From 303b030703d42ffd945fa8d13a272ec3a544f818 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 29 Aug 2025 06:19:46 +0000 Subject: [PATCH 01/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- ...rt-manager-operator-1-18-pull-request.yaml | 620 ++++++++++++++++++ .tekton/cert-manager-operator-1-18-push.yaml | 617 +++++++++++++++++ 2 files changed, 1237 insertions(+) create mode 100644 .tekton/cert-manager-operator-1-18-pull-request.yaml create mode 100644 .tekton/cert-manager-operator-1-18-push.yaml diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml new file mode 100644 index 00000000..95d2d52d --- /dev/null +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -0,0 +1,620 @@ +apiVersion: tekton.dev/v1 +kind: PipelineRun +metadata: + annotations: + build.appstudio.openshift.io/repo: https://github.com/openshift/cert-manager-operator-release?rev={{revision}} + build.appstudio.redhat.com/commit_sha: '{{revision}}' + build.appstudio.redhat.com/pull_request_number: '{{pull_request_number}}' + build.appstudio.redhat.com/target_branch: '{{target_branch}}' + pipelinesascode.tekton.dev/cancel-in-progress: "true" + pipelinesascode.tekton.dev/max-keep-runs: "3" + pipelinesascode.tekton.dev/on-cel-expression: event == "pull_request" && target_branch + == "release-1.18" + creationTimestamp: null + labels: + appstudio.openshift.io/application: cert-manager-operator-1-18 + appstudio.openshift.io/component: cert-manager-operator-1-18 + pipelines.appstudio.openshift.io/type: build + name: cert-manager-operator-1-18-on-pull-request + namespace: cert-manager-oape-tenant +spec: + params: + - name: git-url + value: '{{source_url}}' + - name: revision + value: '{{revision}}' + - name: output-image + value: quay.io/redhat-user-workloads/cert-manager-oape-tenant/cert-manager-operator-1-18/cert-manager-operator-1-18:on-pr-{{revision}} + - name: image-expires-after + value: 5d + - name: build-platforms + value: + - linux/x86_64 + - name: dockerfile + value: Containerfile.cert-manager-operator + - name: path-context + value: . + pipelineSpec: + description: | + This pipeline is ideal for building multi-arch container images from a Containerfile while maintaining trust after pipeline customization. + + _Uses `buildah` to create a multi-platform container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. This pipeline requires that the [multi platform controller](https://github.com/konflux-ci/multi-platform-controller) is deployed and configured on your Konflux instance. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks. + This pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-multi-platform-oci-ta?tab=tags)_ + params: + - description: Source Repository URL + name: git-url + type: string + - default: "" + description: Revision of the Source Repository + name: revision + type: string + - description: Fully Qualified Output Image + name: output-image + type: string + - default: . + description: Path to the source code of an application's component from where + to build image. + name: path-context + type: string + - default: Dockerfile + description: Path to the Dockerfile inside the context specified by parameter + path-context + name: dockerfile + type: string + - default: "false" + description: Force rebuild image + name: rebuild + type: string + - default: "false" + description: Skip checks against built image + name: skip-checks + type: string + - default: "false" + description: Execute the build with network isolation + name: hermetic + type: string + - default: "" + description: Build dependencies to be prefetched + name: prefetch-input + type: string + - default: "" + description: Image tag expiration time, time values could be something like + 1h, 2d, 3w for hours, days, and weeks, respectively. + name: image-expires-after + type: string + - default: "false" + description: Build a source image. + name: build-source-image + type: string + - default: "true" + description: Add built image into an OCI image index + name: build-image-index + type: string + - default: [] + description: Array of --build-arg values ("arg=value" strings) for buildah + name: build-args + type: array + - default: "" + description: Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file + name: build-args-file + type: string + - default: "false" + description: Whether to enable privileged mode, should be used only with remote + VMs + name: privileged-nested + type: string + - default: + - linux/x86_64 + description: List of platforms to build the container images on. The available + set of values is determined by the configuration of the multi-platform-controller. + name: build-platforms + type: array + results: + - description: "" + name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + - description: "" + name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - description: "" + name: CHAINS-GIT_URL + value: $(tasks.clone-repository.results.url) + - description: "" + name: CHAINS-GIT_COMMIT + value: $(tasks.clone-repository.results.commit) + tasks: + - name: init + params: + - name: image-url + value: $(params.output-image) + - name: rebuild + value: $(params.rebuild) + - name: skip-checks + value: $(params.skip-checks) + taskRef: + params: + - name: name + value: init + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ded314206f09712b2116deb050b774ae7efef9ab243794334c8e616871a3ffa5 + - name: kind + value: task + resolver: bundles + - name: clone-repository + params: + - name: url + value: $(params.git-url) + - name: revision + value: $(params.revision) + - name: ociStorage + value: $(params.output-image).git + - name: ociArtifactExpiresAfter + value: $(params.image-expires-after) + runAfter: + - init + taskRef: + params: + - name: name + value: git-clone-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:4a601aeec58a1dd89c271e728fd8f0d84777825b46940c3aec27f15bab3edacf + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + workspaces: + - name: basic-auth + workspace: git-auth + - name: prefetch-dependencies + params: + - name: input + value: $(params.prefetch-input) + - name: SOURCE_ARTIFACT + value: $(tasks.clone-repository.results.SOURCE_ARTIFACT) + - name: ociStorage + value: $(params.output-image).prefetch + - name: ociArtifactExpiresAfter + value: $(params.image-expires-after) + runAfter: + - clone-repository + taskRef: + params: + - name: name + value: prefetch-dependencies-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:22290579c9fe0b5c1689bb9023b3eddec73c285b680226d9f460346ae849a2cb + - name: kind + value: task + resolver: bundles + workspaces: + - name: git-basic-auth + workspace: git-auth + - name: netrc + workspace: netrc + - matrix: + params: + - name: PLATFORM + value: + - $(params.build-platforms) + name: build-images + params: + - name: IMAGE + value: $(params.output-image) + - name: DOCKERFILE + value: $(params.dockerfile) + - name: CONTEXT + value: $(params.path-context) + - name: HERMETIC + value: $(params.hermetic) + - name: PREFETCH_INPUT + value: $(params.prefetch-input) + - name: IMAGE_EXPIRES_AFTER + value: $(params.image-expires-after) + - name: COMMIT_SHA + value: $(tasks.clone-repository.results.commit) + - name: BUILD_ARGS + value: + - $(params.build-args[*]) + - name: BUILD_ARGS_FILE + value: $(params.build-args-file) + - name: PRIVILEGED_NESTED + value: $(params.privileged-nested) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + - name: IMAGE_APPEND_PLATFORM + value: "true" + runAfter: + - prefetch-dependencies + taskRef: + params: + - name: name + value: buildah-remote-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:cd9ef1eb119700a6883edcf93fd7c71dc33ee43467f3c2728b2a002c77915e8d + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + - name: build-image-index + params: + - name: IMAGE + value: $(params.output-image) + - name: COMMIT_SHA + value: $(tasks.clone-repository.results.commit) + - name: IMAGE_EXPIRES_AFTER + value: $(params.image-expires-after) + - name: ALWAYS_BUILD_INDEX + value: $(params.build-image-index) + - name: IMAGES + value: + - $(tasks.build-images.results.IMAGE_REF[*]) + runAfter: + - build-images + taskRef: + params: + - name: name + value: build-image-index + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:ba7fbed5c4862968c1a77d6b90d5bdd497925ab1de41b859c027dd5c3069cd3e + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + - name: build-source-image + params: + - name: BINARY_IMAGE + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: BINARY_IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: source-build-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:7a36cc284c5932c18e117fe5995f3246b5dcc11ec742b66a2f9ae710034b064f + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + - input: $(params.build-source-image) + operator: in + values: + - "true" + - name: deprecated-base-image-check + params: + - name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: deprecated-image-check + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:1d07d16810c26713f3d875083924d93697900147364360587ccb5a63f2c31012 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: clair-scan + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: clair-scan + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:893ffa3ce26b061e21bb4d8db9ef7ed4ddd4044fe7aa5451ef391034da3ff759 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - matrix: + params: + - name: platform + value: + - $(params.build-platforms) + name: ecosystem-cert-preflight-checks + params: + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: ecosystem-cert-preflight-checks + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:e106b6182e72c8f34ceae3f56b0b1aa2b4dc60f573877d9e51c3791029a7acb6 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-snyk-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: sast-snyk-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:322c86ad5ee252c04440184d9f5046d276415148cb6bfaf571be1b102101786b + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - matrix: + params: + - name: image-arch + value: + - $(params.build-platforms) + name: clamav-scan + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: clamav-scan + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:b0bd59748cda4a7abf311e4f448e6c1d00c6b6d8c0ecc1c2eb33e08dc0e0b802 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-coverity-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE + value: $(params.output-image) + - name: DOCKERFILE + value: $(params.dockerfile) + - name: CONTEXT + value: $(params.path-context) + - name: HERMETIC + value: $(params.hermetic) + - name: PREFETCH_INPUT + value: $(params.prefetch-input) + - name: IMAGE_EXPIRES_AFTER + value: $(params.image-expires-after) + - name: COMMIT_SHA + value: $(tasks.clone-repository.results.commit) + - name: BUILD_ARGS + value: + - $(params.build-args[*]) + - name: BUILD_ARGS_FILE + value: $(params.build-args-file) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - coverity-availability-check + taskRef: + params: + - name: name + value: sast-coverity-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:cdbe1a968676e4f5519b082bf1e27a4cdcf66dd60af66dbc26b3e604f957f7e9 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - input: $(tasks.coverity-availability-check.results.STATUS) + operator: in + values: + - success + - name: coverity-availability-check + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: coverity-availability-check + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check:0.2@sha256:db2b267dc15e4ed17f704ee91b8e9b38068e1a35b1018a328fdca621819d74c6 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-shell-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: sast-shell-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:bf7bdde00b7212f730c1356672290af6f38d070da2c8a316987b5c32fd49e0b9 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-unicode-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: sast-unicode-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.3@sha256:a2bde66f6b4164620298c7d709b8f08515409404000fa1dc2260d2508b135651 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: apply-tags + params: + - name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: apply-tags + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:e0de426d492e195f59c99d2ea1ca0df7bfb8c689f5d1468fe7f70eb8684b8d02 + - name: kind + value: task + resolver: bundles + - name: push-dockerfile + params: + - name: IMAGE + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: DOCKERFILE + value: $(params.dockerfile) + - name: CONTEXT + value: $(params.path-context) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: push-dockerfile-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:235ef6e835de8171c07b8a7f8947d0b40bfcff999e1ff3cb6ddd9acc65c48430 + - name: kind + value: task + resolver: bundles + - name: rpms-signature-scan + params: + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: rpms-signature-scan + - name: bundle + value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:e127e0e0a5aab1364b560436594fe7ed67abcd5f8d6dd3ef14ac1f35cf81078c + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + workspaces: + - name: git-auth + optional: true + - name: netrc + optional: true + taskRunTemplate: + serviceAccountName: build-pipeline-cert-manager-operator-1-18 + workspaces: + - name: git-auth + secret: + secretName: '{{ git_auth_secret }}' +status: {} diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml new file mode 100644 index 00000000..bac18ae3 --- /dev/null +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -0,0 +1,617 @@ +apiVersion: tekton.dev/v1 +kind: PipelineRun +metadata: + annotations: + build.appstudio.openshift.io/repo: https://github.com/openshift/cert-manager-operator-release?rev={{revision}} + build.appstudio.redhat.com/commit_sha: '{{revision}}' + build.appstudio.redhat.com/target_branch: '{{target_branch}}' + pipelinesascode.tekton.dev/cancel-in-progress: "false" + pipelinesascode.tekton.dev/max-keep-runs: "3" + pipelinesascode.tekton.dev/on-cel-expression: event == "push" && target_branch + == "release-1.18" + creationTimestamp: null + labels: + appstudio.openshift.io/application: cert-manager-operator-1-18 + appstudio.openshift.io/component: cert-manager-operator-1-18 + pipelines.appstudio.openshift.io/type: build + name: cert-manager-operator-1-18-on-push + namespace: cert-manager-oape-tenant +spec: + params: + - name: git-url + value: '{{source_url}}' + - name: revision + value: '{{revision}}' + - name: output-image + value: quay.io/redhat-user-workloads/cert-manager-oape-tenant/cert-manager-operator-1-18/cert-manager-operator-1-18:{{revision}} + - name: build-platforms + value: + - linux/x86_64 + - name: dockerfile + value: Containerfile.cert-manager-operator + - name: path-context + value: . + pipelineSpec: + description: | + This pipeline is ideal for building multi-arch container images from a Containerfile while maintaining trust after pipeline customization. + + _Uses `buildah` to create a multi-platform container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. This pipeline requires that the [multi platform controller](https://github.com/konflux-ci/multi-platform-controller) is deployed and configured on your Konflux instance. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks. + This pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-multi-platform-oci-ta?tab=tags)_ + params: + - description: Source Repository URL + name: git-url + type: string + - default: "" + description: Revision of the Source Repository + name: revision + type: string + - description: Fully Qualified Output Image + name: output-image + type: string + - default: . + description: Path to the source code of an application's component from where + to build image. + name: path-context + type: string + - default: Dockerfile + description: Path to the Dockerfile inside the context specified by parameter + path-context + name: dockerfile + type: string + - default: "false" + description: Force rebuild image + name: rebuild + type: string + - default: "false" + description: Skip checks against built image + name: skip-checks + type: string + - default: "false" + description: Execute the build with network isolation + name: hermetic + type: string + - default: "" + description: Build dependencies to be prefetched + name: prefetch-input + type: string + - default: "" + description: Image tag expiration time, time values could be something like + 1h, 2d, 3w for hours, days, and weeks, respectively. + name: image-expires-after + type: string + - default: "false" + description: Build a source image. + name: build-source-image + type: string + - default: "true" + description: Add built image into an OCI image index + name: build-image-index + type: string + - default: [] + description: Array of --build-arg values ("arg=value" strings) for buildah + name: build-args + type: array + - default: "" + description: Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file + name: build-args-file + type: string + - default: "false" + description: Whether to enable privileged mode, should be used only with remote + VMs + name: privileged-nested + type: string + - default: + - linux/x86_64 + description: List of platforms to build the container images on. The available + set of values is determined by the configuration of the multi-platform-controller. + name: build-platforms + type: array + results: + - description: "" + name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + - description: "" + name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - description: "" + name: CHAINS-GIT_URL + value: $(tasks.clone-repository.results.url) + - description: "" + name: CHAINS-GIT_COMMIT + value: $(tasks.clone-repository.results.commit) + tasks: + - name: init + params: + - name: image-url + value: $(params.output-image) + - name: rebuild + value: $(params.rebuild) + - name: skip-checks + value: $(params.skip-checks) + taskRef: + params: + - name: name + value: init + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ded314206f09712b2116deb050b774ae7efef9ab243794334c8e616871a3ffa5 + - name: kind + value: task + resolver: bundles + - name: clone-repository + params: + - name: url + value: $(params.git-url) + - name: revision + value: $(params.revision) + - name: ociStorage + value: $(params.output-image).git + - name: ociArtifactExpiresAfter + value: $(params.image-expires-after) + runAfter: + - init + taskRef: + params: + - name: name + value: git-clone-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:4a601aeec58a1dd89c271e728fd8f0d84777825b46940c3aec27f15bab3edacf + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + workspaces: + - name: basic-auth + workspace: git-auth + - name: prefetch-dependencies + params: + - name: input + value: $(params.prefetch-input) + - name: SOURCE_ARTIFACT + value: $(tasks.clone-repository.results.SOURCE_ARTIFACT) + - name: ociStorage + value: $(params.output-image).prefetch + - name: ociArtifactExpiresAfter + value: $(params.image-expires-after) + runAfter: + - clone-repository + taskRef: + params: + - name: name + value: prefetch-dependencies-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:22290579c9fe0b5c1689bb9023b3eddec73c285b680226d9f460346ae849a2cb + - name: kind + value: task + resolver: bundles + workspaces: + - name: git-basic-auth + workspace: git-auth + - name: netrc + workspace: netrc + - matrix: + params: + - name: PLATFORM + value: + - $(params.build-platforms) + name: build-images + params: + - name: IMAGE + value: $(params.output-image) + - name: DOCKERFILE + value: $(params.dockerfile) + - name: CONTEXT + value: $(params.path-context) + - name: HERMETIC + value: $(params.hermetic) + - name: PREFETCH_INPUT + value: $(params.prefetch-input) + - name: IMAGE_EXPIRES_AFTER + value: $(params.image-expires-after) + - name: COMMIT_SHA + value: $(tasks.clone-repository.results.commit) + - name: BUILD_ARGS + value: + - $(params.build-args[*]) + - name: BUILD_ARGS_FILE + value: $(params.build-args-file) + - name: PRIVILEGED_NESTED + value: $(params.privileged-nested) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + - name: IMAGE_APPEND_PLATFORM + value: "true" + runAfter: + - prefetch-dependencies + taskRef: + params: + - name: name + value: buildah-remote-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:cd9ef1eb119700a6883edcf93fd7c71dc33ee43467f3c2728b2a002c77915e8d + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + - name: build-image-index + params: + - name: IMAGE + value: $(params.output-image) + - name: COMMIT_SHA + value: $(tasks.clone-repository.results.commit) + - name: IMAGE_EXPIRES_AFTER + value: $(params.image-expires-after) + - name: ALWAYS_BUILD_INDEX + value: $(params.build-image-index) + - name: IMAGES + value: + - $(tasks.build-images.results.IMAGE_REF[*]) + runAfter: + - build-images + taskRef: + params: + - name: name + value: build-image-index + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:ba7fbed5c4862968c1a77d6b90d5bdd497925ab1de41b859c027dd5c3069cd3e + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + - name: build-source-image + params: + - name: BINARY_IMAGE + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: BINARY_IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: source-build-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:7a36cc284c5932c18e117fe5995f3246b5dcc11ec742b66a2f9ae710034b064f + - name: kind + value: task + resolver: bundles + when: + - input: $(tasks.init.results.build) + operator: in + values: + - "true" + - input: $(params.build-source-image) + operator: in + values: + - "true" + - name: deprecated-base-image-check + params: + - name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: deprecated-image-check + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:1d07d16810c26713f3d875083924d93697900147364360587ccb5a63f2c31012 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: clair-scan + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: clair-scan + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:893ffa3ce26b061e21bb4d8db9ef7ed4ddd4044fe7aa5451ef391034da3ff759 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - matrix: + params: + - name: platform + value: + - $(params.build-platforms) + name: ecosystem-cert-preflight-checks + params: + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: ecosystem-cert-preflight-checks + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:e106b6182e72c8f34ceae3f56b0b1aa2b4dc60f573877d9e51c3791029a7acb6 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-snyk-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: sast-snyk-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:322c86ad5ee252c04440184d9f5046d276415148cb6bfaf571be1b102101786b + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - matrix: + params: + - name: image-arch + value: + - $(params.build-platforms) + name: clamav-scan + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: clamav-scan + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:b0bd59748cda4a7abf311e4f448e6c1d00c6b6d8c0ecc1c2eb33e08dc0e0b802 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-coverity-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE + value: $(params.output-image) + - name: DOCKERFILE + value: $(params.dockerfile) + - name: CONTEXT + value: $(params.path-context) + - name: HERMETIC + value: $(params.hermetic) + - name: PREFETCH_INPUT + value: $(params.prefetch-input) + - name: IMAGE_EXPIRES_AFTER + value: $(params.image-expires-after) + - name: COMMIT_SHA + value: $(tasks.clone-repository.results.commit) + - name: BUILD_ARGS + value: + - $(params.build-args[*]) + - name: BUILD_ARGS_FILE + value: $(params.build-args-file) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - coverity-availability-check + taskRef: + params: + - name: name + value: sast-coverity-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:cdbe1a968676e4f5519b082bf1e27a4cdcf66dd60af66dbc26b3e604f957f7e9 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - input: $(tasks.coverity-availability-check.results.STATUS) + operator: in + values: + - success + - name: coverity-availability-check + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: coverity-availability-check + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check:0.2@sha256:db2b267dc15e4ed17f704ee91b8e9b38068e1a35b1018a328fdca621819d74c6 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-shell-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: sast-shell-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:bf7bdde00b7212f730c1356672290af6f38d070da2c8a316987b5c32fd49e0b9 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: sast-unicode-check + params: + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + - name: CACHI2_ARTIFACT + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: sast-unicode-check-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.3@sha256:a2bde66f6b4164620298c7d709b8f08515409404000fa1dc2260d2508b135651 + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + - name: apply-tags + params: + - name: IMAGE_URL + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: apply-tags + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:e0de426d492e195f59c99d2ea1ca0df7bfb8c689f5d1468fe7f70eb8684b8d02 + - name: kind + value: task + resolver: bundles + - name: push-dockerfile + params: + - name: IMAGE + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: IMAGE_DIGEST + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + - name: DOCKERFILE + value: $(params.dockerfile) + - name: CONTEXT + value: $(params.path-context) + - name: SOURCE_ARTIFACT + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: push-dockerfile-oci-ta + - name: bundle + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:235ef6e835de8171c07b8a7f8947d0b40bfcff999e1ff3cb6ddd9acc65c48430 + - name: kind + value: task + resolver: bundles + - name: rpms-signature-scan + params: + - name: image-url + value: $(tasks.build-image-index.results.IMAGE_URL) + - name: image-digest + value: $(tasks.build-image-index.results.IMAGE_DIGEST) + runAfter: + - build-image-index + taskRef: + params: + - name: name + value: rpms-signature-scan + - name: bundle + value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:e127e0e0a5aab1364b560436594fe7ed67abcd5f8d6dd3ef14ac1f35cf81078c + - name: kind + value: task + resolver: bundles + when: + - input: $(params.skip-checks) + operator: in + values: + - "false" + workspaces: + - name: git-auth + optional: true + - name: netrc + optional: true + taskRunTemplate: + serviceAccountName: build-pipeline-cert-manager-operator-1-18 + workspaces: + - name: git-auth + secret: + secretName: '{{ git_auth_secret }}' +status: {} From 5f409cbebbe34393d8f7628ece04abb5b4c71c88 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Mon, 1 Sep 2025 12:10:59 +0000 Subject: [PATCH 02/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index 95d2d52d..687eb4d5 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -186,7 +186,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:22290579c9fe0b5c1689bb9023b3eddec73c285b680226d9f460346ae849a2cb + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:24230408f0353d339dc573aaa96d2cfee9e29b89ece931a90a7866bc772c79b7 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index bac18ae3..b60f51c6 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -183,7 +183,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:22290579c9fe0b5c1689bb9023b3eddec73c285b680226d9f460346ae849a2cb + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:24230408f0353d339dc573aaa96d2cfee9e29b89ece931a90a7866bc772c79b7 - name: kind value: task resolver: bundles From d88adf1f0c60791d870b42091042ad95e8877f8b Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Mon, 1 Sep 2025 20:48:14 +0000 Subject: [PATCH 03/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index 687eb4d5..4e736324 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -236,7 +236,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:cd9ef1eb119700a6883edcf93fd7c71dc33ee43467f3c2728b2a002c77915e8d + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:dc2f0ee60851a8865ce4fb5040f63b08dbd3442558a4e1c82f6f0079581215e5 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index b60f51c6..66ab38ba 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -233,7 +233,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:cd9ef1eb119700a6883edcf93fd7c71dc33ee43467f3c2728b2a002c77915e8d + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:dc2f0ee60851a8865ce4fb5040f63b08dbd3442558a4e1c82f6f0079581215e5 - name: kind value: task resolver: bundles From 079b2bc9e66b589587977d3c64b71b5383f86f6b Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Tue, 2 Sep 2025 19:24:39 +0000 Subject: [PATCH 04/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index 4e736324..f177f1e9 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -186,7 +186,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:24230408f0353d339dc573aaa96d2cfee9e29b89ece931a90a7866bc772c79b7 + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:05551e144d090844903d61893a383fa4dc69ab563797f03ffaab0f8624bf530d - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index 66ab38ba..a6a12d85 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -183,7 +183,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:24230408f0353d339dc573aaa96d2cfee9e29b89ece931a90a7866bc772c79b7 + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:05551e144d090844903d61893a383fa4dc69ab563797f03ffaab0f8624bf530d - name: kind value: task resolver: bundles From 43080778446138e88b5ecb3b27479731a6b2515d Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Wed, 3 Sep 2025 05:03:28 +0000 Subject: [PATCH 05/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index f177f1e9..733cb5a9 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -390,7 +390,7 @@ spec: - name: name value: sast-snyk-check-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:322c86ad5ee252c04440184d9f5046d276415148cb6bfaf571be1b102101786b + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:e371aa09c65ab309138b4aeae9ea4dd93f83119c5cc61e9f2057fe5bb518fbe9 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index a6a12d85..4538e054 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -387,7 +387,7 @@ spec: - name: name value: sast-snyk-check-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:322c86ad5ee252c04440184d9f5046d276415148cb6bfaf571be1b102101786b + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:e371aa09c65ab309138b4aeae9ea4dd93f83119c5cc61e9f2057fe5bb518fbe9 - name: kind value: task resolver: bundles From 89d09183cd564d055fdef07a0f9d6f3c9df6a725 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Wed, 3 Sep 2025 14:39:15 +0000 Subject: [PATCH 06/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index 733cb5a9..b5031e71 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -236,7 +236,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:dc2f0ee60851a8865ce4fb5040f63b08dbd3442558a4e1c82f6f0079581215e5 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:252e5c94fb2375c43bdfd4b65097d246f4f37392956b08e5c38f366623a0b9ce - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index 4538e054..9d3052a5 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -233,7 +233,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:dc2f0ee60851a8865ce4fb5040f63b08dbd3442558a4e1c82f6f0079581215e5 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:252e5c94fb2375c43bdfd4b65097d246f4f37392956b08e5c38f366623a0b9ce - name: kind value: task resolver: bundles From 3ea39c969c078187a3606b8e054ab1a0319c636c Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 5 Sep 2025 05:28:00 +0000 Subject: [PATCH 07/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 4 ++-- .tekton/cert-manager-operator-1-18-push.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index b5031e71..690e532d 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -186,7 +186,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:05551e144d090844903d61893a383fa4dc69ab563797f03ffaab0f8624bf530d + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:0b58e5132333dd3b710ef9c18ecebe0d5e5b22066ba56481d34431c989cb21dd - name: kind value: task resolver: bundles @@ -364,7 +364,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:e106b6182e72c8f34ceae3f56b0b1aa2b4dc60f573877d9e51c3791029a7acb6 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:51ee3ca7b8142f39a2861ed0f94f67e02c538e3b7e57de56ed301fbb9774aa12 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index 9d3052a5..65f6e19b 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -183,7 +183,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:05551e144d090844903d61893a383fa4dc69ab563797f03ffaab0f8624bf530d + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:0b58e5132333dd3b710ef9c18ecebe0d5e5b22066ba56481d34431c989cb21dd - name: kind value: task resolver: bundles @@ -361,7 +361,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:e106b6182e72c8f34ceae3f56b0b1aa2b4dc60f573877d9e51c3791029a7acb6 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:51ee3ca7b8142f39a2861ed0f94f67e02c538e3b7e57de56ed301fbb9774aa12 - name: kind value: task resolver: bundles From dc62b4faa2db0bce46f0de2e349f8b29a9415976 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 5 Sep 2025 14:35:16 +0000 Subject: [PATCH 08/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 4 ++-- .tekton/cert-manager-operator-1-18-push.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index 690e532d..718d9e43 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -291,7 +291,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:7a36cc284c5932c18e117fe5995f3246b5dcc11ec742b66a2f9ae710034b064f + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a48c950350c5e9945cc4ad6bfad7fc653aa437c9eff74a25fd1d42fda4fe344d - name: kind value: task resolver: bundles @@ -364,7 +364,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:51ee3ca7b8142f39a2861ed0f94f67e02c538e3b7e57de56ed301fbb9774aa12 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:365c65ed8dfbd83c4a49300dcb9c74c5c3f027efec0be1a1f0baa9633c29b249 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index 65f6e19b..c34123ab 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -288,7 +288,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:7a36cc284c5932c18e117fe5995f3246b5dcc11ec742b66a2f9ae710034b064f + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a48c950350c5e9945cc4ad6bfad7fc653aa437c9eff74a25fd1d42fda4fe344d - name: kind value: task resolver: bundles @@ -361,7 +361,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:51ee3ca7b8142f39a2861ed0f94f67e02c538e3b7e57de56ed301fbb9774aa12 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:365c65ed8dfbd83c4a49300dcb9c74c5c3f027efec0be1a1f0baa9633c29b249 - name: kind value: task resolver: bundles From 6745434b4d559c00b02ee2485e6f319a0ef3d9da Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Sun, 7 Sep 2025 11:51:54 +0000 Subject: [PATCH 09/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index 718d9e43..02f1bea0 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -597,7 +597,7 @@ spec: - name: name value: rpms-signature-scan - name: bundle - value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:e127e0e0a5aab1364b560436594fe7ed67abcd5f8d6dd3ef14ac1f35cf81078c + value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:49ff6d117c3e9dc3966d1244e118e168b3501742ec14c3a4161a276ff48d04d5 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index c34123ab..ee0ca25c 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -594,7 +594,7 @@ spec: - name: name value: rpms-signature-scan - name: bundle - value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:e127e0e0a5aab1364b560436594fe7ed67abcd5f8d6dd3ef14ac1f35cf81078c + value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:49ff6d117c3e9dc3966d1244e118e168b3501742ec14c3a4161a276ff48d04d5 - name: kind value: task resolver: bundles From 6a621122b1b9dcec9b4fcadb77ee0040eae0a939 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Tue, 9 Sep 2025 18:27:57 +0000 Subject: [PATCH 10/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index 02f1bea0..e5d0e055 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -364,7 +364,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:365c65ed8dfbd83c4a49300dcb9c74c5c3f027efec0be1a1f0baa9633c29b249 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9f93749cfc4f665d0c1b8cd99d16ed90514e795d18d5d27b43d504bddeed3690 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index ee0ca25c..e7d9343c 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -361,7 +361,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:365c65ed8dfbd83c4a49300dcb9c74c5c3f027efec0be1a1f0baa9633c29b249 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9f93749cfc4f665d0c1b8cd99d16ed90514e795d18d5d27b43d504bddeed3690 - name: kind value: task resolver: bundles From dce51de3e0d603d2884b80bc4b8924361326f926 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Wed, 10 Sep 2025 07:24:02 +0000 Subject: [PATCH 11/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index e5d0e055..c4f98f3c 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -557,7 +557,7 @@ spec: - name: name value: apply-tags - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:e0de426d492e195f59c99d2ea1ca0df7bfb8c689f5d1468fe7f70eb8684b8d02 + value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:f44be1bf0262471f2f503f5e19da5f0628dcaf968c86272a2ad6b4871e708448 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index e7d9343c..5ef824ca 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -554,7 +554,7 @@ spec: - name: name value: apply-tags - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:e0de426d492e195f59c99d2ea1ca0df7bfb8c689f5d1468fe7f70eb8684b8d02 + value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:f44be1bf0262471f2f503f5e19da5f0628dcaf968c86272a2ad6b4871e708448 - name: kind value: task resolver: bundles From 4a5d3531c22a6c6dd7690c8f0632bb9e560291d7 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Wed, 10 Sep 2025 17:34:34 +0000 Subject: [PATCH 12/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 11 ++++++++--- .tekton/cert-manager-operator-1-18-push.yaml | 11 ++++++++--- 2 files changed, 16 insertions(+), 6 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index c4f98f3c..763a401d 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -186,7 +186,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:0b58e5132333dd3b710ef9c18ecebe0d5e5b22066ba56481d34431c989cb21dd + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:b89fb66464d0069dd72ef070c8c2c16d79c4200702d8f91e20bfe46e0aa0ae8d - name: kind value: task resolver: bundles @@ -326,7 +326,12 @@ spec: operator: in values: - "false" - - name: clair-scan + - matrix: + params: + - name: image-platform + value: + - $(params.build-platforms) + name: clair-scan params: - name: image-digest value: $(tasks.build-image-index.results.IMAGE_DIGEST) @@ -339,7 +344,7 @@ spec: - name: name value: clair-scan - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:893ffa3ce26b061e21bb4d8db9ef7ed4ddd4044fe7aa5451ef391034da3ff759 + value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:a7cc183967f89c4ac100d04ab8f81e54733beee60a0528208107c9a22d3c43af - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index 5ef824ca..98a87811 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -183,7 +183,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:0b58e5132333dd3b710ef9c18ecebe0d5e5b22066ba56481d34431c989cb21dd + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:b89fb66464d0069dd72ef070c8c2c16d79c4200702d8f91e20bfe46e0aa0ae8d - name: kind value: task resolver: bundles @@ -323,7 +323,12 @@ spec: operator: in values: - "false" - - name: clair-scan + - matrix: + params: + - name: image-platform + value: + - $(params.build-platforms) + name: clair-scan params: - name: image-digest value: $(tasks.build-image-index.results.IMAGE_DIGEST) @@ -336,7 +341,7 @@ spec: - name: name value: clair-scan - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:893ffa3ce26b061e21bb4d8db9ef7ed4ddd4044fe7aa5451ef391034da3ff759 + value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:a7cc183967f89c4ac100d04ab8f81e54733beee60a0528208107c9a22d3c43af - name: kind value: task resolver: bundles From 88914ca8711b6d92d4ea408c5aa94a886663f228 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Wed, 10 Sep 2025 22:25:56 +0000 Subject: [PATCH 13/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index 763a401d..da1092de 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -369,7 +369,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9f93749cfc4f665d0c1b8cd99d16ed90514e795d18d5d27b43d504bddeed3690 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:dae8e28761cee4ab0baf04ab9f8f1a4b3cee3c7decf461fda2bacc5c01652a60 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index 98a87811..9c212e6e 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -366,7 +366,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9f93749cfc4f665d0c1b8cd99d16ed90514e795d18d5d27b43d504bddeed3690 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:dae8e28761cee4ab0baf04ab9f8f1a4b3cee3c7decf461fda2bacc5c01652a60 - name: kind value: task resolver: bundles From 681925d451bd08361d10ee96d13e1bdd0c90ba8c Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Thu, 11 Sep 2025 13:51:52 +0000 Subject: [PATCH 14/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 12 ++++++------ .tekton/cert-manager-operator-1-18-push.yaml | 12 ++++++------ 2 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index da1092de..7ad36077 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -136,7 +136,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ded314206f09712b2116deb050b774ae7efef9ab243794334c8e616871a3ffa5 + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ec962d0be18f36ca7d331c99bf243800f569fc0a2ea6f8c8c3d3a574b71c44dc - name: kind value: task resolver: bundles @@ -157,7 +157,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:4a601aeec58a1dd89c271e728fd8f0d84777825b46940c3aec27f15bab3edacf + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:efcce59f226b1426f7685917e41a50b73478f38fe9ac56c98f1e961effd4b6f0 - name: kind value: task resolver: bundles @@ -236,7 +236,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:252e5c94fb2375c43bdfd4b65097d246f4f37392956b08e5c38f366623a0b9ce + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:7ff1a2e486924478e7724005464d60dab9a85e2ae4734818057ece3845797509 - name: kind value: task resolver: bundles @@ -291,7 +291,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a48c950350c5e9945cc4ad6bfad7fc653aa437c9eff74a25fd1d42fda4fe344d + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a54c27a0d8f913c787755422a09c4561971b506a043d872b5b07af8123ef0f41 - name: kind value: task resolver: bundles @@ -395,7 +395,7 @@ spec: - name: name value: sast-snyk-check-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:e371aa09c65ab309138b4aeae9ea4dd93f83119c5cc61e9f2057fe5bb518fbe9 + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:783f5de1b4def2fb3fad20b914f4b3afee46ffb8f652114946e321ef3fa86449 - name: kind value: task resolver: bundles @@ -585,7 +585,7 @@ spec: - name: name value: push-dockerfile-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:235ef6e835de8171c07b8a7f8947d0b40bfcff999e1ff3cb6ddd9acc65c48430 + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:06529ba66b37bdc1f55590359aa849bc570b4e9c110c983e27f07081dc09a12b - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index 9c212e6e..cfe8a6da 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -133,7 +133,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ded314206f09712b2116deb050b774ae7efef9ab243794334c8e616871a3ffa5 + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ec962d0be18f36ca7d331c99bf243800f569fc0a2ea6f8c8c3d3a574b71c44dc - name: kind value: task resolver: bundles @@ -154,7 +154,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:4a601aeec58a1dd89c271e728fd8f0d84777825b46940c3aec27f15bab3edacf + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:efcce59f226b1426f7685917e41a50b73478f38fe9ac56c98f1e961effd4b6f0 - name: kind value: task resolver: bundles @@ -233,7 +233,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:252e5c94fb2375c43bdfd4b65097d246f4f37392956b08e5c38f366623a0b9ce + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:7ff1a2e486924478e7724005464d60dab9a85e2ae4734818057ece3845797509 - name: kind value: task resolver: bundles @@ -288,7 +288,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a48c950350c5e9945cc4ad6bfad7fc653aa437c9eff74a25fd1d42fda4fe344d + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a54c27a0d8f913c787755422a09c4561971b506a043d872b5b07af8123ef0f41 - name: kind value: task resolver: bundles @@ -392,7 +392,7 @@ spec: - name: name value: sast-snyk-check-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:e371aa09c65ab309138b4aeae9ea4dd93f83119c5cc61e9f2057fe5bb518fbe9 + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:783f5de1b4def2fb3fad20b914f4b3afee46ffb8f652114946e321ef3fa86449 - name: kind value: task resolver: bundles @@ -582,7 +582,7 @@ spec: - name: name value: push-dockerfile-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:235ef6e835de8171c07b8a7f8947d0b40bfcff999e1ff3cb6ddd9acc65c48430 + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:06529ba66b37bdc1f55590359aa849bc570b4e9c110c983e27f07081dc09a12b - name: kind value: task resolver: bundles From 45e3427593b609436ce2171131429a0403a625c8 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 12 Sep 2025 00:01:37 +0000 Subject: [PATCH 15/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index 7ad36077..c0610b25 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -186,7 +186,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:b89fb66464d0069dd72ef070c8c2c16d79c4200702d8f91e20bfe46e0aa0ae8d + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:d08e349032c57367d543c0bbd070386709614ade1db8e5eddeab29b1338f6653 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index cfe8a6da..dd609edf 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -183,7 +183,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:b89fb66464d0069dd72ef070c8c2c16d79c4200702d8f91e20bfe46e0aa0ae8d + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:d08e349032c57367d543c0bbd070386709614ade1db8e5eddeab29b1338f6653 - name: kind value: task resolver: bundles From d72b72b8af01b24b7495325ffe6b3df5040bc52e Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 12 Sep 2025 20:36:18 +0000 Subject: [PATCH 16/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index c0610b25..e6d3e4ca 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -291,7 +291,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a54c27a0d8f913c787755422a09c4561971b506a043d872b5b07af8123ef0f41 + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:21d33596cf7ff61cab38b68caf578e55509748962bf6f4030bf1dfb8cd68a257 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index dd609edf..dc0be25e 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -288,7 +288,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:a54c27a0d8f913c787755422a09c4561971b506a043d872b5b07af8123ef0f41 + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:21d33596cf7ff61cab38b68caf578e55509748962bf6f4030bf1dfb8cd68a257 - name: kind value: task resolver: bundles From cefa62f66ab136e307901453ef0b46b61432cf40 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Mon, 15 Sep 2025 09:49:42 +0000 Subject: [PATCH 17/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index e6d3e4ca..13ead807 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -186,7 +186,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:d08e349032c57367d543c0bbd070386709614ade1db8e5eddeab29b1338f6653 + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:098322d6b789824f716f2d9caca1862d4afdc083ebaaee61aadd22a8c179480a - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index dc0be25e..572c9863 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -183,7 +183,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:d08e349032c57367d543c0bbd070386709614ade1db8e5eddeab29b1338f6653 + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:098322d6b789824f716f2d9caca1862d4afdc083ebaaee61aadd22a8c179480a - name: kind value: task resolver: bundles From 820beeec2350d2ff6a6842be89efc85fcda9b6f6 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Tue, 16 Sep 2025 16:22:52 +0000 Subject: [PATCH 18/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 4 +++- .tekton/cert-manager-operator-1-18-push.yaml | 4 +++- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index 13ead807..30e5fdea 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -223,6 +223,8 @@ spec: value: $(params.build-args-file) - name: PRIVILEGED_NESTED value: $(params.privileged-nested) + - name: SOURCE_URL + value: $(tasks.clone-repository.results.url) - name: SOURCE_ARTIFACT value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) - name: CACHI2_ARTIFACT @@ -236,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:7ff1a2e486924478e7724005464d60dab9a85e2ae4734818057ece3845797509 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:c1bd994e10b284d10e3713914f897f03e751588ae2a2f9bdfc873136fec4b641 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index 572c9863..6db1f59e 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -220,6 +220,8 @@ spec: value: $(params.build-args-file) - name: PRIVILEGED_NESTED value: $(params.privileged-nested) + - name: SOURCE_URL + value: $(tasks.clone-repository.results.url) - name: SOURCE_ARTIFACT value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) - name: CACHI2_ARTIFACT @@ -233,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:7ff1a2e486924478e7724005464d60dab9a85e2ae4734818057ece3845797509 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:c1bd994e10b284d10e3713914f897f03e751588ae2a2f9bdfc873136fec4b641 - name: kind value: task resolver: bundles From 62394bd085a57f0a95183336a43e1b511ffc4d57 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Tue, 16 Sep 2025 18:01:31 +0000 Subject: [PATCH 19/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index 30e5fdea..f3337b32 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -238,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:c1bd994e10b284d10e3713914f897f03e751588ae2a2f9bdfc873136fec4b641 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:312a42ce2fe4b59fb9bdd5ee227e05fdff22a2346bc3c9c0ec62d2b0214a2788 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index 6db1f59e..316b6d07 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -235,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:c1bd994e10b284d10e3713914f897f03e751588ae2a2f9bdfc873136fec4b641 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:312a42ce2fe4b59fb9bdd5ee227e05fdff22a2346bc3c9c0ec62d2b0214a2788 - name: kind value: task resolver: bundles From 61180d0eb1d2a09b6020df705c2a9a2dd8fb65f6 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Thu, 18 Sep 2025 01:25:24 +0000 Subject: [PATCH 20/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index f3337b32..050ce0de 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -238,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:312a42ce2fe4b59fb9bdd5ee227e05fdff22a2346bc3c9c0ec62d2b0214a2788 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:ec87447b59e05ca85b7ae33b01cfc585b34aacf95b4fed5e705e4f5a65eee141 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index 316b6d07..965cb260 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -235,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:312a42ce2fe4b59fb9bdd5ee227e05fdff22a2346bc3c9c0ec62d2b0214a2788 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:ec87447b59e05ca85b7ae33b01cfc585b34aacf95b4fed5e705e4f5a65eee141 - name: kind value: task resolver: bundles From 0d2c40b8eb890b7a94076e02305f74528d8925e4 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Thu, 18 Sep 2025 10:53:15 +0000 Subject: [PATCH 21/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 10 +++++----- .tekton/cert-manager-operator-1-18-push.yaml | 10 +++++----- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index 050ce0de..dfb6f0a6 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -157,7 +157,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:efcce59f226b1426f7685917e41a50b73478f38fe9ac56c98f1e961effd4b6f0 + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:3f1b468066b301083d8550e036f5a654fcb064810bd29eb06fec6d8ad3e35b9c - name: kind value: task resolver: bundles @@ -238,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:ec87447b59e05ca85b7ae33b01cfc585b34aacf95b4fed5e705e4f5a65eee141 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:932e0493c1ea791cadc241018c32efefd9141b154e574b038b37d75b2c5480ad - name: kind value: task resolver: bundles @@ -267,7 +267,7 @@ spec: - name: name value: build-image-index - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:ba7fbed5c4862968c1a77d6b90d5bdd497925ab1de41b859c027dd5c3069cd3e + value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:8e5dfb2fac011148f8715bbe0b99415f88297683d269eae0dfcad52562195d45 - name: kind value: task resolver: bundles @@ -293,7 +293,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:21d33596cf7ff61cab38b68caf578e55509748962bf6f4030bf1dfb8cd68a257 + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:b0d6cb28a23f20db4f5cf78ed78ae3a91b9a5adfe989696ed0bbc63840a485b6 - name: kind value: task resolver: bundles @@ -587,7 +587,7 @@ spec: - name: name value: push-dockerfile-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:06529ba66b37bdc1f55590359aa849bc570b4e9c110c983e27f07081dc09a12b + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:49f778479f468e71c2cfef722e96aa813d7ef98bde8a612e1bf1a13cd70849ec - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index 965cb260..01b51bdc 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -154,7 +154,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:efcce59f226b1426f7685917e41a50b73478f38fe9ac56c98f1e961effd4b6f0 + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:3f1b468066b301083d8550e036f5a654fcb064810bd29eb06fec6d8ad3e35b9c - name: kind value: task resolver: bundles @@ -235,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:ec87447b59e05ca85b7ae33b01cfc585b34aacf95b4fed5e705e4f5a65eee141 + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:932e0493c1ea791cadc241018c32efefd9141b154e574b038b37d75b2c5480ad - name: kind value: task resolver: bundles @@ -264,7 +264,7 @@ spec: - name: name value: build-image-index - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:ba7fbed5c4862968c1a77d6b90d5bdd497925ab1de41b859c027dd5c3069cd3e + value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:8e5dfb2fac011148f8715bbe0b99415f88297683d269eae0dfcad52562195d45 - name: kind value: task resolver: bundles @@ -290,7 +290,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:21d33596cf7ff61cab38b68caf578e55509748962bf6f4030bf1dfb8cd68a257 + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:b0d6cb28a23f20db4f5cf78ed78ae3a91b9a5adfe989696ed0bbc63840a485b6 - name: kind value: task resolver: bundles @@ -584,7 +584,7 @@ spec: - name: name value: push-dockerfile-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:06529ba66b37bdc1f55590359aa849bc570b4e9c110c983e27f07081dc09a12b + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:49f778479f468e71c2cfef722e96aa813d7ef98bde8a612e1bf1a13cd70849ec - name: kind value: task resolver: bundles From 5a21a12a6330463792b990f7d90ac4e15eeb73c5 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Thu, 18 Sep 2025 20:31:22 +0000 Subject: [PATCH 22/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index dfb6f0a6..aeb9120c 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -238,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:932e0493c1ea791cadc241018c32efefd9141b154e574b038b37d75b2c5480ad + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:08bbee8bda1e6d0f7a4690a494f0a2713e0279c75412402a28008a8aa34283ca - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index 01b51bdc..5f0dc927 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -235,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:932e0493c1ea791cadc241018c32efefd9141b154e574b038b37d75b2c5480ad + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:08bbee8bda1e6d0f7a4690a494f0a2713e0279c75412402a28008a8aa34283ca - name: kind value: task resolver: bundles From 7ebab3a6fa6f170a7eae265714507099ccb9089a Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 19 Sep 2025 12:29:02 +0000 Subject: [PATCH 23/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index aeb9120c..b0d961f5 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -238,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:08bbee8bda1e6d0f7a4690a494f0a2713e0279c75412402a28008a8aa34283ca + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:17a0b093c9e9d21e9e374c60a88eb293a0fa57e4e2b67baf20ccac9735aa20ff - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index 5f0dc927..690f27c4 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -235,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:08bbee8bda1e6d0f7a4690a494f0a2713e0279c75412402a28008a8aa34283ca + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:17a0b093c9e9d21e9e374c60a88eb293a0fa57e4e2b67baf20ccac9735aa20ff - name: kind value: task resolver: bundles From fa3ee85ab38784bf3dd561b6ce7d3cbc02c57127 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Tue, 23 Sep 2025 15:56:40 +0000 Subject: [PATCH 24/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 4 ++-- .tekton/cert-manager-operator-1-18-push.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index b0d961f5..7a7ad8fc 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -238,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:17a0b093c9e9d21e9e374c60a88eb293a0fa57e4e2b67baf20ccac9735aa20ff + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:a60e433e02bfda6811719690edbf1e924820d107ad658c8a9690498d4c7e9c7b - name: kind value: task resolver: bundles @@ -267,7 +267,7 @@ spec: - name: name value: build-image-index - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:8e5dfb2fac011148f8715bbe0b99415f88297683d269eae0dfcad52562195d45 + value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:79784d53749584bc5a8de32142ec4e2f01cdbf42c20d94e59280e0b927c8597d - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index 690f27c4..b5eba85b 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -235,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:17a0b093c9e9d21e9e374c60a88eb293a0fa57e4e2b67baf20ccac9735aa20ff + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:a60e433e02bfda6811719690edbf1e924820d107ad658c8a9690498d4c7e9c7b - name: kind value: task resolver: bundles @@ -264,7 +264,7 @@ spec: - name: name value: build-image-index - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:8e5dfb2fac011148f8715bbe0b99415f88297683d269eae0dfcad52562195d45 + value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:79784d53749584bc5a8de32142ec4e2f01cdbf42c20d94e59280e0b927c8597d - name: kind value: task resolver: bundles From 116defcf90bc09f1b5ff039e9ba95b98b541545f Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Wed, 24 Sep 2025 10:28:35 +0000 Subject: [PATCH 25/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index 7a7ad8fc..14abe12b 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -186,7 +186,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:098322d6b789824f716f2d9caca1862d4afdc083ebaaee61aadd22a8c179480a + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:dc82a7270aace9b1c26f7e96f8ccab2752e53d32980c41a45e1733baad76cde6 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index b5eba85b..abf70e05 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -183,7 +183,7 @@ spec: - name: name value: prefetch-dependencies-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:098322d6b789824f716f2d9caca1862d4afdc083ebaaee61aadd22a8c179480a + value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:dc82a7270aace9b1c26f7e96f8ccab2752e53d32980c41a45e1733baad76cde6 - name: kind value: task resolver: bundles From 63e130afe045d09473a1ead7f83c56cccf5948e3 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Thu, 25 Sep 2025 22:06:52 +0000 Subject: [PATCH 26/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index 14abe12b..e14ba5b6 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -238,7 +238,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:a60e433e02bfda6811719690edbf1e924820d107ad658c8a9690498d4c7e9c7b + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:650b0bca57c626c1e82f35cdfadf44a7792230b2b992aaa9c369d615aae6590d - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index abf70e05..a4b0400e 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -235,7 +235,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:a60e433e02bfda6811719690edbf1e924820d107ad658c8a9690498d4c7e9c7b + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:650b0bca57c626c1e82f35cdfadf44a7792230b2b992aaa9c369d615aae6590d - name: kind value: task resolver: bundles From 08e4af45e40e25ab80545215b415b186dc27e29a Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 26 Sep 2025 13:47:32 +0000 Subject: [PATCH 27/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 11 ++++++++++- .tekton/cert-manager-operator-1-18-push.yaml | 11 ++++++++++- 2 files changed, 20 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index e14ba5b6..b73ec3e7 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -90,6 +90,11 @@ spec: description: Add built image into an OCI image index name: build-image-index type: string + - default: docker + description: The format for the resulting image's mediaType. Valid values are + oci or docker. + name: buildah-format + type: string - default: [] description: Array of --build-arg values ("arg=value" strings) for buildah name: build-args @@ -136,7 +141,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ec962d0be18f36ca7d331c99bf243800f569fc0a2ea6f8c8c3d3a574b71c44dc + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:abf231cfc5a68b56f68a8ac9bb26dca3c3e434c88dd9627c72bdec0b8c335c67 - name: kind value: task resolver: bundles @@ -225,6 +230,8 @@ spec: value: $(params.privileged-nested) - name: SOURCE_URL value: $(tasks.clone-repository.results.url) + - name: BUILDAH_FORMAT + value: $(params.buildah-format) - name: SOURCE_ARTIFACT value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) - name: CACHI2_ARTIFACT @@ -260,6 +267,8 @@ spec: - name: IMAGES value: - $(tasks.build-images.results.IMAGE_REF[*]) + - name: BUILDAH_FORMAT + value: $(params.buildah-format) runAfter: - build-images taskRef: diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index a4b0400e..61ac61ec 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -87,6 +87,11 @@ spec: description: Add built image into an OCI image index name: build-image-index type: string + - default: docker + description: The format for the resulting image's mediaType. Valid values are + oci or docker. + name: buildah-format + type: string - default: [] description: Array of --build-arg values ("arg=value" strings) for buildah name: build-args @@ -133,7 +138,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:ec962d0be18f36ca7d331c99bf243800f569fc0a2ea6f8c8c3d3a574b71c44dc + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:abf231cfc5a68b56f68a8ac9bb26dca3c3e434c88dd9627c72bdec0b8c335c67 - name: kind value: task resolver: bundles @@ -222,6 +227,8 @@ spec: value: $(params.privileged-nested) - name: SOURCE_URL value: $(tasks.clone-repository.results.url) + - name: BUILDAH_FORMAT + value: $(params.buildah-format) - name: SOURCE_ARTIFACT value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) - name: CACHI2_ARTIFACT @@ -257,6 +264,8 @@ spec: - name: IMAGES value: - $(tasks.build-images.results.IMAGE_REF[*]) + - name: BUILDAH_FORMAT + value: $(params.buildah-format) runAfter: - build-images taskRef: From 8bef0feea1d9d497f1569363c9cd4c387610b636 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Mon, 29 Sep 2025 17:35:05 +0000 Subject: [PATCH 28/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index b73ec3e7..9b0a3da9 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -141,7 +141,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:abf231cfc5a68b56f68a8ac9bb26dca3c3e434c88dd9627c72bdec0b8c335c67 + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:afc8d0af71c24285599120946b29eea2ab56663c5f49c6ca80ba12bf56ef2371 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index 61ac61ec..41a69b20 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -138,7 +138,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:abf231cfc5a68b56f68a8ac9bb26dca3c3e434c88dd9627c72bdec0b8c335c67 + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:afc8d0af71c24285599120946b29eea2ab56663c5f49c6ca80ba12bf56ef2371 - name: kind value: task resolver: bundles From 63d9a4a70cfd1ea8ea48558585c90ed24d49277e Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Tue, 30 Sep 2025 15:34:23 +0000 Subject: [PATCH 29/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index 9b0a3da9..b114884a 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -141,7 +141,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:afc8d0af71c24285599120946b29eea2ab56663c5f49c6ca80ba12bf56ef2371 + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:526a104a3342e36dad5c5e7f98c647da6b2a33897e458f772ff4afe523e0690a - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index 41a69b20..67edc529 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -138,7 +138,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:afc8d0af71c24285599120946b29eea2ab56663c5f49c6ca80ba12bf56ef2371 + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:526a104a3342e36dad5c5e7f98c647da6b2a33897e458f772ff4afe523e0690a - name: kind value: task resolver: bundles From 6d039a338aa8163dd1f0bd99d01d4cfbb3df619f Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Wed, 1 Oct 2025 23:38:31 +0000 Subject: [PATCH 30/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index b114884a..32e98f68 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -406,7 +406,7 @@ spec: - name: name value: sast-snyk-check-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:783f5de1b4def2fb3fad20b914f4b3afee46ffb8f652114946e321ef3fa86449 + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:181d63c126e3119a9d57b8feed4eb66a875b5208c3e90724c22758e65dca8733 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index 67edc529..7bda5cbb 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -403,7 +403,7 @@ spec: - name: name value: sast-snyk-check-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:783f5de1b4def2fb3fad20b914f4b3afee46ffb8f652114946e321ef3fa86449 + value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:181d63c126e3119a9d57b8feed4eb66a875b5208c3e90724c22758e65dca8733 - name: kind value: task resolver: bundles From d1f925e9474b58d97baa12d1ee9a40794f7ffbf5 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 3 Oct 2025 09:07:02 +0000 Subject: [PATCH 31/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 10 +++++----- .tekton/cert-manager-operator-1-18-push.yaml | 10 +++++----- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index 32e98f68..70585643 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -141,7 +141,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:526a104a3342e36dad5c5e7f98c647da6b2a33897e458f772ff4afe523e0690a + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:bbf313b09740fb39b3343bc69ee94b2a2c21d16a9304f9b7c111c305558fc346 - name: kind value: task resolver: bundles @@ -162,7 +162,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:3f1b468066b301083d8550e036f5a654fcb064810bd29eb06fec6d8ad3e35b9c + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:1144353cf608f0a44a6416a70db6408727733ff40070d382158d6f6984096d8e - name: kind value: task resolver: bundles @@ -245,7 +245,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:650b0bca57c626c1e82f35cdfadf44a7792230b2b992aaa9c369d615aae6590d + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:5e59c05455619580f4383010726f7db8440ecf6959882e9053ac697dd6d277fd - name: kind value: task resolver: bundles @@ -302,7 +302,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:b0d6cb28a23f20db4f5cf78ed78ae3a91b9a5adfe989696ed0bbc63840a485b6 + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:36d44f2924f60da00a079a9ab7ce25ad8b2ad593c16d90509203c125ff0ccd46 - name: kind value: task resolver: bundles @@ -596,7 +596,7 @@ spec: - name: name value: push-dockerfile-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:49f778479f468e71c2cfef722e96aa813d7ef98bde8a612e1bf1a13cd70849ec + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:2bc5b3afc5de56da0f06eac60b65e86f6b861b16a63f48579fc0bac7d657e14c - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index 7bda5cbb..a3f6d553 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -138,7 +138,7 @@ spec: - name: name value: init - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:526a104a3342e36dad5c5e7f98c647da6b2a33897e458f772ff4afe523e0690a + value: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:bbf313b09740fb39b3343bc69ee94b2a2c21d16a9304f9b7c111c305558fc346 - name: kind value: task resolver: bundles @@ -159,7 +159,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:3f1b468066b301083d8550e036f5a654fcb064810bd29eb06fec6d8ad3e35b9c + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:1144353cf608f0a44a6416a70db6408727733ff40070d382158d6f6984096d8e - name: kind value: task resolver: bundles @@ -242,7 +242,7 @@ spec: - name: name value: buildah-remote-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:650b0bca57c626c1e82f35cdfadf44a7792230b2b992aaa9c369d615aae6590d + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.5@sha256:5e59c05455619580f4383010726f7db8440ecf6959882e9053ac697dd6d277fd - name: kind value: task resolver: bundles @@ -299,7 +299,7 @@ spec: - name: name value: source-build-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:b0d6cb28a23f20db4f5cf78ed78ae3a91b9a5adfe989696ed0bbc63840a485b6 + value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:36d44f2924f60da00a079a9ab7ce25ad8b2ad593c16d90509203c125ff0ccd46 - name: kind value: task resolver: bundles @@ -593,7 +593,7 @@ spec: - name: name value: push-dockerfile-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:49f778479f468e71c2cfef722e96aa813d7ef98bde8a612e1bf1a13cd70849ec + value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:2bc5b3afc5de56da0f06eac60b65e86f6b861b16a63f48579fc0bac7d657e14c - name: kind value: task resolver: bundles From e45e265c4ec08c126491c751770b59f254f03b8a Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Fri, 3 Oct 2025 17:12:10 +0000 Subject: [PATCH 32/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index 70585643..5e5a42ce 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -162,7 +162,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:1144353cf608f0a44a6416a70db6408727733ff40070d382158d6f6984096d8e + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:0d80f66610efd1f957700f61dcd5080689321b10ad544e136d58fc4673290d1b - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index a3f6d553..ce775a58 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -159,7 +159,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:1144353cf608f0a44a6416a70db6408727733ff40070d382158d6f6984096d8e + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:0d80f66610efd1f957700f61dcd5080689321b10ad544e136d58fc4673290d1b - name: kind value: task resolver: bundles From 46cc1bd197c3018844cd69037f6771346ec473e2 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Sun, 5 Oct 2025 16:02:24 +0000 Subject: [PATCH 33/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index 5e5a42ce..c52c6556 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -613,7 +613,7 @@ spec: - name: name value: rpms-signature-scan - name: bundle - value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:49ff6d117c3e9dc3966d1244e118e168b3501742ec14c3a4161a276ff48d04d5 + value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:06977232e67509e5540528ff6c3b081b23fc5bf3e40fb3e2d09a086d5c3243fc - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index ce775a58..9ba19b4e 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -610,7 +610,7 @@ spec: - name: name value: rpms-signature-scan - name: bundle - value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:49ff6d117c3e9dc3966d1244e118e168b3501742ec14c3a4161a276ff48d04d5 + value: quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2@sha256:06977232e67509e5540528ff6c3b081b23fc5bf3e40fb3e2d09a086d5c3243fc - name: kind value: task resolver: bundles From d2bf5c314f018642cef9814db2b1f244bbb95fda Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Mon, 6 Oct 2025 18:01:23 +0000 Subject: [PATCH 34/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index c52c6556..555ebb51 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -162,7 +162,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:0d80f66610efd1f957700f61dcd5080689321b10ad544e136d58fc4673290d1b + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:f21c34e50500edc84e4889d85fd71a80d79182b16c044adc7f5ecda021c6dfc7 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index 9ba19b4e..20bbe5d0 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -159,7 +159,7 @@ spec: - name: name value: git-clone-oci-ta - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:0d80f66610efd1f957700f61dcd5080689321b10ad544e136d58fc4673290d1b + value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:f21c34e50500edc84e4889d85fd71a80d79182b16c044adc7f5ecda021c6dfc7 - name: kind value: task resolver: bundles From b29ec616edf123075a434f3b64f557a01ffe839f Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Mon, 6 Oct 2025 22:09:56 +0000 Subject: [PATCH 35/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index 555ebb51..1e965ee2 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -380,7 +380,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:dae8e28761cee4ab0baf04ab9f8f1a4b3cee3c7decf461fda2bacc5c01652a60 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:7db70c6cf23f39b9aad8b75285df31ed2c1213d87842cd4502ffc268808c96c6 - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index 20bbe5d0..73ac02fe 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -377,7 +377,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:dae8e28761cee4ab0baf04ab9f8f1a4b3cee3c7decf461fda2bacc5c01652a60 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:7db70c6cf23f39b9aad8b75285df31ed2c1213d87842cd4502ffc268808c96c6 - name: kind value: task resolver: bundles From b4b07668e514d4eb9cc6d34dfefd726378d47418 Mon Sep 17 00:00:00 2001 From: red-hat-konflux Date: Wed, 8 Oct 2025 20:51:46 +0000 Subject: [PATCH 36/36] Red Hat Konflux update cert-manager-operator-1-18 Signed-off-by: red-hat-konflux --- .tekton/cert-manager-operator-1-18-pull-request.yaml | 2 +- .tekton/cert-manager-operator-1-18-push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.tekton/cert-manager-operator-1-18-pull-request.yaml b/.tekton/cert-manager-operator-1-18-pull-request.yaml index 1e965ee2..5b2bf995 100644 --- a/.tekton/cert-manager-operator-1-18-pull-request.yaml +++ b/.tekton/cert-manager-operator-1-18-pull-request.yaml @@ -380,7 +380,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:7db70c6cf23f39b9aad8b75285df31ed2c1213d87842cd4502ffc268808c96c6 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9568c51a5158d534248908b9b561cf67d2826ed4ea164ffd95628bb42380e6ec - name: kind value: task resolver: bundles diff --git a/.tekton/cert-manager-operator-1-18-push.yaml b/.tekton/cert-manager-operator-1-18-push.yaml index 73ac02fe..91df8e11 100644 --- a/.tekton/cert-manager-operator-1-18-push.yaml +++ b/.tekton/cert-manager-operator-1-18-push.yaml @@ -377,7 +377,7 @@ spec: - name: name value: ecosystem-cert-preflight-checks - name: bundle - value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:7db70c6cf23f39b9aad8b75285df31ed2c1213d87842cd4502ffc268808c96c6 + value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9568c51a5158d534248908b9b561cf67d2826ed4ea164ffd95628bb42380e6ec - name: kind value: task resolver: bundles