@@ -36,44 +36,44 @@ spec:
3636 - name : revision
3737 value : ' {{revision}}'
3838 taskRunSpecs :
39- - pipelineTaskName : build-source-image
40- stepSpecs :
41- - name : build
42- computeResources :
43- requests :
44- memory : 10Gi
45- limits :
46- memory : 10Gi
47- - name : use-trusted-artifact
48- computeResources : &ta-resources
49- requests :
50- memory : 8Gi
51- limits :
52- memory : 8Gi
53- - pipelineTaskName : clone-repository
54- stepSpecs :
55- - name : create-trusted-artifact
56- computeResources : *ta-resources
57- - pipelineTaskName : fips-operator-bundle-check-oci-ta
58- stepSpecs :
59- - name : use-trusted-artifact
60- computeResources : *ta-resources
61- - pipelineTaskName : prefetch-dependencies
62- stepSpecs :
63- - name : use-trusted-artifact
64- computeResources : *ta-resources
65- - pipelineTaskName : sast-shell-check
66- stepSpecs :
67- - name : use-trusted-artifact
68- computeResources : *ta-resources
69- - pipelineTaskName : sast-snyk-check
70- stepSpecs :
71- - name : use-trusted-artifact
72- computeResources : *ta-resources
73- - pipelineTaskName : sast-unicode-check
74- stepSpecs :
75- - name : use-trusted-artifact
76- computeResources : *ta-resources
39+ - pipelineTaskName : build-source-image
40+ stepSpecs :
41+ - name : build
42+ computeResources :
43+ requests :
44+ memory : 10Gi
45+ limits :
46+ memory : 10Gi
47+ - name : use-trusted-artifact
48+ computeResources : &ta-resources
49+ requests :
50+ memory : 8Gi
51+ limits :
52+ memory : 8Gi
53+ - pipelineTaskName : clone-repository
54+ stepSpecs :
55+ - name : create-trusted-artifact
56+ computeResources : *ta-resources
57+ - pipelineTaskName : fips-operator-bundle-check-oci-ta
58+ stepSpecs :
59+ - name : use-trusted-artifact
60+ computeResources : *ta-resources
61+ - pipelineTaskName : prefetch-dependencies
62+ stepSpecs :
63+ - name : use-trusted-artifact
64+ computeResources : *ta-resources
65+ - pipelineTaskName : sast-shell-check
66+ stepSpecs :
67+ - name : use-trusted-artifact
68+ computeResources : *ta-resources
69+ - pipelineTaskName : sast-snyk-check
70+ stepSpecs :
71+ - name : use-trusted-artifact
72+ computeResources : *ta-resources
73+ - pipelineTaskName : sast-unicode-check
74+ stepSpecs :
75+ - name : use-trusted-artifact
76+ computeResources : *ta-resources
7777 pipelineSpec :
7878 finally :
7979 - name : show-sbom
@@ -216,7 +216,7 @@ spec:
216216 - name : name
217217 value : prefetch-dependencies-oci-ta
218218 - name : bundle
219- value : quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:a1ddc34bf0a169bb2e64a98caf9027b66af8fc66a3a60f71bb451ce36af6a399
219+ value : quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:f10a4841e6f75fbb314b1d8cbf14f652499c1fe7f59e59aed59f7431c680aa17
220220 - name : kind
221221 value : task
222222 resolver : bundles
@@ -264,19 +264,21 @@ spec:
264264 - name : build-source-image
265265 params :
266266 - name : BINARY_IMAGE
267- value : $(params.output-image )
267+ value : $(tasks.build-container.results.IMAGE_URL )
268268 - name : SOURCE_ARTIFACT
269269 value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
270270 - name : CACHI2_ARTIFACT
271271 value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
272+ - name : BINARY_IMAGE_DIGEST
273+ value : $(tasks.build-container.results.IMAGE_DIGEST)
272274 runAfter :
273275 - build-container
274276 taskRef :
275277 params :
276278 - name : name
277279 value : source-build-oci-ta
278280 - name : bundle
279- value : quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.2 @sha256:b424894fc8e806c12658daa565b835fd2d66e7f7608afc47529eb7b410f030d7
281+ value : quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3 @sha256:b1eb49583b41872b27356fee20d5f0eb6ff7f5cdeacde7ffb39655f031104728
280282 - name : kind
281283 value : task
282284 resolver : bundles
@@ -385,57 +387,57 @@ spec:
385387 value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
386388 - name : sast-shell-check
387389 params :
388- - name : image-digest
389- value : $(tasks.build-container.results.IMAGE_DIGEST)
390- - name : image-url
391- value : $(tasks.build-container.results.IMAGE_URL)
392- - name : SOURCE_ARTIFACT
393- value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
394- - name : CACHI2_ARTIFACT
395- value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
390+ - name : image-digest
391+ value : $(tasks.build-container.results.IMAGE_DIGEST)
392+ - name : image-url
393+ value : $(tasks.build-container.results.IMAGE_URL)
394+ - name : SOURCE_ARTIFACT
395+ value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
396+ - name : CACHI2_ARTIFACT
397+ value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
396398 runAfter :
397- - build-container
399+ - build-container
398400 taskRef :
399401 params :
400- - name : name
401- value : sast-shell-check-oci-ta
402- - name : bundle
403- value : quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:808bcaf75271db6a999f53fdefb973a385add94a277d37fbd3df68f8ac7dfaa3
404- - name : kind
405- value : task
402+ - name : name
403+ value : sast-shell-check-oci-ta
404+ - name : bundle
405+ value : quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:808bcaf75271db6a999f53fdefb973a385add94a277d37fbd3df68f8ac7dfaa3
406+ - name : kind
407+ value : task
406408 resolver : bundles
407409 when :
408- - input : $(params.skip-checks)
409- operator : in
410- values :
411- - " false"
410+ - input : $(params.skip-checks)
411+ operator : in
412+ values :
413+ - " false"
412414 workspaces : []
413415 - name : sast-unicode-check
414416 params :
415- - name : image-digest
416- value : $(tasks.build-container.results.IMAGE_DIGEST)
417- - name : image-url
418- value : $(tasks.build-container.results.IMAGE_URL)
419- - name : SOURCE_ARTIFACT
420- value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
421- - name : CACHI2_ARTIFACT
422- value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
417+ - name : image-digest
418+ value : $(tasks.build-container.results.IMAGE_DIGEST)
419+ - name : image-url
420+ value : $(tasks.build-container.results.IMAGE_URL)
421+ - name : SOURCE_ARTIFACT
422+ value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
423+ - name : CACHI2_ARTIFACT
424+ value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
423425 runAfter :
424- - build-container
426+ - build-container
425427 taskRef :
426428 params :
427- - name : name
428- value : sast-unicode-check-oci-ta
429- - name : bundle
430- value : quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.3@sha256:a2bde66f6b4164620298c7d709b8f08515409404000fa1dc2260d2508b135651
431- - name : kind
432- value : task
429+ - name : name
430+ value : sast-unicode-check-oci-ta
431+ - name : bundle
432+ value : quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.3@sha256:a2bde66f6b4164620298c7d709b8f08515409404000fa1dc2260d2508b135651
433+ - name : kind
434+ value : task
433435 resolver : bundles
434436 when :
435- - input : $(params.skip-checks)
436- operator : in
437- values :
438- - " false"
437+ - input : $(params.skip-checks)
438+ operator : in
439+ values :
440+ - " false"
439441 workspaces : []
440442 - name : clamav-scan
441443 params :
0 commit comments