@@ -8,9 +8,8 @@ metadata:
8
8
build.appstudio.redhat.com/target_branch : ' {{target_branch}}'
9
9
pipelinesascode.tekton.dev/cancel-in-progress : " true"
10
10
pipelinesascode.tekton.dev/max-keep-runs : " 3"
11
- pipelinesascode.tekton.dev/on-cel-expression : event == "pull_request" && target_branch
12
- == "main"
13
- creationTimestamp : null
11
+ pipelinesascode.tekton.dev/on-cel-expression : event == "pull_request" && target_branch == "main"
12
+ creationTimestamp :
14
13
labels :
15
14
appstudio.openshift.io/application : rhobs
16
15
appstudio.openshift.io/component : rhobs-konflux-obsctl-reloader
30
29
- name : dockerfile
31
30
value : Containerfile.obsctl
32
31
- name : build-source-image
33
- value : " true"
32
+ value : " true"
34
33
pipelineSpec :
35
34
description : |
36
35
This pipeline is ideal for building container images from a Containerfile while maintaining trust after pipeline customization.
47
46
- name : name
48
47
value : show-sbom
49
48
- name : bundle
50
- value : quay.io/konflux-ci/tekton-catalog/task-show-sbom:0.1@sha256:002f7c8c1d2f9e09904035da414aba1188ae091df0ea9532cd997be05e73d594
49
+ value : quay.io/konflux-ci/tekton-catalog/task-show-sbom:0.1@sha256:beb0616db051952b4b861dd8c3e00fa1c0eccbd926feddf71194d3bb3ace9ce7
51
50
- name : kind
52
51
value : task
53
52
resolver : bundles
@@ -63,13 +62,11 @@ spec:
63
62
name : output-image
64
63
type : string
65
64
- default : .
66
- description : Path to the source code of an application's component from where
67
- to build image.
65
+ description : Path to the source code of an application's component from where to build image.
68
66
name : path-context
69
67
type : string
70
68
- default : Dockerfile
71
- description : Path to the Dockerfile inside the context specified by parameter
72
- path-context
69
+ description : Path to the Dockerfile inside the context specified by parameter path-context
73
70
name : dockerfile
74
71
type : string
75
72
- default : " false"
89
86
name : prefetch-input
90
87
type : string
91
88
- default : " "
92
- description : Image tag expiration time, time values could be something like
93
- 1h, 2d, 3w for hours, days, and weeks, respectively.
89
+ description : Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.
94
90
name : image-expires-after
95
91
- default : " false"
96
92
description : Build a source image.
@@ -108,6 +104,10 @@ spec:
108
104
description : Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file
109
105
name : build-args-file
110
106
type : string
107
+ - name : buildah-format
108
+ default : docker
109
+ type : string
110
+ description : The format for the resulting image's mediaType. Valid values are oci or docker.
111
111
results :
112
112
- description : " "
113
113
name : IMAGE_URL
@@ -135,7 +135,7 @@ spec:
135
135
- name : name
136
136
value : init
137
137
- name : bundle
138
- value : quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:7a24924417260b7094541caaedd2853dc8da08d4bb0968f710a400d3e8062063
138
+ value : quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:abf231cfc5a68b56f68a8ac9bb26dca3c3e434c88dd9627c72bdec0b8c335c67
139
139
- name : kind
140
140
value : task
141
141
resolver : bundles
@@ -156,7 +156,7 @@ spec:
156
156
- name : name
157
157
value : git-clone-oci-ta
158
158
- name : bundle
159
- value : quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:8ecf57d5a6697ce709bee65b62781efe79a10b0c2b95e05576442b67fbd61744
159
+ value : quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:3f1b468066b301083d8550e036f5a654fcb064810bd29eb06fec6d8ad3e35b9c
160
160
- name : kind
161
161
value : task
162
162
resolver : bundles
@@ -185,7 +185,7 @@ spec:
185
185
- name : name
186
186
value : prefetch-dependencies-oci-ta
187
187
- name : bundle
188
- value : quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:3db5d3a02bcbbc034080474c06bec8388bd6abc71606503ac4832f6890e71503
188
+ value : quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:dc82a7270aace9b1c26f7e96f8ccab2752e53d32980c41a45e1733baad76cde6
189
189
- name : kind
190
190
value : task
191
191
resolver : bundles
@@ -219,14 +219,16 @@ spec:
219
219
value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
220
220
- name : CACHI2_ARTIFACT
221
221
value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
222
+ - name : BUILDAH_FORMAT
223
+ value : $(params.buildah-format)
222
224
runAfter :
223
225
- prefetch-dependencies
224
226
taskRef :
225
227
params :
226
228
- name : name
227
229
value : buildah-oci-ta
228
230
- name : bundle
229
- value : quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta:0.4 @sha256:6ac9d16f598c14a4b56e662eccda0a438e94aa8f87dd27a3ea0ff1abc6e00c66
231
+ value : quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta:0.5 @sha256:6ec006242975a17388bfe813e2afd0ae721dd013247580c0d988e3c4a9c7f867
230
232
- name : kind
231
233
value : task
232
234
resolver : bundles
@@ -248,14 +250,16 @@ spec:
248
250
- name : IMAGES
249
251
value :
250
252
- $(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)
253
+ - name : BUILDAH_FORMAT
254
+ value : $(params.buildah-format)
251
255
runAfter :
252
256
- build-container
253
257
taskRef :
254
258
params :
255
259
- name : name
256
260
value : build-image-index
257
261
- name : bundle
258
- value : quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:1b357f2ed430d18a009740a1783dd15af70ce1e23dc6254da1a83e9ec595d5be
262
+ value : quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:79784d53749584bc5a8de32142ec4e2f01cdbf42c20d94e59280e0b927c8597d
259
263
- name : kind
260
264
value : task
261
265
resolver : bundles
@@ -267,19 +271,21 @@ spec:
267
271
- name : build-source-image
268
272
params :
269
273
- name : BINARY_IMAGE
270
- value : $(params.output -image)
274
+ value : $(tasks.build -image-index.results.IMAGE_URL )
271
275
- name : SOURCE_ARTIFACT
272
276
value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
273
277
- name : CACHI2_ARTIFACT
274
278
value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
279
+ - name : BINARY_IMAGE_DIGEST
280
+ value : $(tasks.build-image-index.results.IMAGE_DIGEST)
275
281
runAfter :
276
282
- build-image-index
277
283
taskRef :
278
284
params :
279
285
- name : name
280
286
value : source-build-oci-ta
281
287
- name : bundle
282
- value : quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.2 @sha256:56fa2cbfc04bad4765b7fe1fa8022587f4042d4e8533bb5f65311d46b43226ee
288
+ value : quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3 @sha256:b0d6cb28a23f20db4f5cf78ed78ae3a91b9a5adfe989696ed0bbc63840a485b6
283
289
- name : kind
284
290
value : task
285
291
resolver : bundles
@@ -305,7 +311,7 @@ spec:
305
311
- name : name
306
312
value : deprecated-image-check
307
313
- name : bundle
308
- value : quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:ecd33669676b3a193ff4c2c6223cb912cc1b0cf5cc36e080eaec7718500272cf
314
+ value : quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:f59175d9a0a60411738228dfe568af4684af4aa5e7e05c832927cb917801d489
309
315
- name : kind
310
316
value : task
311
317
resolver : bundles
@@ -327,7 +333,7 @@ spec:
327
333
- name : name
328
334
value : clair-scan
329
335
- name : bundle
330
- value : quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2 @sha256:878ae247ffc58d95a9ac68e4d658ef91ef039363e03e65a386bc0ead02d9d7d8
336
+ value : quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3 @sha256:a7cc183967f89c4ac100d04ab8f81e54733beee60a0528208107c9a22d3c43af
331
337
- name : kind
332
338
value : task
333
339
resolver : bundles
@@ -347,7 +353,7 @@ spec:
347
353
- name : name
348
354
value : ecosystem-cert-preflight-checks
349
355
- name : bundle
350
- value : quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:302828e9d7abc72b8a44fb2b9be068f86c982d8e5f4550b8bf654571d6361ee8
356
+ value : quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:dae8e28761cee4ab0baf04ab9f8f1a4b3cee3c7decf461fda2bacc5c01652a60
351
357
- name : kind
352
358
value : task
353
359
resolver : bundles
@@ -373,7 +379,7 @@ spec:
373
379
- name : name
374
380
value : sast-snyk-check-oci-ta
375
381
- name : bundle
376
- value : quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:6078ec8ec7caacbb8203138fcaa63db24e88dbf838544340bb0752d5b69f20ae
382
+ value : quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:783f5de1b4def2fb3fad20b914f4b3afee46ffb8f652114946e321ef3fa86449
377
383
- name : kind
378
384
value : task
379
385
resolver : bundles
@@ -395,7 +401,7 @@ spec:
395
401
- name : name
396
402
value : clamav-scan
397
403
- name : bundle
398
- value : quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.2 @sha256:98d94290d6f21b6e231485326e3629bbcdec75c737b84e05ac9eac78f9a2c8b4
404
+ value : quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3 @sha256:b0bd59748cda4a7abf311e4f448e6c1d00c6b6d8c0ecc1c2eb33e08dc0e0b802
399
405
- name : kind
400
406
value : task
401
407
resolver : bundles
@@ -432,15 +438,15 @@ spec:
432
438
- name : CACHI2_ARTIFACT
433
439
value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
434
440
- name : image-digest
435
- value : $(tasks.build-image-index.results.IMAGE_DIGEST)
441
+ value : $(tasks.build-image-index.results.IMAGE_DIGEST)
436
442
runAfter :
437
443
- coverity-availability-check
438
444
taskRef :
439
445
params :
440
446
- name : name
441
447
value : sast-coverity-check-oci-ta
442
448
- name : bundle
443
- value : quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:87af64576088ba68f2a5b89998b7ae9e92d7e4f039274e4be6000eff6ce0d95d
449
+ value : quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:cdbe1a968676e4f5519b082bf1e27a4cdcf66dd60af66dbc26b3e604f957f7e9
444
450
- name : kind
445
451
value : task
446
452
resolver : bundles
@@ -461,7 +467,7 @@ spec:
461
467
- name : name
462
468
value : coverity-availability-check
463
469
- name : bundle
464
- value : quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check:0.2@sha256:8b58c4fae00c0dfe3937abfb8a9a61aa3c408cca4278b817db53d518428d944e
470
+ value : quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check:0.2@sha256:db2b267dc15e4ed17f704ee91b8e9b38068e1a35b1018a328fdca621819d74c6
465
471
- name : kind
466
472
value : task
467
473
resolver : bundles
@@ -487,7 +493,7 @@ spec:
487
493
- name : name
488
494
value : sast-shell-check-oci-ta
489
495
- name : bundle
490
- value : quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:57b3262138eb06186ae7375f84ca53788bba2a66cfd03d39cb82c78df050aba5
496
+ value : quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:bf7bdde00b7212f730c1356672290af6f38d070da2c8a316987b5c32fd49e0b9
491
497
- name : kind
492
498
value : task
493
499
resolver : bundles
@@ -504,14 +510,16 @@ spec:
504
510
value : $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
505
511
- name : CACHI2_ARTIFACT
506
512
value : $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
513
+ - name : image-digest
514
+ value : $(tasks.build-image-index.results.IMAGE_DIGEST)
507
515
runAfter :
508
516
- build-image-index
509
517
taskRef :
510
518
params :
511
519
- name : name
512
520
value : sast-unicode-check-oci-ta
513
521
- name : bundle
514
- value : quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.2 @sha256:df185dbe4e2852668f9c46f938dd752e90ea9c79696363378435a6499596c319
522
+ value : quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.3 @sha256:a2bde66f6b4164620298c7d709b8f08515409404000fa1dc2260d2508b135651
515
523
- name : kind
516
524
value : task
517
525
resolver : bundles
@@ -522,16 +530,18 @@ spec:
522
530
- " false"
523
531
- name : apply-tags
524
532
params :
525
- - name : IMAGE
533
+ - name : IMAGE_URL
526
534
value : $(tasks.build-image-index.results.IMAGE_URL)
535
+ - name : IMAGE_DIGEST
536
+ value : $(tasks.build-image-index.results.IMAGE_DIGEST)
527
537
runAfter :
528
538
- build-image-index
529
539
taskRef :
530
540
params :
531
541
- name : name
532
542
value : apply-tags
533
543
- name : bundle
534
- value : quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.1 @sha256:9d9871143ab3a818f681488be6074f5b2f892c1843795a46f6daf3f5487e72d1
544
+ value : quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2 @sha256:f44be1bf0262471f2f503f5e19da5f0628dcaf968c86272a2ad6b4871e708448
535
545
- name : kind
536
546
value : task
537
547
resolver : bundles
@@ -554,7 +564,7 @@ spec:
554
564
- name : name
555
565
value : push-dockerfile-oci-ta
556
566
- name : bundle
557
- value : quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:d0ee13ab3d9564f7ee806a8ceaced934db493a3a40e11ff6db3a912b8bbace95
567
+ value : quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:49f778479f468e71c2cfef722e96aa813d7ef98bde8a612e1bf1a13cd70849ec
558
568
- name : kind
559
569
value : task
560
570
resolver : bundles
@@ -571,7 +581,7 @@ spec:
571
581
- name : name
572
582
value : rpms-signature-scan
573
583
- name : bundle
574
- value : quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:297c2d8928aa3b114fcb1ba5d9da8b10226b68fed30706e78a6a5089c6cd30e3
584
+ value : quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:1b6c20ab3dbfb0972803d3ebcb2fa72642e59400c77bd66dfd82028bdd09e120
575
585
- name : kind
576
586
value : task
577
587
resolver : bundles
0 commit comments