Skip to content

Update Konflux references #14679

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
red-hat-konflux-kflux-prd-rh02 wants to merge 1 commit into
base: master
Choose a base branch
from
+68 −32
Open

Update Konflux references #14679

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
50 changes: 34 additions & 16 deletions .tekton/compliance-operator-content-dev-pull-request.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@
build.appstudio.redhat.com/target_branch: '{{target_branch}}'
pipelinesascode.tekton.dev/cancel-in-progress: "true"
pipelinesascode.tekton.dev/max-keep-runs: "3"
pipelinesascode.tekton.dev/on-cel-expression: event == "pull_request" && target_branch == "master"

Check failure on line 11 in .tekton/compliance-operator-content-dev-pull-request.yaml

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed yaml files 

11:100 [line-length] line too long (102 > 99 characters)
creationTimestamp:
labels:
appstudio.openshift.io/application: compliance-operator-dev
Expand All @@ -18,17 +18,17 @@
namespace: ocp-isc-tenant
spec:
params:
- name: git-url

Check failure on line 21 in .tekton/compliance-operator-content-dev-pull-request.yaml

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed yaml files 

21:3 [indentation] wrong indentation: expected 4 but found 2
value: '{{source_url}}'
- name: revision
value: '{{revision}}'
- name: output-image
value: quay.io/redhat-user-workloads/ocp-isc-tenant/compliance-operator-content-dev:on-pr-{{revision}}

Check failure on line 26 in .tekton/compliance-operator-content-dev-pull-request.yaml

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed yaml files 

26:100 [line-length] line too long (106 > 99 characters)
- name: image-expires-after
value: 5d
- name: build-platforms
value:
- linux/x86_64

Check failure on line 31 in .tekton/compliance-operator-content-dev-pull-request.yaml

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed yaml files 

31:5 [indentation] wrong indentation: expected 6 but found 4
- linux/arm64
- linux/ppc64le
- linux/s390x
Expand All @@ -42,21 +42,21 @@
value: "true"
pipelineSpec:
description: |
This pipeline is ideal for building multi-arch container images from a Containerfile while maintaining trust after pipeline customization.

Check failure on line 45 in .tekton/compliance-operator-content-dev-pull-request.yaml

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed yaml files 

45:100 [line-length] line too long (144 > 99 characters)

_Uses `buildah` to create a multi-platform container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. This pipeline requires that the [multi platform controller](https://github.com/konflux-ci/multi-platform-controller) is deployed and configured on your Konflux instance. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.

Check failure on line 47 in .tekton/compliance-operator-content-dev-pull-request.yaml

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed yaml files 

47:100 [line-length] line too long (702 > 99 characters)
This pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-multi-platform-oci-ta?tab=tags)_

Check failure on line 48 in .tekton/compliance-operator-content-dev-pull-request.yaml

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed yaml files 

48:100 [line-length] line too long (169 > 99 characters)
finally:
- name: show-sbom

Check failure on line 50 in .tekton/compliance-operator-content-dev-pull-request.yaml

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed yaml files 

50:5 [indentation] wrong indentation: expected 6 but found 4
params:
- name: IMAGE_URL

Check failure on line 52 in .tekton/compliance-operator-content-dev-pull-request.yaml

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed yaml files 

52:7 [indentation] wrong indentation: expected 8 but found 6
value: $(tasks.build-image-index.results.IMAGE_URL)
taskRef:
params:
- name: name

Check failure on line 56 in .tekton/compliance-operator-content-dev-pull-request.yaml

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed yaml files 

56:9 [indentation] wrong indentation: expected 10 but found 8
value: show-sbom
- name: bundle
value: quay.io/konflux-ci/tekton-catalog/task-show-sbom:0.1@sha256:04994df487ee886adbe60a8a5866647fbdfd53cc26f7b2554272ba51bf7af29e
value: quay.io/konflux-ci/tekton-catalog/task-show-sbom:0.1@sha256:a7346ed61237db4f82ff782e0c9e8b30536e0e67b907ad600341a6d192e80012
- name: kind
value: task
resolver: bundles
Expand Down Expand Up @@ -128,6 +128,14 @@
default: 'false'
description: Enable cache proxy configuration
type: string
- name: sast-target-dirs
type: string
default: .
description: Target directories to scan with SAST tools. Multiple values should be separated with commas.
- name: enable-package-registry-proxy
default: 'true'
description: Use the package registry proxy when prefetching dependencies
type: string
results:
- description: ""
name: IMAGE_URL
Expand All @@ -151,7 +159,7 @@
- name: name
value: init
- name: bundle
value: quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:288f3106118edc1d0f0c79a89c960abf5841a4dd8bc3f38feb10527253105b19
value: quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08
- name: kind
value: task
resolver: bundles
Expand All @@ -172,7 +180,7 @@
- name: name
value: git-clone-oci-ta
- name: bundle
value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:2c388d28651457db60bb90287e7d8c3680303197196e4476878d98d81e8b6dc9
value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:13d49df7dc9ae301627e45f95a236011422996152f1bea46cd60217b0f057407
- name: kind
value: task
resolver: bundles
Expand All @@ -191,14 +199,16 @@
value: $(params.image-expires-after)
- name: dev-package-managers
value: "true"
- name: enable-package-registry-proxy
value: $(params.enable-package-registry-proxy)
runAfter:
- clone-repository
taskRef:
params:
- name: name
value: prefetch-dependencies-oci-ta
- name: bundle
value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:9917d11f0a38c844184042d504b3d5605c009e6e43785fa113caae8b4c99b75e
value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:a2efbcdcecfa5293a622eb356a18f5c88e5714046b214fe8730b43b1a7dbb77d
- name: kind
value: task
resolver: bundles
Expand Down Expand Up @@ -254,7 +264,7 @@
- name: name
value: buildah-remote-oci-ta
- name: bundle
value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.9@sha256:4b3b76822c67fb734a9b3a5112e3810e271ee09d2777720a277a33870d3b038b
value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.9@sha256:f667d1146533b1d49829c08097e31faf27db24563da576434a707353de62099f
- name: kind
value: task
resolver: bundles
Expand All @@ -276,7 +286,7 @@
- name: name
value: build-image-index
- name: bundle
value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:ae3fa44f005054d4901d33413972227b5642d376968a67791535cdcc2e98473d
value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb
- name: kind
value: task
resolver: bundles
Expand All @@ -297,7 +307,7 @@
- name: name
value: source-build-oci-ta
- name: bundle
value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:362f0475df00e7dfb5f15dea0481d1b68b287f60411718d70a23da3c059a5613
value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:0917cfc7772e82cb8e74743c2104f43bcf2596aceafe87eec6fce69a8cac5f06
- name: kind
value: task
resolver: bundles
Expand All @@ -319,7 +329,7 @@
- name: name
value: deprecated-image-check
- name: bundle
value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:5ff16b7e6b4a8aa1adb352e74b9f831f77ff97bafd1b89ddb0038d63335f1a67
value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:e78d0d3baf3c8cfc1a5ad278196b74032d9568b143a87c7a79ab780fedfb296e
- name: kind
value: task
resolver: bundles
Expand All @@ -346,7 +356,7 @@
- name: name
value: clair-scan
- name: bundle
value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:89924756c91ded746cf9ccc9f07907595e5b2454ddda0219132913a4875a5f59
value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:8fad4c2e2f470f82ee43d6b2ac72327b4d9c6e9cb514a678911c1c9359c29894
- name: kind
value: task
resolver: bundles
Expand All @@ -366,7 +376,7 @@
- name: name
value: ecosystem-cert-preflight-checks
- name: bundle
value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:b4ac586edea81dcd25dfc17f1bd57899825be2b443e48d572cd05ce058f153bb
value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:e2bcf1174a6dae9969b8f12e94babe2a5881bc77a509f10823b6a9eac6392850
- name: kind
value: task
resolver: bundles
Expand All @@ -392,14 +402,16 @@
value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
- name: ARGS
value: "--project-name=openshift/compliance-operator --report --org=86a5b6bf-8aad-4842-ab41-e5c7358c202e"
- name: TARGET_DIRS
value: $(params.sast-target-dirs)
runAfter:
- build-image-index
taskRef:
params:
- name: name
value: sast-snyk-check-oci-ta
- name: bundle
value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:2ad986f28d0b724dabcf76c4de649f058f0e66998c7d2f61b66de46533bdbcad
value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:8f3ecbeaff579e41b8278f82d7fabac27845db17a8e687ea6c510c0c9aceabbb
- name: kind
value: task
resolver: bundles
Expand All @@ -421,7 +433,7 @@
- name: name
value: clamav-scan
- name: bundle
value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:9f18b216ce71a66909e7cb17d9b34526c02d73cf12884ba32d1f10614f7b9f5a
value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:567cb66bd2e1f4b58b9d4d756f3317fc62479e0b40aa0de66094b1f12d296cfc
- name: kind
value: task
resolver: bundles
Expand Down Expand Up @@ -464,6 +476,8 @@
value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
- name: CACHI2_ARTIFACT
value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
- name: TARGET_DIRS
value: $(params.sast-target-dirs)
runAfter:
- coverity-availability-check
taskRef:
Expand Down Expand Up @@ -511,6 +525,8 @@
value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
- name: CACHI2_ARTIFACT
value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
- name: TARGET_DIRS
value: $(params.sast-target-dirs)
runAfter:
- build-image-index
taskRef:
Expand All @@ -537,14 +553,16 @@
value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
- name: CACHI2_ARTIFACT
value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
- name: TARGET_DIRS
value: $(params.sast-target-dirs)
runAfter:
- build-image-index
taskRef:
params:
- name: name
value: sast-unicode-check-oci-ta
- name: bundle
value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:0854d9261760b2dc8f092569739685a5ab0a5c620e9cb8c1b78fef9e2d077a29
value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:90efa582de7770d55102b74014a765cd16a25a56f2cf644b56a788c70c4dc749
- name: kind
value: task
resolver: bundles
Expand All @@ -566,7 +584,7 @@
- name: name
value: apply-tags
- name: bundle
value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:aa62b41861c09e2e59c69cc6e9a1f740bf0c81e6a1eb03f57f59dfda0f65840e
value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66
- name: kind
value: task
resolver: bundles
Expand All @@ -589,7 +607,7 @@
- name: name
value: push-dockerfile-oci-ta
- name: bundle
value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:1bc2d0f26b89259db090a47bb38217c82c05e335d626653d184adf1d196ca131
value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:7855471abfe87de080b914f2f3ca27c59e64f6448a7c2435e51435b764494c71
- name: kind
value: task
resolver: bundles
Expand All @@ -606,7 +624,7 @@
- name: name
value: rpms-signature-scan
- name: bundle
value: quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:7f2e8ed5c2d8b2433cc9a7779ce7c617de7eb0dc8f16d07d2a792cee816ed503
value: quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:cfdb76c67f27bc498132431f5a24fbc17dac1981d6f6e3da5cf5964ac5abdd20
- name: kind
value: task
resolver: bundles
Expand Down
Loading
Loading