

From 7cbc93ed48768b9c7b3e7df2e4b84bf3ec9d4f46 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Tue, 26 Aug 2025 11:01:57 +0000
Subject: [PATCH 28/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index f7f70104..0a811da2 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -390,7 +390,7 @@ spec:
         - name: name
           value: sast-snyk-check-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:fe5e5ba3a72632cd505910de2eacd62c9d11ed570c325173188f8d568ac60771
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:322c86ad5ee252c04440184d9f5046d276415148cb6bfaf571be1b102101786b
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index b3ad44b8..13dc8b12 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -387,7 +387,7 @@ spec:
         - name: name
           value: sast-snyk-check-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:fe5e5ba3a72632cd505910de2eacd62c9d11ed570c325173188f8d568ac60771
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:322c86ad5ee252c04440184d9f5046d276415148cb6bfaf571be1b102101786b
         - name: kind
           value: task
         resolver: bundles

From 269a5c27a08561707e3ff4608dfc139356689c32 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Tue, 26 Aug 2025 13:36:55 +0000
Subject: [PATCH 29/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 0a811da2..4ef96825 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -364,7 +364,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:aae036fd1a5e7556c0dd53704e3e085c971d9fd834d58ab7a522641d566f7ab6
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:e106b6182e72c8f34ceae3f56b0b1aa2b4dc60f573877d9e51c3791029a7acb6
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 13dc8b12..103ef741 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -361,7 +361,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:aae036fd1a5e7556c0dd53704e3e085c971d9fd834d58ab7a522641d566f7ab6
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:e106b6182e72c8f34ceae3f56b0b1aa2b4dc60f573877d9e51c3791029a7acb6
         - name: kind
           value: task
         resolver: bundles

From 786c937893a95d3b7e3983bb16ccb1ebc37f4bee Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Wed, 27 Aug 2025 15:53:48 +0000
Subject: [PATCH 30/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 4ef96825..3f5208c2 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -186,7 +186,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:981dbd9ddecdbb716f321e65e645c6f74886352098d50d958f1195da550fac73
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:22290579c9fe0b5c1689bb9023b3eddec73c285b680226d9f460346ae849a2cb
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 103ef741..91a3e3d7 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -183,7 +183,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:981dbd9ddecdbb716f321e65e645c6f74886352098d50d958f1195da550fac73
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:22290579c9fe0b5c1689bb9023b3eddec73c285b680226d9f460346ae849a2cb
         - name: kind
           value: task
         resolver: bundles

From 64124f40356fc6e6ff3d0b0c67062569d5f1de1f Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Mon, 1 Sep 2025 12:00:31 +0000
Subject: [PATCH 31/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 3f5208c2..c5bf3a57 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -186,7 +186,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:22290579c9fe0b5c1689bb9023b3eddec73c285b680226d9f460346ae849a2cb
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:24230408f0353d339dc573aaa96d2cfee9e29b89ece931a90a7866bc772c79b7
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 91a3e3d7..43719e07 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -183,7 +183,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:22290579c9fe0b5c1689bb9023b3eddec73c285b680226d9f460346ae849a2cb
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:24230408f0353d339dc573aaa96d2cfee9e29b89ece931a90a7866bc772c79b7
         - name: kind
           value: task
         resolver: bundles

From 90b75bd45082477d45c58af3ce8efd1d301e8caa Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Mon, 1 Sep 2025 20:48:53 +0000
Subject: [PATCH 32/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index c5bf3a57..c1420185 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -236,7 +236,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:cd9ef1eb119700a6883edcf93fd7c71dc33ee43467f3c2728b2a002c77915e8d
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:dc2f0ee60851a8865ce4fb5040f63b08dbd3442558a4e1c82f6f0079581215e5
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 43719e07..4fc51adc 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -233,7 +233,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:cd9ef1eb119700a6883edcf93fd7c71dc33ee43467f3c2728b2a002c77915e8d
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:dc2f0ee60851a8865ce4fb5040f63b08dbd3442558a4e1c82f6f0079581215e5
         - name: kind
           value: task
         resolver: bundles

From 37209d2bb3946d5b8d3767e99f143955d4ef5856 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Tue, 2 Sep 2025 19:23:36 +0000
Subject: [PATCH 33/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index c1420185..d0a3b042 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -186,7 +186,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:24230408f0353d339dc573aaa96d2cfee9e29b89ece931a90a7866bc772c79b7
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:05551e144d090844903d61893a383fa4dc69ab563797f03ffaab0f8624bf530d
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 4fc51adc..01aa438f 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -183,7 +183,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:24230408f0353d339dc573aaa96d2cfee9e29b89ece931a90a7866bc772c79b7
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:05551e144d090844903d61893a383fa4dc69ab563797f03ffaab0f8624bf530d
         - name: kind
           value: task
         resolver: bundles

From 224743c419c90f6b82ae26277f0973928640fbf3 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Wed, 3 Sep 2025 05:02:27 +0000
Subject: [PATCH 34/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index d0a3b042..d87bf5fe 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -390,7 +390,7 @@ spec:
         - name: name
           value: sast-snyk-check-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:322c86ad5ee252c04440184d9f5046d276415148cb6bfaf571be1b102101786b
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:e371aa09c65ab309138b4aeae9ea4dd93f83119c5cc61e9f2057fe5bb518fbe9
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 01aa438f..bacedac1 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -387,7 +387,7 @@ spec:
         - name: name
           value: sast-snyk-check-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:322c86ad5ee252c04440184d9f5046d276415148cb6bfaf571be1b102101786b
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:e371aa09c65ab309138b4aeae9ea4dd93f83119c5cc61e9f2057fe5bb518fbe9
         - name: kind
           value: task
         resolver: bundles

From 5a8f04c46a316cee63d32efd178fcfa46e84e398 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Wed, 3 Sep 2025 14:39:57 +0000
Subject: [PATCH 35/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index d87bf5fe..4b122694 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -236,7 +236,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:dc2f0ee60851a8865ce4fb5040f63b08dbd3442558a4e1c82f6f0079581215e5
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:252e5c94fb2375c43bdfd4b65097d246f4f37392956b08e5c38f366623a0b9ce
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index bacedac1..9c27e486 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -233,7 +233,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:dc2f0ee60851a8865ce4fb5040f63b08dbd3442558a4e1c82f6f0079581215e5
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:252e5c94fb2375c43bdfd4b65097d246f4f37392956b08e5c38f366623a0b9ce
         - name: kind
           value: task
         resolver: bundles

From 87d34990fbb3539fd6782db46584d2660ce68744 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Fri, 5 Sep 2025 05:24:37 +0000
Subject: [PATCH 36/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 4 ++--
 .tekton/cert-manager-operator-1-17-push.yaml         | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 4b122694..104a002a 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -186,7 +186,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:05551e144d090844903d61893a383fa4dc69ab563797f03ffaab0f8624bf530d
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:0b58e5132333dd3b710ef9c18ecebe0d5e5b22066ba56481d34431c989cb21dd
         - name: kind
           value: task
         resolver: bundles
@@ -364,7 +364,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:e106b6182e72c8f34ceae3f56b0b1aa2b4dc60f573877d9e51c3791029a7acb6
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:51ee3ca7b8142f39a2861ed0f94f67e02c538e3b7e57de56ed301fbb9774aa12
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 9c27e486..3ec35f74 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -183,7 +183,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:05551e144d090844903d61893a383fa4dc69ab563797f03ffaab0f8624bf530d
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:0b58e5132333dd3b710ef9c18ecebe0d5e5b22066ba56481d34431c989cb21dd
         - name: kind
           value: task
         resolver: bundles
@@ -361,7 +361,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:e106b6182e72c8f34ceae3f56b0b1aa2b4dc60f573877d9e51c3791029a7acb6
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:51ee3ca7b8142f39a2861ed0f94f67e02c538e3b7e57de56ed301fbb9774aa12
         - name: kind
           value: task
         resolver: bundles

From 09e089263b2579bb37a0dd27aacc6eb6ce4cd3e1 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Fri, 5 Sep 2025 14:35:48 +0000
Subject: [PATCH 37/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 4 ++--
 .tekton/cert-manager-operator-1-17-push.yaml         | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 104a002a..da0970c7 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -291,7 +291,7 @@ spec:
         - name: name
           value: source-build-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:7a36cc284c5932c18e117fe5995f3246b5dcc11ec742b66a2f9ae710034b064f
+          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a48c950350c5e9945cc4ad6bfad7fc653aa437c9eff74a25fd1d42fda4fe344d
         - name: kind
           value: task
         resolver: bundles
@@ -364,7 +364,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:51ee3ca7b8142f39a2861ed0f94f67e02c538e3b7e57de56ed301fbb9774aa12
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:365c65ed8dfbd83c4a49300dcb9c74c5c3f027efec0be1a1f0baa9633c29b249
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 3ec35f74..3308fe7d 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -288,7 +288,7 @@ spec:
         - name: name
           value: source-build-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:7a36cc284c5932c18e117fe5995f3246b5dcc11ec742b66a2f9ae710034b064f
+          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a48c950350c5e9945cc4ad6bfad7fc653aa437c9eff74a25fd1d42fda4fe344d
         - name: kind
           value: task
         resolver: bundles
@@ -361,7 +361,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:51ee3ca7b8142f39a2861ed0f94f67e02c538e3b7e57de56ed301fbb9774aa12
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:365c65ed8dfbd83c4a49300dcb9c74c5c3f027efec0be1a1f0baa9633c29b249
         - name: kind
           value: task
         resolver: bundles

From 0ec766b671588024220305a91759c7c70f89e418 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Sun, 7 Sep 2025 11:59:55 +0000
Subject: [PATCH 38/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index da0970c7..31a4b96e 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -597,7 +597,7 @@ spec:
         - name: name
           value: rpms-signature-scan
         - name: bundle
-          value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:e127e0e0a5aab1364b560436594fe7ed67abcd5f8d6dd3ef14ac1f35cf81078c
+          value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:49ff6d117c3e9dc3966d1244e118e168b3501742ec14c3a4161a276ff48d04d5
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 3308fe7d..6d349c6d 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -594,7 +594,7 @@ spec:
         - name: name
           value: rpms-signature-scan
         - name: bundle
-          value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:e127e0e0a5aab1364b560436594fe7ed67abcd5f8d6dd3ef14ac1f35cf81078c
+          value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:49ff6d117c3e9dc3966d1244e118e168b3501742ec14c3a4161a276ff48d04d5
         - name: kind
           value: task
         resolver: bundles

From 381289db751685867a5b3418c68e050190857b1e Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Tue, 9 Sep 2025 18:27:30 +0000
Subject: [PATCH 39/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 31a4b96e..869ba60a 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -364,7 +364,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:365c65ed8dfbd83c4a49300dcb9c74c5c3f027efec0be1a1f0baa9633c29b249
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9f93749cfc4f665d0c1b8cd99d16ed90514e795d18d5d27b43d504bddeed3690
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 6d349c6d..fdb1d143 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -361,7 +361,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:365c65ed8dfbd83c4a49300dcb9c74c5c3f027efec0be1a1f0baa9633c29b249
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9f93749cfc4f665d0c1b8cd99d16ed90514e795d18d5d27b43d504bddeed3690
         - name: kind
           value: task
         resolver: bundles

From 461e1b2f8fd37ea051493904a540e16d5d1f6677 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Wed, 10 Sep 2025 07:22:29 +0000
Subject: [PATCH 40/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 869ba60a..fa25ec18 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -557,7 +557,7 @@ spec:
         - name: name
           value: apply-tags
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:e0de426d492e195f59c99d2ea1ca0df7bfb8c689f5d1468fe7f70eb8684b8d02
+          value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:f44be1bf0262471f2f503f5e19da5f0628dcaf968c86272a2ad6b4871e708448
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index fdb1d143..fe79246b 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -554,7 +554,7 @@ spec:
         - name: name
           value: apply-tags
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:e0de426d492e195f59c99d2ea1ca0df7bfb8c689f5d1468fe7f70eb8684b8d02
+          value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:f44be1bf0262471f2f503f5e19da5f0628dcaf968c86272a2ad6b4871e708448
         - name: kind
           value: task
         resolver: bundles

From 8cd2f3e57dc13c32ac2dafe3fd8d8ad1cac51e50 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Wed, 10 Sep 2025 17:33:08 +0000
Subject: [PATCH 41/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 11 ++++++++---
 .tekton/cert-manager-operator-1-17-push.yaml         | 11 ++++++++---
 2 files changed, 16 insertions(+), 6 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index fa25ec18..e1e2cfc1 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -186,7 +186,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:0b58e5132333dd3b710ef9c18ecebe0d5e5b22066ba56481d34431c989cb21dd
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:b89fb66464d0069dd72ef070c8c2c16d79c4200702d8f91e20bfe46e0aa0ae8d
         - name: kind
           value: task
         resolver: bundles
@@ -326,7 +326,12 @@ spec:
         operator: in
         values:
         - "false"
-    - name: clair-scan
+    - matrix:
+        params:
+        - name: image-platform
+          value:
+          - $(params.build-platforms)
+      name: clair-scan
       params:
       - name: image-digest
         value: $(tasks.build-image-index.results.IMAGE_DIGEST)
@@ -339,7 +344,7 @@ spec:
         - name: name
           value: clair-scan
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:893ffa3ce26b061e21bb4d8db9ef7ed4ddd4044fe7aa5451ef391034da3ff759
+          value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:a7cc183967f89c4ac100d04ab8f81e54733beee60a0528208107c9a22d3c43af
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index fe79246b..e3d86a15 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -183,7 +183,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:0b58e5132333dd3b710ef9c18ecebe0d5e5b22066ba56481d34431c989cb21dd
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:b89fb66464d0069dd72ef070c8c2c16d79c4200702d8f91e20bfe46e0aa0ae8d
         - name: kind
           value: task
         resolver: bundles
@@ -323,7 +323,12 @@ spec:
         operator: in
         values:
         - "false"
-    - name: clair-scan
+    - matrix:
+        params:
+        - name: image-platform
+          value:
+          - $(params.build-platforms)
+      name: clair-scan
       params:
       - name: image-digest
         value: $(tasks.build-image-index.results.IMAGE_DIGEST)
@@ -336,7 +341,7 @@ spec:
         - name: name
           value: clair-scan
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:893ffa3ce26b061e21bb4d8db9ef7ed4ddd4044fe7aa5451ef391034da3ff759
+          value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:a7cc183967f89c4ac100d04ab8f81e54733beee60a0528208107c9a22d3c43af
         - name: kind
           value: task
         resolver: bundles

From a851bebf358a49d21597ba3c057f7580301fef21 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Wed, 10 Sep 2025 22:25:32 +0000
Subject: [PATCH 42/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index e1e2cfc1..86538afa 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -369,7 +369,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9f93749cfc4f665d0c1b8cd99d16ed90514e795d18d5d27b43d504bddeed3690
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:dae8e28761cee4ab0baf04ab9f8f1a4b3cee3c7decf461fda2bacc5c01652a60
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index e3d86a15..38c31784 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -366,7 +366,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9f93749cfc4f665d0c1b8cd99d16ed90514e795d18d5d27b43d504bddeed3690
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:dae8e28761cee4ab0baf04ab9f8f1a4b3cee3c7decf461fda2bacc5c01652a60
         - name: kind
           value: task
         resolver: bundles

From 0a9f0e1093911f99b70531aed927459be25f4c2c Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Thu, 11 Sep 2025 13:50:01 +0000
Subject: [PATCH 43/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 12 ++++++------
 .tekton/cert-manager-operator-1-17-push.yaml         | 12 ++++++------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 86538afa..e7964fbc 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -136,7 +136,7 @@ spec:
         - name: name
           value: init
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ded314206f09712b2116deb050b774ae7efef9ab243794334c8e616871a3ffa5
+          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ec962d0be18f36ca7d331c99bf243800f569fc0a2ea6f8c8c3d3a574b71c44dc
         - name: kind
           value: task
         resolver: bundles
@@ -157,7 +157,7 @@ spec:
         - name: name
           value: git-clone-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:4a601aeec58a1dd89c271e728fd8f0d84777825b46940c3aec27f15bab3edacf
+          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:efcce59f226b1426f7685917e41a50b73478f38fe9ac56c98f1e961effd4b6f0
         - name: kind
           value: task
         resolver: bundles
@@ -236,7 +236,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:252e5c94fb2375c43bdfd4b65097d246f4f37392956b08e5c38f366623a0b9ce
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:7ff1a2e486924478e7724005464d60dab9a85e2ae4734818057ece3845797509
         - name: kind
           value: task
         resolver: bundles
@@ -291,7 +291,7 @@ spec:
         - name: name
           value: source-build-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a48c950350c5e9945cc4ad6bfad7fc653aa437c9eff74a25fd1d42fda4fe344d
+          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a54c27a0d8f913c787755422a09c4561971b506a043d872b5b07af8123ef0f41
         - name: kind
           value: task
         resolver: bundles
@@ -395,7 +395,7 @@ spec:
         - name: name
           value: sast-snyk-check-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:e371aa09c65ab309138b4aeae9ea4dd93f83119c5cc61e9f2057fe5bb518fbe9
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:783f5de1b4def2fb3fad20b914f4b3afee46ffb8f652114946e321ef3fa86449
         - name: kind
           value: task
         resolver: bundles
@@ -585,7 +585,7 @@ spec:
         - name: name
           value: push-dockerfile-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:235ef6e835de8171c07b8a7f8947d0b40bfcff999e1ff3cb6ddd9acc65c48430
+          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:06529ba66b37bdc1f55590359aa849bc570b4e9c110c983e27f07081dc09a12b
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 38c31784..7bfcf7f9 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -133,7 +133,7 @@ spec:
         - name: name
           value: init
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ded314206f09712b2116deb050b774ae7efef9ab243794334c8e616871a3ffa5
+          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ec962d0be18f36ca7d331c99bf243800f569fc0a2ea6f8c8c3d3a574b71c44dc
         - name: kind
           value: task
         resolver: bundles
@@ -154,7 +154,7 @@ spec:
         - name: name
           value: git-clone-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:4a601aeec58a1dd89c271e728fd8f0d84777825b46940c3aec27f15bab3edacf
+          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:efcce59f226b1426f7685917e41a50b73478f38fe9ac56c98f1e961effd4b6f0
         - name: kind
           value: task
         resolver: bundles
@@ -233,7 +233,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:252e5c94fb2375c43bdfd4b65097d246f4f37392956b08e5c38f366623a0b9ce
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:7ff1a2e486924478e7724005464d60dab9a85e2ae4734818057ece3845797509
         - name: kind
           value: task
         resolver: bundles
@@ -288,7 +288,7 @@ spec:
         - name: name
           value: source-build-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a48c950350c5e9945cc4ad6bfad7fc653aa437c9eff74a25fd1d42fda4fe344d
+          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a54c27a0d8f913c787755422a09c4561971b506a043d872b5b07af8123ef0f41
         - name: kind
           value: task
         resolver: bundles
@@ -392,7 +392,7 @@ spec:
         - name: name
           value: sast-snyk-check-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:e371aa09c65ab309138b4aeae9ea4dd93f83119c5cc61e9f2057fe5bb518fbe9
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:783f5de1b4def2fb3fad20b914f4b3afee46ffb8f652114946e321ef3fa86449
         - name: kind
           value: task
         resolver: bundles
@@ -582,7 +582,7 @@ spec:
         - name: name
           value: push-dockerfile-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:235ef6e835de8171c07b8a7f8947d0b40bfcff999e1ff3cb6ddd9acc65c48430
+          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:06529ba66b37bdc1f55590359aa849bc570b4e9c110c983e27f07081dc09a12b
         - name: kind
           value: task
         resolver: bundles

From c6382e3a08aff70356d2311d8bf580a9d7ed05cb Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Fri, 12 Sep 2025 00:12:31 +0000
Subject: [PATCH 44/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index e7964fbc..28450e61 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -186,7 +186,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:b89fb66464d0069dd72ef070c8c2c16d79c4200702d8f91e20bfe46e0aa0ae8d
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:d08e349032c57367d543c0bbd070386709614ade1db8e5eddeab29b1338f6653
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 7bfcf7f9..1de323cd 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -183,7 +183,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:b89fb66464d0069dd72ef070c8c2c16d79c4200702d8f91e20bfe46e0aa0ae8d
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:d08e349032c57367d543c0bbd070386709614ade1db8e5eddeab29b1338f6653
         - name: kind
           value: task
         resolver: bundles

From ee240ae9ff32cc552a8d33795f695b626c9d0339 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Fri, 12 Sep 2025 20:34:59 +0000
Subject: [PATCH 45/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 28450e61..b6242f0c 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -291,7 +291,7 @@ spec:
         - name: name
           value: source-build-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a54c27a0d8f913c787755422a09c4561971b506a043d872b5b07af8123ef0f41
+          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:21d33596cf7ff61cab38b68caf578e55509748962bf6f4030bf1dfb8cd68a257
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 1de323cd..e1532893 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -288,7 +288,7 @@ spec:
         - name: name
           value: source-build-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a54c27a0d8f913c787755422a09c4561971b506a043d872b5b07af8123ef0f41
+          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:21d33596cf7ff61cab38b68caf578e55509748962bf6f4030bf1dfb8cd68a257
         - name: kind
           value: task
         resolver: bundles

From 8e792fe0b70b5607b1a9d2f64df78ad42bc5f7a0 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Mon, 15 Sep 2025 09:48:32 +0000
Subject: [PATCH 46/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index b6242f0c..78cf1b79 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -186,7 +186,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:d08e349032c57367d543c0bbd070386709614ade1db8e5eddeab29b1338f6653
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:098322d6b789824f716f2d9caca1862d4afdc083ebaaee61aadd22a8c179480a
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index e1532893..498c8d34 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -183,7 +183,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:d08e349032c57367d543c0bbd070386709614ade1db8e5eddeab29b1338f6653
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:098322d6b789824f716f2d9caca1862d4afdc083ebaaee61aadd22a8c179480a
         - name: kind
           value: task
         resolver: bundles

From 83f9902794fff11d85fd10340db1b393b665df4b Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Tue, 16 Sep 2025 16:21:35 +0000
Subject: [PATCH 47/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 4 +++-
 .tekton/cert-manager-operator-1-17-push.yaml         | 4 +++-
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 78cf1b79..9cd74c8e 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -223,6 +223,8 @@ spec:
         value: $(params.build-args-file)
       - name: PRIVILEGED_NESTED
         value: $(params.privileged-nested)
+      - name: SOURCE_URL
+        value: $(tasks.clone-repository.results.url)
       - name: SOURCE_ARTIFACT
         value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
       - name: CACHI2_ARTIFACT
@@ -236,7 +238,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:7ff1a2e486924478e7724005464d60dab9a85e2ae4734818057ece3845797509
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:c1bd994e10b284d10e3713914f897f03e751588ae2a2f9bdfc873136fec4b641
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 498c8d34..37601b52 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -220,6 +220,8 @@ spec:
         value: $(params.build-args-file)
       - name: PRIVILEGED_NESTED
         value: $(params.privileged-nested)
+      - name: SOURCE_URL
+        value: $(tasks.clone-repository.results.url)
       - name: SOURCE_ARTIFACT
         value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
       - name: CACHI2_ARTIFACT
@@ -233,7 +235,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:7ff1a2e486924478e7724005464d60dab9a85e2ae4734818057ece3845797509
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:c1bd994e10b284d10e3713914f897f03e751588ae2a2f9bdfc873136fec4b641
         - name: kind
           value: task
         resolver: bundles

From 68422afc4ef66ae2f7567070e71dda5f3f8ec763 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Tue, 16 Sep 2025 18:01:01 +0000
Subject: [PATCH 48/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 9cd74c8e..85c4191b 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -238,7 +238,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:c1bd994e10b284d10e3713914f897f03e751588ae2a2f9bdfc873136fec4b641
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:312a42ce2fe4b59fb9bdd5ee227e05fdff22a2346bc3c9c0ec62d2b0214a2788
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 37601b52..3b81cc8b 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -235,7 +235,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:c1bd994e10b284d10e3713914f897f03e751588ae2a2f9bdfc873136fec4b641
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:312a42ce2fe4b59fb9bdd5ee227e05fdff22a2346bc3c9c0ec62d2b0214a2788
         - name: kind
           value: task
         resolver: bundles

From 8f2d2a372d132acb94c6e6cfdb5375783ab75656 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Thu, 18 Sep 2025 01:25:14 +0000
Subject: [PATCH 49/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 85c4191b..e7f636ab 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -238,7 +238,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:312a42ce2fe4b59fb9bdd5ee227e05fdff22a2346bc3c9c0ec62d2b0214a2788
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:ec87447b59e05ca85b7ae33b01cfc585b34aacf95b4fed5e705e4f5a65eee141
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 3b81cc8b..af926798 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -235,7 +235,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:312a42ce2fe4b59fb9bdd5ee227e05fdff22a2346bc3c9c0ec62d2b0214a2788
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:ec87447b59e05ca85b7ae33b01cfc585b34aacf95b4fed5e705e4f5a65eee141
         - name: kind
           value: task
         resolver: bundles

From 978abfa2f135f6431cedd7c0f4182f488998a1c8 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Thu, 18 Sep 2025 10:53:04 +0000
Subject: [PATCH 50/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 10 +++++-----
 .tekton/cert-manager-operator-1-17-push.yaml         | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index e7f636ab..6fa0449e 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -157,7 +157,7 @@ spec:
         - name: name
           value: git-clone-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:efcce59f226b1426f7685917e41a50b73478f38fe9ac56c98f1e961effd4b6f0
+          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:3f1b468066b301083d8550e036f5a654fcb064810bd29eb06fec6d8ad3e35b9c
         - name: kind
           value: task
         resolver: bundles
@@ -238,7 +238,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:ec87447b59e05ca85b7ae33b01cfc585b34aacf95b4fed5e705e4f5a65eee141
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:932e0493c1ea791cadc241018c32efefd9141b154e574b038b37d75b2c5480ad
         - name: kind
           value: task
         resolver: bundles
@@ -267,7 +267,7 @@ spec:
         - name: name
           value: build-image-index
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:ba7fbed5c4862968c1a77d6b90d5bdd497925ab1de41b859c027dd5c3069cd3e
+          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:8e5dfb2fac011148f8715bbe0b99415f88297683d269eae0dfcad52562195d45
         - name: kind
           value: task
         resolver: bundles
@@ -293,7 +293,7 @@ spec:
         - name: name
           value: source-build-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:21d33596cf7ff61cab38b68caf578e55509748962bf6f4030bf1dfb8cd68a257
+          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:b0d6cb28a23f20db4f5cf78ed78ae3a91b9a5adfe989696ed0bbc63840a485b6
         - name: kind
           value: task
         resolver: bundles
@@ -587,7 +587,7 @@ spec:
         - name: name
           value: push-dockerfile-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:06529ba66b37bdc1f55590359aa849bc570b4e9c110c983e27f07081dc09a12b
+          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:49f778479f468e71c2cfef722e96aa813d7ef98bde8a612e1bf1a13cd70849ec
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index af926798..0a0f1e3b 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -154,7 +154,7 @@ spec:
         - name: name
           value: git-clone-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:efcce59f226b1426f7685917e41a50b73478f38fe9ac56c98f1e961effd4b6f0
+          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:3f1b468066b301083d8550e036f5a654fcb064810bd29eb06fec6d8ad3e35b9c
         - name: kind
           value: task
         resolver: bundles
@@ -235,7 +235,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:ec87447b59e05ca85b7ae33b01cfc585b34aacf95b4fed5e705e4f5a65eee141
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:932e0493c1ea791cadc241018c32efefd9141b154e574b038b37d75b2c5480ad
         - name: kind
           value: task
         resolver: bundles
@@ -264,7 +264,7 @@ spec:
         - name: name
           value: build-image-index
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:ba7fbed5c4862968c1a77d6b90d5bdd497925ab1de41b859c027dd5c3069cd3e
+          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:8e5dfb2fac011148f8715bbe0b99415f88297683d269eae0dfcad52562195d45
         - name: kind
           value: task
         resolver: bundles
@@ -290,7 +290,7 @@ spec:
         - name: name
           value: source-build-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:21d33596cf7ff61cab38b68caf578e55509748962bf6f4030bf1dfb8cd68a257
+          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:b0d6cb28a23f20db4f5cf78ed78ae3a91b9a5adfe989696ed0bbc63840a485b6
         - name: kind
           value: task
         resolver: bundles
@@ -584,7 +584,7 @@ spec:
         - name: name
           value: push-dockerfile-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:06529ba66b37bdc1f55590359aa849bc570b4e9c110c983e27f07081dc09a12b
+          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:49f778479f468e71c2cfef722e96aa813d7ef98bde8a612e1bf1a13cd70849ec
         - name: kind
           value: task
         resolver: bundles

From 5f8b5a1eb23b952682e64eb1d531a111f8544e6f Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Thu, 18 Sep 2025 20:31:11 +0000
Subject: [PATCH 51/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 6fa0449e..5c1f291a 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -238,7 +238,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:932e0493c1ea791cadc241018c32efefd9141b154e574b038b37d75b2c5480ad
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:08bbee8bda1e6d0f7a4690a494f0a2713e0279c75412402a28008a8aa34283ca
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 0a0f1e3b..fafd3da8 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -235,7 +235,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:932e0493c1ea791cadc241018c32efefd9141b154e574b038b37d75b2c5480ad
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:08bbee8bda1e6d0f7a4690a494f0a2713e0279c75412402a28008a8aa34283ca
         - name: kind
           value: task
         resolver: bundles

From ee1a84140ad38ef97cbffaa317cf23653bb03889 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Fri, 19 Sep 2025 12:28:51 +0000
Subject: [PATCH 52/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 5c1f291a..10aec53a 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -238,7 +238,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:08bbee8bda1e6d0f7a4690a494f0a2713e0279c75412402a28008a8aa34283ca
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:17a0b093c9e9d21e9e374c60a88eb293a0fa57e4e2b67baf20ccac9735aa20ff
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index fafd3da8..003ab1a1 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -235,7 +235,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:08bbee8bda1e6d0f7a4690a494f0a2713e0279c75412402a28008a8aa34283ca
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:17a0b093c9e9d21e9e374c60a88eb293a0fa57e4e2b67baf20ccac9735aa20ff
         - name: kind
           value: task
         resolver: bundles

From 81ecdd24ce6780dcb3e3ab6e971c8600da132e62 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Tue, 23 Sep 2025 15:56:29 +0000
Subject: [PATCH 53/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 4 ++--
 .tekton/cert-manager-operator-1-17-push.yaml         | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 10aec53a..49c08e6f 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -238,7 +238,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:17a0b093c9e9d21e9e374c60a88eb293a0fa57e4e2b67baf20ccac9735aa20ff
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:a60e433e02bfda6811719690edbf1e924820d107ad658c8a9690498d4c7e9c7b
         - name: kind
           value: task
         resolver: bundles
@@ -267,7 +267,7 @@ spec:
         - name: name
           value: build-image-index
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:8e5dfb2fac011148f8715bbe0b99415f88297683d269eae0dfcad52562195d45
+          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:79784d53749584bc5a8de32142ec4e2f01cdbf42c20d94e59280e0b927c8597d
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 003ab1a1..ef5eacf5 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -235,7 +235,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:17a0b093c9e9d21e9e374c60a88eb293a0fa57e4e2b67baf20ccac9735aa20ff
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:a60e433e02bfda6811719690edbf1e924820d107ad658c8a9690498d4c7e9c7b
         - name: kind
           value: task
         resolver: bundles
@@ -264,7 +264,7 @@ spec:
         - name: name
           value: build-image-index
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:8e5dfb2fac011148f8715bbe0b99415f88297683d269eae0dfcad52562195d45
+          value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:79784d53749584bc5a8de32142ec4e2f01cdbf42c20d94e59280e0b927c8597d
         - name: kind
           value: task
         resolver: bundles

From 5ca370bd1927a179662c6606fef7ab6e7111755f Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Wed, 24 Sep 2025 10:28:25 +0000
Subject: [PATCH 54/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 49c08e6f..c3fd3421 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -186,7 +186,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:098322d6b789824f716f2d9caca1862d4afdc083ebaaee61aadd22a8c179480a
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:dc82a7270aace9b1c26f7e96f8ccab2752e53d32980c41a45e1733baad76cde6
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index ef5eacf5..8916d76f 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -183,7 +183,7 @@ spec:
         - name: name
           value: prefetch-dependencies-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:098322d6b789824f716f2d9caca1862d4afdc083ebaaee61aadd22a8c179480a
+          value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:dc82a7270aace9b1c26f7e96f8ccab2752e53d32980c41a45e1733baad76cde6
         - name: kind
           value: task
         resolver: bundles

From f41d379aba3337989ab4b6df1735380603284456 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Thu, 25 Sep 2025 21:58:36 +0000
Subject: [PATCH 55/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index c3fd3421..22a9d806 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -238,7 +238,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:a60e433e02bfda6811719690edbf1e924820d107ad658c8a9690498d4c7e9c7b
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:650b0bca57c626c1e82f35cdfadf44a7792230b2b992aaa9c369d615aae6590d
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 8916d76f..8d8b6ab5 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -235,7 +235,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:a60e433e02bfda6811719690edbf1e924820d107ad658c8a9690498d4c7e9c7b
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:650b0bca57c626c1e82f35cdfadf44a7792230b2b992aaa9c369d615aae6590d
         - name: kind
           value: task
         resolver: bundles

From ac3857d828dd2a5ed9d2368a753d3feb303fa54c Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Fri, 26 Sep 2025 13:47:21 +0000
Subject: [PATCH 56/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 11 ++++++++++-
 .tekton/cert-manager-operator-1-17-push.yaml         | 11 ++++++++++-
 2 files changed, 20 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 22a9d806..5f6aedbe 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -90,6 +90,11 @@ spec:
       description: Add built image into an OCI image index
       name: build-image-index
       type: string
+    - default: docker
+      description: The format for the resulting image's mediaType. Valid values are
+        oci or docker.
+      name: buildah-format
+      type: string
     - default: []
       description: Array of --build-arg values ("arg=value" strings) for buildah
       name: build-args
@@ -136,7 +141,7 @@ spec:
         - name: name
           value: init
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ec962d0be18f36ca7d331c99bf243800f569fc0a2ea6f8c8c3d3a574b71c44dc
+          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:abf231cfc5a68b56f68a8ac9bb26dca3c3e434c88dd9627c72bdec0b8c335c67
         - name: kind
           value: task
         resolver: bundles
@@ -225,6 +230,8 @@ spec:
         value: $(params.privileged-nested)
       - name: SOURCE_URL
         value: $(tasks.clone-repository.results.url)
+      - name: BUILDAH_FORMAT
+        value: $(params.buildah-format)
       - name: SOURCE_ARTIFACT
         value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
       - name: CACHI2_ARTIFACT
@@ -260,6 +267,8 @@ spec:
       - name: IMAGES
         value:
         - $(tasks.build-images.results.IMAGE_REF[*])
+      - name: BUILDAH_FORMAT
+        value: $(params.buildah-format)
       runAfter:
       - build-images
       taskRef:
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 8d8b6ab5..239b8c94 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -87,6 +87,11 @@ spec:
       description: Add built image into an OCI image index
       name: build-image-index
       type: string
+    - default: docker
+      description: The format for the resulting image's mediaType. Valid values are
+        oci or docker.
+      name: buildah-format
+      type: string
     - default: []
       description: Array of --build-arg values ("arg=value" strings) for buildah
       name: build-args
@@ -133,7 +138,7 @@ spec:
         - name: name
           value: init
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ec962d0be18f36ca7d331c99bf243800f569fc0a2ea6f8c8c3d3a574b71c44dc
+          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:abf231cfc5a68b56f68a8ac9bb26dca3c3e434c88dd9627c72bdec0b8c335c67
         - name: kind
           value: task
         resolver: bundles
@@ -222,6 +227,8 @@ spec:
         value: $(params.privileged-nested)
       - name: SOURCE_URL
         value: $(tasks.clone-repository.results.url)
+      - name: BUILDAH_FORMAT
+        value: $(params.buildah-format)
       - name: SOURCE_ARTIFACT
         value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
       - name: CACHI2_ARTIFACT
@@ -257,6 +264,8 @@ spec:
       - name: IMAGES
         value:
         - $(tasks.build-images.results.IMAGE_REF[*])
+      - name: BUILDAH_FORMAT
+        value: $(params.buildah-format)
       runAfter:
       - build-images
       taskRef:

From 94b5962e2f5f08e0401397cbb7474d76ee73804f Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Mon, 29 Sep 2025 17:34:55 +0000
Subject: [PATCH 57/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 5f6aedbe..78b36b5c 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -141,7 +141,7 @@ spec:
         - name: name
           value: init
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:abf231cfc5a68b56f68a8ac9bb26dca3c3e434c88dd9627c72bdec0b8c335c67
+          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:afc8d0af71c24285599120946b29eea2ab56663c5f49c6ca80ba12bf56ef2371
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 239b8c94..208c8c19 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -138,7 +138,7 @@ spec:
         - name: name
           value: init
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:abf231cfc5a68b56f68a8ac9bb26dca3c3e434c88dd9627c72bdec0b8c335c67
+          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:afc8d0af71c24285599120946b29eea2ab56663c5f49c6ca80ba12bf56ef2371
         - name: kind
           value: task
         resolver: bundles

From aef82e3cae67ca92fd0b533de2dee0a944d6f789 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Tue, 30 Sep 2025 15:34:12 +0000
Subject: [PATCH 58/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 78b36b5c..2caf0c20 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -141,7 +141,7 @@ spec:
         - name: name
           value: init
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:afc8d0af71c24285599120946b29eea2ab56663c5f49c6ca80ba12bf56ef2371
+          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:526a104a3342e36dad5c5e7f98c647da6b2a33897e458f772ff4afe523e0690a
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 208c8c19..04bf9e2b 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -138,7 +138,7 @@ spec:
         - name: name
           value: init
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:afc8d0af71c24285599120946b29eea2ab56663c5f49c6ca80ba12bf56ef2371
+          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:526a104a3342e36dad5c5e7f98c647da6b2a33897e458f772ff4afe523e0690a
         - name: kind
           value: task
         resolver: bundles

From e468e8b8adb2753411b5a929e87606a861d3084c Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Wed, 1 Oct 2025 23:38:05 +0000
Subject: [PATCH 59/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 2caf0c20..794ceb98 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -406,7 +406,7 @@ spec:
         - name: name
           value: sast-snyk-check-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:783f5de1b4def2fb3fad20b914f4b3afee46ffb8f652114946e321ef3fa86449
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:181d63c126e3119a9d57b8feed4eb66a875b5208c3e90724c22758e65dca8733
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 04bf9e2b..283d393f 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -403,7 +403,7 @@ spec:
         - name: name
           value: sast-snyk-check-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:783f5de1b4def2fb3fad20b914f4b3afee46ffb8f652114946e321ef3fa86449
+          value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:181d63c126e3119a9d57b8feed4eb66a875b5208c3e90724c22758e65dca8733
         - name: kind
           value: task
         resolver: bundles

From 5e6d8d564853d48d0046503d7676fb9941eb2d7b Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Fri, 3 Oct 2025 09:06:52 +0000
Subject: [PATCH 60/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 10 +++++-----
 .tekton/cert-manager-operator-1-17-push.yaml         | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 794ceb98..746bce27 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -141,7 +141,7 @@ spec:
         - name: name
           value: init
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:526a104a3342e36dad5c5e7f98c647da6b2a33897e458f772ff4afe523e0690a
+          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:bbf313b09740fb39b3343bc69ee94b2a2c21d16a9304f9b7c111c305558fc346
         - name: kind
           value: task
         resolver: bundles
@@ -162,7 +162,7 @@ spec:
         - name: name
           value: git-clone-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:3f1b468066b301083d8550e036f5a654fcb064810bd29eb06fec6d8ad3e35b9c
+          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:1144353cf608f0a44a6416a70db6408727733ff40070d382158d6f6984096d8e
         - name: kind
           value: task
         resolver: bundles
@@ -245,7 +245,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:650b0bca57c626c1e82f35cdfadf44a7792230b2b992aaa9c369d615aae6590d
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:5e59c05455619580f4383010726f7db8440ecf6959882e9053ac697dd6d277fd
         - name: kind
           value: task
         resolver: bundles
@@ -302,7 +302,7 @@ spec:
         - name: name
           value: source-build-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:b0d6cb28a23f20db4f5cf78ed78ae3a91b9a5adfe989696ed0bbc63840a485b6
+          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:36d44f2924f60da00a079a9ab7ce25ad8b2ad593c16d90509203c125ff0ccd46
         - name: kind
           value: task
         resolver: bundles
@@ -596,7 +596,7 @@ spec:
         - name: name
           value: push-dockerfile-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:49f778479f468e71c2cfef722e96aa813d7ef98bde8a612e1bf1a13cd70849ec
+          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:2bc5b3afc5de56da0f06eac60b65e86f6b861b16a63f48579fc0bac7d657e14c
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 283d393f..aa0eb34d 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -138,7 +138,7 @@ spec:
         - name: name
           value: init
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:526a104a3342e36dad5c5e7f98c647da6b2a33897e458f772ff4afe523e0690a
+          value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:bbf313b09740fb39b3343bc69ee94b2a2c21d16a9304f9b7c111c305558fc346
         - name: kind
           value: task
         resolver: bundles
@@ -159,7 +159,7 @@ spec:
         - name: name
           value: git-clone-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:3f1b468066b301083d8550e036f5a654fcb064810bd29eb06fec6d8ad3e35b9c
+          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:1144353cf608f0a44a6416a70db6408727733ff40070d382158d6f6984096d8e
         - name: kind
           value: task
         resolver: bundles
@@ -242,7 +242,7 @@ spec:
         - name: name
           value: buildah-remote-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:650b0bca57c626c1e82f35cdfadf44a7792230b2b992aaa9c369d615aae6590d
+          value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:5e59c05455619580f4383010726f7db8440ecf6959882e9053ac697dd6d277fd
         - name: kind
           value: task
         resolver: bundles
@@ -299,7 +299,7 @@ spec:
         - name: name
           value: source-build-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:b0d6cb28a23f20db4f5cf78ed78ae3a91b9a5adfe989696ed0bbc63840a485b6
+          value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:36d44f2924f60da00a079a9ab7ce25ad8b2ad593c16d90509203c125ff0ccd46
         - name: kind
           value: task
         resolver: bundles
@@ -593,7 +593,7 @@ spec:
         - name: name
           value: push-dockerfile-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:49f778479f468e71c2cfef722e96aa813d7ef98bde8a612e1bf1a13cd70849ec
+          value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:2bc5b3afc5de56da0f06eac60b65e86f6b861b16a63f48579fc0bac7d657e14c
         - name: kind
           value: task
         resolver: bundles

From 161c04943041b274874caa87d3e844eab645e267 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Fri, 3 Oct 2025 17:11:44 +0000
Subject: [PATCH 61/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 746bce27..e2230b97 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -162,7 +162,7 @@ spec:
         - name: name
           value: git-clone-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:1144353cf608f0a44a6416a70db6408727733ff40070d382158d6f6984096d8e
+          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:0d80f66610efd1f957700f61dcd5080689321b10ad544e136d58fc4673290d1b
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index aa0eb34d..d53e4cdd 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -159,7 +159,7 @@ spec:
         - name: name
           value: git-clone-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:1144353cf608f0a44a6416a70db6408727733ff40070d382158d6f6984096d8e
+          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:0d80f66610efd1f957700f61dcd5080689321b10ad544e136d58fc4673290d1b
         - name: kind
           value: task
         resolver: bundles

From 4b788b58743b8a61a2ec4e21b02f52ed3ba9821b Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Sun, 5 Oct 2025 16:03:51 +0000
Subject: [PATCH 62/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index e2230b97..d5de5bb4 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -613,7 +613,7 @@ spec:
         - name: name
           value: rpms-signature-scan
         - name: bundle
-          value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:49ff6d117c3e9dc3966d1244e118e168b3501742ec14c3a4161a276ff48d04d5
+          value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:06977232e67509e5540528ff6c3b081b23fc5bf3e40fb3e2d09a086d5c3243fc
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index d53e4cdd..4f8ec9b1 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -610,7 +610,7 @@ spec:
         - name: name
           value: rpms-signature-scan
         - name: bundle
-          value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:49ff6d117c3e9dc3966d1244e118e168b3501742ec14c3a4161a276ff48d04d5
+          value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:06977232e67509e5540528ff6c3b081b23fc5bf3e40fb3e2d09a086d5c3243fc
         - name: kind
           value: task
         resolver: bundles

From 0a67d9559dfb72c82cf1a3182ffd2c2da2593cf0 Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Mon, 6 Oct 2025 18:00:56 +0000
Subject: [PATCH 63/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index d5de5bb4..b8cdca13 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -162,7 +162,7 @@ spec:
         - name: name
           value: git-clone-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:0d80f66610efd1f957700f61dcd5080689321b10ad544e136d58fc4673290d1b
+          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:f21c34e50500edc84e4889d85fd71a80d79182b16c044adc7f5ecda021c6dfc7
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 4f8ec9b1..5b5109aa 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -159,7 +159,7 @@ spec:
         - name: name
           value: git-clone-oci-ta
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:0d80f66610efd1f957700f61dcd5080689321b10ad544e136d58fc4673290d1b
+          value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:f21c34e50500edc84e4889d85fd71a80d79182b16c044adc7f5ecda021c6dfc7
         - name: kind
           value: task
         resolver: bundles

From f575240540b991ae19b05e91f35b63f6066c744c Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Mon, 6 Oct 2025 22:09:47 +0000
Subject: [PATCH 64/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index b8cdca13..4150fc66 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -380,7 +380,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:dae8e28761cee4ab0baf04ab9f8f1a4b3cee3c7decf461fda2bacc5c01652a60
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:7db70c6cf23f39b9aad8b75285df31ed2c1213d87842cd4502ffc268808c96c6
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 5b5109aa..23f18651 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -377,7 +377,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:dae8e28761cee4ab0baf04ab9f8f1a4b3cee3c7decf461fda2bacc5c01652a60
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:7db70c6cf23f39b9aad8b75285df31ed2c1213d87842cd4502ffc268808c96c6
         - name: kind
           value: task
         resolver: bundles

From 82bc744304c08a5f2b43cacd1a5f6dea4793708d Mon Sep 17 00:00:00 2001
From: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Date: Wed, 8 Oct 2025 20:53:20 +0000
Subject: [PATCH 65/65] Red Hat Konflux update cert-manager-operator-1-17

Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
---
 .tekton/cert-manager-operator-1-17-pull-request.yaml | 2 +-
 .tekton/cert-manager-operator-1-17-push.yaml         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tekton/cert-manager-operator-1-17-pull-request.yaml b/.tekton/cert-manager-operator-1-17-pull-request.yaml
index 4150fc66..8573e0d6 100644
--- a/.tekton/cert-manager-operator-1-17-pull-request.yaml
+++ b/.tekton/cert-manager-operator-1-17-pull-request.yaml
@@ -380,7 +380,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:7db70c6cf23f39b9aad8b75285df31ed2c1213d87842cd4502ffc268808c96c6
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9568c51a5158d534248908b9b561cf67d2826ed4ea164ffd95628bb42380e6ec
         - name: kind
           value: task
         resolver: bundles
diff --git a/.tekton/cert-manager-operator-1-17-push.yaml b/.tekton/cert-manager-operator-1-17-push.yaml
index 23f18651..d21a74a1 100644
--- a/.tekton/cert-manager-operator-1-17-push.yaml
+++ b/.tekton/cert-manager-operator-1-17-push.yaml
@@ -377,7 +377,7 @@ spec:
         - name: name
           value: ecosystem-cert-preflight-checks
         - name: bundle
-          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:7db70c6cf23f39b9aad8b75285df31ed2c1213d87842cd4502ffc268808c96c6
+          value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9568c51a5158d534248908b9b561cf67d2826ed4ea164ffd95628bb42380e6ec
         - name: kind
           value: task
         resolver: bundles