{ "apiVersion": "v1", "items": [ { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.redhat.com/nudged-components": "gh-multi-component-child-ziyc", "build.appstudio.redhat.com/nudging-commit": "build-nudge-parent-nxdxop?rev=278017baf749b1d34cb7501054dac4a2e281368c", "build.appstudio.redhat.com/nudging-component": "gh-multi-component-parent-ziyc", "build.appstudio.redhat.com/nudging-image": "quay.io/redhat-appstudio-qe/build-e2e-duuf/gh-multi-component-parent-ziyc:278017baf749b1d34cb7501054dac4a2e281368c", "build.appstudio.redhat.com/nudging-pipeline": "gh-multi-component-parent-ziyc-on-push-l7jzx", "chains.tekton.dev/signed": "true", "results.tekton.dev/record": "build-e2e-duuf/results/b09a2473-8c3e-441b-9764-ad22ad7bda73/records/b09a2473-8c3e-441b-9764-ad22ad7bda73", "results.tekton.dev/result": "build-e2e-duuf/results/b09a2473-8c3e-441b-9764-ad22ad7bda73", "results.tekton.dev/stored": "true" }, "creationTimestamp": "2026-05-15T10:47:05Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun" ], "generation": 1, "labels": { "build.appstudio.redhat.com/type": "nudge", "tekton.dev/pipeline": "renovate-pipeline-1778842025-bc24a" }, "name": "renovate-pipeline-1778842025-bc24a", "namespace": "build-e2e-duuf", "resourceVersion": "24964", "uid": "b09a2473-8c3e-441b-9764-ad22ad7bda73" }, "spec": { "pipelineSpec": { "tasks": [ { "name": "renovate", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "command": [ "bash", "-c", "RENOVATE_X_GITLAB_MERGE_REQUEST_DELAY=5000 RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS=11 RENOVATE_PR_HOURLY_LIMIT=0 RENOVATE_PR_CONCURRENT_LIMIT=0 RENOVATE_TOKEN=$TOKEN_ed902564fe RENOVATE_CONFIG_FILE=/configs/gh-multi-component-child-ziyc-8405e.json RENOVATE_HOST_RULES=\"[{'matchHost':'quay.io','username':'redhat-appstudio-qe+build_e2e_duuf_gh_multi_component_parent_ziyc_d35e5bd6ac','password':'${TOKEN_df7a3b70cb}'}]\" renovate" ], "computeResources": {}, "env": [ { "name": "LOG_LEVEL", "value": "debug" } ], "envFrom": [ { "prefix": "TOKEN_", "secretRef": { "name": "renovate-pipeline-1778842025-bc24a" } } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:29a2f31", "name": "renovate", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "volumeMounts": [ { "mountPath": "/configs", "name": "renovate-pipeline-1778842025-bc24a" } ] } ], "volumes": [ { "configMap": { "name": "renovate-pipeline-1778842025-bc24a" }, "name": "renovate-pipeline-1778842025-bc24a" } ] } } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-gh-multi-component-parent-ziyc" }, "timeouts": { "pipeline": "1h0m0s" } }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "renovate-pipeline-1778842025-bc24a-renovate", "pipelineTaskName": "renovate" } ], "completionTime": "2026-05-15T10:52:13Z", "conditions": [ { "lastTransitionTime": "2026-05-15T10:52:13Z", "message": "Tasks Completed: 1 (Failed: 0, Cancelled 0), Skipped: 0", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "tasks": [ { "name": "renovate", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "command": [ "bash", "-c", "RENOVATE_X_GITLAB_MERGE_REQUEST_DELAY=5000 RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS=11 RENOVATE_PR_HOURLY_LIMIT=0 RENOVATE_PR_CONCURRENT_LIMIT=0 RENOVATE_TOKEN=$TOKEN_ed902564fe RENOVATE_CONFIG_FILE=/configs/gh-multi-component-child-ziyc-8405e.json RENOVATE_HOST_RULES=\"[{'matchHost':'quay.io','username':'redhat-appstudio-qe+build_e2e_duuf_gh_multi_component_parent_ziyc_d35e5bd6ac','password':'${TOKEN_df7a3b70cb}'}]\" renovate" ], "computeResources": {}, "env": [ { "name": "LOG_LEVEL", "value": "debug" } ], "envFrom": [ { "prefix": "TOKEN_", "secretRef": { "name": "renovate-pipeline-1778842025-bc24a" } } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:29a2f31", "name": "renovate", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "volumeMounts": [ { "mountPath": "/configs", "name": "renovate-pipeline-1778842025-bc24a" } ] } ], "volumes": [ { "configMap": { "name": "renovate-pipeline-1778842025-bc24a" }, "name": "renovate-pipeline-1778842025-bc24a" } ] } } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "startTime": "2026-05-15T10:47:05Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "appstudio.openshift.io/snapshot": "build-suite-positive-mc-iuyd-20260515-103541-000", "appstudio.openshift.io/snapshots": "build-suite-positive-mc-iuyd-20260515-103541-000", "build.appstudio.openshift.io/repo": "https://github.com/redhat-appstudio-qe/sample-multi-component?rev=8170c2d76d0cc1acaf7fbb33d110b6c089990525", "build.appstudio.redhat.com/commit_sha": "8170c2d76d0cc1acaf7fbb33d110b6c089990525", "build.appstudio.redhat.com/pull_request_number": "33403", "build.appstudio.redhat.com/target_branch": "multi-component-base-gakmsu", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "multi-component-base-gakmsu", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "76163761862", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-xkhnou", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "72200095", "pipelinesascode.tekton.dev/log-url": "https://localhost:9443/ns/build-e2e-ogfb/pipelinerun/go-component-iyumhb-on-pull-request-d72ks", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"multi-component-base-gakmsu\" \u0026\u0026 ( \"go-component/***\".pathChanged() || \".tekton/go-component-iyumhb-pull-request.yaml\".pathChanged() )", "pipelinesascode.tekton.dev/original-prname": "go-component-iyumhb-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "33403", "pipelinesascode.tekton.dev/repo-url": "https://github.com/redhat-appstudio-qe/sample-multi-component", "pipelinesascode.tekton.dev/repository": "github-com-redhat-appstudio-qe-sample-multi-component", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "konflux-ci-e2e-tests[bot]", "pipelinesascode.tekton.dev/sha": "8170c2d76d0cc1acaf7fbb33d110b6c089990525", "pipelinesascode.tekton.dev/sha-title": "konflux-ci e2e-tests update go-component-iyumhb", "pipelinesascode.tekton.dev/sha-url": "https://github.com/redhat-appstudio-qe/sample-multi-component/commit/8170c2d76d0cc1acaf7fbb33d110b6c089990525", "pipelinesascode.tekton.dev/source-branch": "konflux-go-component-iyumhb", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/redhat-appstudio-qe/sample-multi-component", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "sample-multi-component", "results.tekton.dev/record": "build-e2e-ogfb/results/f7d59475-0eb6-459f-9c95-35446d97c553/records/f7d59475-0eb6-459f-9c95-35446d97c553", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"sample-multi-component\",\"commit\":\"8170c2d76d0cc1acaf7fbb33d110b6c089990525\",\"eventType\":\"pull_request\",\"pull_request-id\":33403}", "results.tekton.dev/result": "build-e2e-ogfb/results/f7d59475-0eb6-459f-9c95-35446d97c553", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Sucessfully created snapshot. See annotation appstudio.openshift.io/snapshot for name\",\"status\":\"success\"}", "test.appstudio.openshift.io/pr-group": "konflux-go-component-iyumhb", "test.appstudio.openshift.io/snapshot-creation-report": "SnapshotCreated" }, "creationTimestamp": "2026-05-15T10:35:41Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "go-component-iyumhb-on-pull-request-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.42.0", "appstudio.openshift.io/application": "build-suite-positive-mc-iuyd", "appstudio.openshift.io/component": "go-component-iyumhb", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "76163761862", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/original-prname": "go-component-iyumhb-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "33403", "pipelinesascode.tekton.dev/repository": "github-com-redhat-appstudio-qe-sample-multi-component", "pipelinesascode.tekton.dev/sha": "8170c2d76d0cc1acaf7fbb33d110b6c089990525", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "sample-multi-component", "tekton.dev/pipeline": "go-component-iyumhb-on-pull-request-d72ks", "test.appstudio.openshift.io/pr-group-sha": "01c828a32190b7ddbf356a9193c35435568f6ca06bc7f5522d4ea361a5a71c" }, "name": "go-component-iyumhb-on-pull-request-d72ks", "namespace": "build-e2e-ogfb", "resourceVersion": "18559", "uid": "f7d59475-0eb6-459f-9c95-35446d97c553" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/redhat-appstudio-qe/sample-multi-component" }, { "name": "revision", "value": "8170c2d76d0cc1acaf7fbb33d110b6c089990525" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/build-e2e-ogfb/go-component-iyumhb:on-pr-8170c2d76d0cc1acaf7fbb33d110b6c089990525" }, { "name": "image-expires-after", "value": "5d" }, { "name": "dockerfile", "value": "docker/Dockerfile" }, { "name": "path-context", "value": "go-component" } ], "pipelineSpec": { "description": "This pipeline is ideal for building container images from a Containerfile while maintaining trust after pipeline customization.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Build a source image.", "name": "build-source-image", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:13d49df7dc9ae301627e45f95a236011422996152f1bea46cd60217b0f057407" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:a2efbcdcecfa5293a622eb356a18f5c88e5714046b214fe8730b43b1a7dbb77d" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta:0.9@sha256:681d9f65a7f50cb260ee576ccab551e11d63c549f1e1ef3d201da3c112855bd6" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-source-image", "params": [ { "name": "BINARY_IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "BINARY_IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "source-build-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:0917cfc7772e82cb8e74743c2104f43bcf2596aceafe87eec6fce69a8cac5f06" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.build-source-image)", "operator": "in", "values": [ "true" ] } ] }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clair-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:9397d3eb9f1cbebaa15e93256e0ca9eaca148baa674be72f07f4a00df63c4609" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "ecosystem-cert-preflight-checks" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9c300728a03f41beee9a689422d66513d32ab5f804664fe561b11cebacd07799" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-snyk-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:8f3ecbeaff579e41b8278f82d7fabac27845db17a8e687ea6c510c0c9aceabbb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:9f18b216ce71a66909e7cb17d9b34526c02d73cf12884ba32d1f10614f7b9f5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:c4ef47e3b4e0508572d266fb745be7e374c29dc02580328cbe9f4d472a8aca57" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:90efa582de7770d55102b74014a765cd16a25a56f2cf644b56a788c70c4dc749" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "apply-tags", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "apply-tags" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "push-dockerfile", "params": [ { "name": "IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "push-dockerfile-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:7855471abfe87de080b914f2f3ca27c59e64f6448a7c2435e51435b764494c71" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:d4e3499ad4af6869470233bef6faaa1bdd69ef56276841eeec93ce6e62deeb93" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-go-component-iyumhb" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-xkhnou" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-iyumhb-on-pull-request-d72ks-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-iyumhb-on-pull-request-d72ks-clone-repository", "pipelineTaskName": "clone-repository" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-iyumhb-on-pull-request-d72ks-prefetch-dependencies", "pipelineTaskName": "prefetch-dependencies" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-iyumhb-on-pull-request-d72ks-build-container", "pipelineTaskName": "build-container" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-iyumhb-on-pull-request-d72ks-build-image-index", "pipelineTaskName": "build-image-index" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-19fa12433945c7f7a21010c023767ac3-deprecated-base-image-check", "pipelineTaskName": "deprecated-base-image-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-iyumhb-on-pull-request-d72ks-clair-scan", "pipelineTaskName": "clair-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-iyumhb-on-pull-reqcb4f98f42b95940d839ad378ea98841a", "pipelineTaskName": "ecosystem-cert-preflight-checks", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-iyumhb-on-pull-request-d72ks-sast-snyk-check", "pipelineTaskName": "sast-snyk-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-iyumhb-on-pull-request-d72ks-clamav-scan", "pipelineTaskName": "clamav-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-iyumhb-on-pull-request-d72ks-sast-shell-check", "pipelineTaskName": "sast-shell-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-iyumhb-on-pull-request-d72ks-sast-unicode-check", "pipelineTaskName": "sast-unicode-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-iyumhb-on-pull-request-d72ks-apply-tags", "pipelineTaskName": "apply-tags" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-iyumhb-on-pull-request-d72ks-push-dockerfile", "pipelineTaskName": "push-dockerfile" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-iyumhb-on-pull-request-d72ks-rpms-signature-scan", "pipelineTaskName": "rpms-signature-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "completionTime": "2026-05-15T10:43:19Z", "conditions": [ { "lastTransitionTime": "2026-05-15T10:43:19Z", "message": "Tasks Completed: 15 (Failed: 0, Cancelled 0), Skipped: 1", "reason": "Completed", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building container images from a Containerfile while maintaining trust after pipeline customization.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Build a source image.", "name": "build-source-image", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/redhat-appstudio-qe/sample-multi-component" }, { "name": "revision", "value": "8170c2d76d0cc1acaf7fbb33d110b6c089990525" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-ogfb/go-component-iyumhb:on-pr-8170c2d76d0cc1acaf7fbb33d110b6c089990525.git" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:13d49df7dc9ae301627e45f95a236011422996152f1bea46cd60217b0f057407" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-ogfb/go-component-iyumhb:on-pr-8170c2d76d0cc1acaf7fbb33d110b6c089990525.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:a2efbcdcecfa5293a622eb356a18f5c88e5714046b214fe8730b43b1a7dbb77d" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-ogfb/go-component-iyumhb:on-pr-8170c2d76d0cc1acaf7fbb33d110b6c089990525" }, { "name": "DOCKERFILE", "value": "docker/Dockerfile" }, { "name": "CONTEXT", "value": "go-component" }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "5d" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta:0.9@sha256:681d9f65a7f50cb260ee576ccab551e11d63c549f1e1ef3d201da3c112855bd6" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-ogfb/go-component-iyumhb:on-pr-8170c2d76d0cc1acaf7fbb33d110b6c089990525" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-source-image", "params": [ { "name": "BINARY_IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "BINARY_IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "source-build-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:0917cfc7772e82cb8e74743c2104f43bcf2596aceafe87eec6fce69a8cac5f06" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "true" ] } ] }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clair-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:9397d3eb9f1cbebaa15e93256e0ca9eaca148baa674be72f07f4a00df63c4609" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "ecosystem-cert-preflight-checks" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9c300728a03f41beee9a689422d66513d32ab5f804664fe561b11cebacd07799" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-snyk-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:8f3ecbeaff579e41b8278f82d7fabac27845db17a8e687ea6c510c0c9aceabbb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:9f18b216ce71a66909e7cb17d9b34526c02d73cf12884ba32d1f10614f7b9f5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:c4ef47e3b4e0508572d266fb745be7e374c29dc02580328cbe9f4d472a8aca57" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:90efa582de7770d55102b74014a765cd16a25a56f2cf644b56a788c70c4dc749" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "apply-tags", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "apply-tags" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "push-dockerfile", "params": [ { "name": "IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "DOCKERFILE", "value": "docker/Dockerfile" }, { "name": "CONTEXT", "value": "go-component" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "push-dockerfile-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:7855471abfe87de080b914f2f3ca27c59e64f6448a7c2435e51435b764494c71" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:d4e3499ad4af6869470233bef6faaa1bdd69ef56276841eeec93ce6e62deeb93" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "IMAGE_URL", "value": "quay.io/redhat-appstudio-qe/build-e2e-ogfb/go-component-iyumhb:on-pr-8170c2d76d0cc1acaf7fbb33d110b6c089990525" }, { "name": "IMAGE_DIGEST", "value": "sha256:af715c152a27129b03b9552f2bab2101dee06719190d9a2f5c1b7a7a829c37d5" }, { "name": "CHAINS-GIT_URL", "value": "https://github.com/redhat-appstudio-qe/sample-multi-component" }, { "name": "CHAINS-GIT_COMMIT", "value": "8170c2d76d0cc1acaf7fbb33d110b6c089990525" } ], "skippedTasks": [ { "name": "build-source-image", "reason": "When Expressions evaluated to false", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "true" ] } ] } ], "startTime": "2026-05-15T10:35:41Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.openshift.io/repo": "https://github.com/redhat-appstudio-qe/sample-multi-component?rev=334b63618792f9db3894cbf5561ee0cd52b5f4c0", "build.appstudio.redhat.com/commit_sha": "334b63618792f9db3894cbf5561ee0cd52b5f4c0", "build.appstudio.redhat.com/target_branch": "multi-component-base-gakmsu", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "multi-component-base-gakmsu", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "76164835528", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-agisii", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "72200095", "pipelinesascode.tekton.dev/log-url": "https://localhost:9443/ns/build-e2e-ogfb/pipelinerun/go-component-iyumhb-on-push-dh9vh", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"push\" \u0026\u0026 target_branch == \"multi-component-base-gakmsu\" \u0026\u0026 ( \"go-component/***\".pathChanged() || \".tekton/go-component-iyumhb-push.yaml\".pathChanged() )", "pipelinesascode.tekton.dev/original-prname": "go-component-iyumhb-on-push", "pipelinesascode.tekton.dev/pull-request": "33403", "pipelinesascode.tekton.dev/repo-url": "https://github.com/redhat-appstudio-qe/sample-multi-component", "pipelinesascode.tekton.dev/repository": "github-com-redhat-appstudio-qe-sample-multi-component", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-qe-bots-2", "pipelinesascode.tekton.dev/sha": "334b63618792f9db3894cbf5561ee0cd52b5f4c0", "pipelinesascode.tekton.dev/sha-title": "Merge pull request #33403 from redhat-appstudio-qe/konflux-go-component-iyumhb\n\nkonflux-ci e2e-tests update go-component-iyumhb", "pipelinesascode.tekton.dev/sha-url": "https://github.com/redhat-appstudio-qe/sample-multi-component/commit/334b63618792f9db3894cbf5561ee0cd52b5f4c0", "pipelinesascode.tekton.dev/source-branch": "refs/heads/multi-component-base-gakmsu", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/redhat-appstudio-qe/sample-multi-component", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "sample-multi-component", "results.tekton.dev/record": "build-e2e-ogfb/results/4bec288b-0c75-45b2-8afa-6137890343c1/records/4bec288b-0c75-45b2-8afa-6137890343c1", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"sample-multi-component\",\"commit\":\"334b63618792f9db3894cbf5561ee0cd52b5f4c0\",\"eventType\":\"push\",\"pull_request-id\":33403}", "results.tekton.dev/result": "build-e2e-ogfb/results/4bec288b-0c75-45b2-8afa-6137890343c1", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/pr-status": "merged" }, "creationTimestamp": "2026-05-15T10:43:37Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer", "results.tekton.dev/pipelinerun" ], "generateName": "go-component-iyumhb-on-push-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.42.0", "appstudio.openshift.io/application": "build-suite-positive-mc-iuyd", "appstudio.openshift.io/component": "go-component-iyumhb", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "76164835528", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/original-prname": "go-component-iyumhb-on-push", "pipelinesascode.tekton.dev/pull-request": "33403", "pipelinesascode.tekton.dev/repository": "github-com-redhat-appstudio-qe-sample-multi-component", "pipelinesascode.tekton.dev/sha": "334b63618792f9db3894cbf5561ee0cd52b5f4c0", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "sample-multi-component", "tekton.dev/pipeline": "go-component-iyumhb-on-push-dh9vh" }, "name": "go-component-iyumhb-on-push-dh9vh", "namespace": "build-e2e-ogfb", "resourceVersion": "24109", "uid": "4bec288b-0c75-45b2-8afa-6137890343c1" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/redhat-appstudio-qe/sample-multi-component" }, { "name": "revision", "value": "334b63618792f9db3894cbf5561ee0cd52b5f4c0" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/build-e2e-ogfb/go-component-iyumhb:334b63618792f9db3894cbf5561ee0cd52b5f4c0" }, { "name": "dockerfile", "value": "docker/Dockerfile" }, { "name": "path-context", "value": "go-component" } ], "pipelineSpec": { "description": "This pipeline is ideal for building container images from a Containerfile while maintaining trust after pipeline customization.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Build a source image.", "name": "build-source-image", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:13d49df7dc9ae301627e45f95a236011422996152f1bea46cd60217b0f057407" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:a2efbcdcecfa5293a622eb356a18f5c88e5714046b214fe8730b43b1a7dbb77d" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta:0.9@sha256:681d9f65a7f50cb260ee576ccab551e11d63c549f1e1ef3d201da3c112855bd6" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-source-image", "params": [ { "name": "BINARY_IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "BINARY_IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "source-build-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:0917cfc7772e82cb8e74743c2104f43bcf2596aceafe87eec6fce69a8cac5f06" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.build-source-image)", "operator": "in", "values": [ "true" ] } ] }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clair-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:9397d3eb9f1cbebaa15e93256e0ca9eaca148baa674be72f07f4a00df63c4609" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "ecosystem-cert-preflight-checks" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9c300728a03f41beee9a689422d66513d32ab5f804664fe561b11cebacd07799" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-snyk-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:8f3ecbeaff579e41b8278f82d7fabac27845db17a8e687ea6c510c0c9aceabbb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:9f18b216ce71a66909e7cb17d9b34526c02d73cf12884ba32d1f10614f7b9f5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:c4ef47e3b4e0508572d266fb745be7e374c29dc02580328cbe9f4d472a8aca57" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:90efa582de7770d55102b74014a765cd16a25a56f2cf644b56a788c70c4dc749" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "apply-tags", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "apply-tags" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "push-dockerfile", "params": [ { "name": "IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "push-dockerfile-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:7855471abfe87de080b914f2f3ca27c59e64f6448a7c2435e51435b764494c71" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:d4e3499ad4af6869470233bef6faaa1bdd69ef56276841eeec93ce6e62deeb93" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-go-component-iyumhb" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-agisii" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-iyumhb-on-push-dh9vh-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-iyumhb-on-push-dh9vh-clone-repository", "pipelineTaskName": "clone-repository" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-iyumhb-on-push-dh9vh-prefetch-dependencies", "pipelineTaskName": "prefetch-dependencies" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-iyumhb-on-push-dh9vh-build-container", "pipelineTaskName": "build-container" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-iyumhb-on-push-dh9vh-build-image-index", "pipelineTaskName": "build-image-index" } ], "completionTime": "2026-05-15T10:50:22Z", "conditions": [ { "lastTransitionTime": "2026-05-15T10:50:22Z", "message": "Tasks Completed: 5 (Failed: 1, Cancelled 0), Skipped: 11", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building container images from a Containerfile while maintaining trust after pipeline customization.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Build a source image.", "name": "build-source-image", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/redhat-appstudio-qe/sample-multi-component" }, { "name": "revision", "value": "334b63618792f9db3894cbf5561ee0cd52b5f4c0" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-ogfb/go-component-iyumhb:334b63618792f9db3894cbf5561ee0cd52b5f4c0.git" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:13d49df7dc9ae301627e45f95a236011422996152f1bea46cd60217b0f057407" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-ogfb/go-component-iyumhb:334b63618792f9db3894cbf5561ee0cd52b5f4c0.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:a2efbcdcecfa5293a622eb356a18f5c88e5714046b214fe8730b43b1a7dbb77d" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-ogfb/go-component-iyumhb:334b63618792f9db3894cbf5561ee0cd52b5f4c0" }, { "name": "DOCKERFILE", "value": "docker/Dockerfile" }, { "name": "CONTEXT", "value": "go-component" }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta:0.9@sha256:681d9f65a7f50cb260ee576ccab551e11d63c549f1e1ef3d201da3c112855bd6" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-ogfb/go-component-iyumhb:334b63618792f9db3894cbf5561ee0cd52b5f4c0" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-source-image", "params": [ { "name": "BINARY_IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "BINARY_IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "source-build-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:0917cfc7772e82cb8e74743c2104f43bcf2596aceafe87eec6fce69a8cac5f06" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "true" ] } ] }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clair-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:9397d3eb9f1cbebaa15e93256e0ca9eaca148baa674be72f07f4a00df63c4609" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "ecosystem-cert-preflight-checks" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9c300728a03f41beee9a689422d66513d32ab5f804664fe561b11cebacd07799" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-snyk-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:8f3ecbeaff579e41b8278f82d7fabac27845db17a8e687ea6c510c0c9aceabbb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:9f18b216ce71a66909e7cb17d9b34526c02d73cf12884ba32d1f10614f7b9f5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:c4ef47e3b4e0508572d266fb745be7e374c29dc02580328cbe9f4d472a8aca57" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:90efa582de7770d55102b74014a765cd16a25a56f2cf644b56a788c70c4dc749" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "apply-tags", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "apply-tags" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "push-dockerfile", "params": [ { "name": "IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "DOCKERFILE", "value": "docker/Dockerfile" }, { "name": "CONTEXT", "value": "go-component" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "push-dockerfile-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:7855471abfe87de080b914f2f3ca27c59e64f6448a7c2435e51435b764494c71" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:d4e3499ad4af6869470233bef6faaa1bdd69ef56276841eeec93ce6e62deeb93" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "CHAINS-GIT_URL", "value": "https://github.com/redhat-appstudio-qe/sample-multi-component" }, { "name": "CHAINS-GIT_COMMIT", "value": "334b63618792f9db3894cbf5561ee0cd52b5f4c0" } ], "skippedTasks": [ { "name": "build-source-image", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "true" ] } ] }, { "name": "deprecated-base-image-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "apply-tags", "reason": "PipelineRun was stopping" }, { "name": "push-dockerfile", "reason": "PipelineRun was stopping" }, { "name": "rpms-signature-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "startTime": "2026-05-15T10:43:37Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.openshift.io/repo": "https://github.com/redhat-appstudio-qe/sample-multi-component?rev=27dc8977d70345b28e9a06acd6175ef492b0a45c", "build.appstudio.redhat.com/commit_sha": "27dc8977d70345b28e9a06acd6175ef492b0a45c", "build.appstudio.redhat.com/pull_request_number": "33404", "build.appstudio.redhat.com/target_branch": "multi-component-base-gakmsu", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "multi-component-base-gakmsu", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "76165996425", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-pagfpb", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "72200095", "pipelinesascode.tekton.dev/log-url": "https://localhost:9443/ns/build-e2e-ogfb/pipelinerun/python-component-ivnzcl-on-pull-request-9nd5s", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"multi-component-base-gakmsu\" \u0026\u0026 ( \"python-component/***\".pathChanged() || \".tekton/python-component-ivnzcl-pull-request.yaml\".pathChanged() )", "pipelinesascode.tekton.dev/original-prname": "python-component-ivnzcl-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "33404", "pipelinesascode.tekton.dev/repo-url": "https://github.com/redhat-appstudio-qe/sample-multi-component", "pipelinesascode.tekton.dev/repository": "github-com-redhat-appstudio-qe-sample-multi-component", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "konflux-ci-e2e-tests[bot]", "pipelinesascode.tekton.dev/sha": "27dc8977d70345b28e9a06acd6175ef492b0a45c", "pipelinesascode.tekton.dev/sha-title": "e2e test commit message", "pipelinesascode.tekton.dev/sha-url": "https://github.com/redhat-appstudio-qe/sample-multi-component/commit/27dc8977d70345b28e9a06acd6175ef492b0a45c", "pipelinesascode.tekton.dev/source-branch": "konflux-python-component-ivnzcl", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/redhat-appstudio-qe/sample-multi-component", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "sample-multi-component", "results.tekton.dev/record": "build-e2e-ogfb/results/126a36ce-99b6-4c88-aa6e-51a785b8d9be/records/126a36ce-99b6-4c88-aa6e-51a785b8d9be", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"sample-multi-component\",\"commit\":\"27dc8977d70345b28e9a06acd6175ef492b0a45c\",\"eventType\":\"pull_request\",\"pull_request-id\":33404}", "results.tekton.dev/result": "build-e2e-ogfb/results/126a36ce-99b6-4c88-aa6e-51a785b8d9be", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/pr-group": "konflux-python-component-ivnzcl" }, "creationTimestamp": "2026-05-15T10:52:20Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer", "results.tekton.dev/pipelinerun" ], "generateName": "python-component-ivnzcl-on-pull-request-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.42.0", "appstudio.openshift.io/application": "build-suite-positive-mc-iuyd", "appstudio.openshift.io/component": "python-component-ivnzcl", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "76165996425", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/original-prname": "python-component-ivnzcl-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "33404", "pipelinesascode.tekton.dev/repository": "github-com-redhat-appstudio-qe-sample-multi-component", "pipelinesascode.tekton.dev/sha": "27dc8977d70345b28e9a06acd6175ef492b0a45c", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "sample-multi-component", "tekton.dev/pipeline": "python-component-ivnzcl-on-pull-request-9nd5s", "test.appstudio.openshift.io/pr-group-sha": "353ab154b6d11aaa16f209b0c5c8509edb99bd2a9aa626e209c5982926f219" }, "name": "python-component-ivnzcl-on-pull-request-9nd5s", "namespace": "build-e2e-ogfb", "resourceVersion": "26672", "uid": "126a36ce-99b6-4c88-aa6e-51a785b8d9be" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/redhat-appstudio-qe/sample-multi-component" }, { "name": "revision", "value": "27dc8977d70345b28e9a06acd6175ef492b0a45c" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/build-e2e-ogfb/python-component-ivnzcl:on-pr-27dc8977d70345b28e9a06acd6175ef492b0a45c" }, { "name": "image-expires-after", "value": "5d" }, { "name": "dockerfile", "value": "docker/Dockerfile" }, { "name": "path-context", "value": "python-component" } ], "pipelineSpec": { "description": "This pipeline is ideal for building container images from a Containerfile while maintaining trust after pipeline customization.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Build a source image.", "name": "build-source-image", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:13d49df7dc9ae301627e45f95a236011422996152f1bea46cd60217b0f057407" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:a2efbcdcecfa5293a622eb356a18f5c88e5714046b214fe8730b43b1a7dbb77d" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta:0.9@sha256:681d9f65a7f50cb260ee576ccab551e11d63c549f1e1ef3d201da3c112855bd6" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-source-image", "params": [ { "name": "BINARY_IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "BINARY_IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "source-build-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:0917cfc7772e82cb8e74743c2104f43bcf2596aceafe87eec6fce69a8cac5f06" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.build-source-image)", "operator": "in", "values": [ "true" ] } ] }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clair-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:9397d3eb9f1cbebaa15e93256e0ca9eaca148baa674be72f07f4a00df63c4609" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "ecosystem-cert-preflight-checks" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9c300728a03f41beee9a689422d66513d32ab5f804664fe561b11cebacd07799" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-snyk-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:8f3ecbeaff579e41b8278f82d7fabac27845db17a8e687ea6c510c0c9aceabbb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:9f18b216ce71a66909e7cb17d9b34526c02d73cf12884ba32d1f10614f7b9f5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:c4ef47e3b4e0508572d266fb745be7e374c29dc02580328cbe9f4d472a8aca57" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:90efa582de7770d55102b74014a765cd16a25a56f2cf644b56a788c70c4dc749" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "apply-tags", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "apply-tags" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "push-dockerfile", "params": [ { "name": "IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "push-dockerfile-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:7855471abfe87de080b914f2f3ca27c59e64f6448a7c2435e51435b764494c71" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:d4e3499ad4af6869470233bef6faaa1bdd69ef56276841eeec93ce6e62deeb93" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-python-component-ivnzcl" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-pagfpb" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "python-component-ivnzcl-on-pull-request-9nd5s-init", "pipelineTaskName": "init" } ], "completionTime": "2026-05-15T10:52:42Z", "conditions": [ { "lastTransitionTime": "2026-05-15T10:52:42Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 15", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building container images from a Containerfile while maintaining trust after pipeline customization.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Build a source image.", "name": "build-source-image", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:5a423246792ac501ea279229b42ee57da9927da441c04b5c9ff86817b0856b08" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/redhat-appstudio-qe/sample-multi-component" }, { "name": "revision", "value": "27dc8977d70345b28e9a06acd6175ef492b0a45c" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-ogfb/python-component-ivnzcl:on-pr-27dc8977d70345b28e9a06acd6175ef492b0a45c.git" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:13d49df7dc9ae301627e45f95a236011422996152f1bea46cd60217b0f057407" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-ogfb/python-component-ivnzcl:on-pr-27dc8977d70345b28e9a06acd6175ef492b0a45c.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:a2efbcdcecfa5293a622eb356a18f5c88e5714046b214fe8730b43b1a7dbb77d" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-ogfb/python-component-ivnzcl:on-pr-27dc8977d70345b28e9a06acd6175ef492b0a45c" }, { "name": "DOCKERFILE", "value": "docker/Dockerfile" }, { "name": "CONTEXT", "value": "python-component" }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "5d" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta:0.9@sha256:681d9f65a7f50cb260ee576ccab551e11d63c549f1e1ef3d201da3c112855bd6" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-ogfb/python-component-ivnzcl:on-pr-27dc8977d70345b28e9a06acd6175ef492b0a45c" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-source-image", "params": [ { "name": "BINARY_IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "BINARY_IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "source-build-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:0917cfc7772e82cb8e74743c2104f43bcf2596aceafe87eec6fce69a8cac5f06" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "true" ] } ] }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clair-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:9397d3eb9f1cbebaa15e93256e0ca9eaca148baa674be72f07f4a00df63c4609" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "ecosystem-cert-preflight-checks" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:9c300728a03f41beee9a689422d66513d32ab5f804664fe561b11cebacd07799" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-snyk-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:8f3ecbeaff579e41b8278f82d7fabac27845db17a8e687ea6c510c0c9aceabbb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:9f18b216ce71a66909e7cb17d9b34526c02d73cf12884ba32d1f10614f7b9f5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:c4ef47e3b4e0508572d266fb745be7e374c29dc02580328cbe9f4d472a8aca57" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:90efa582de7770d55102b74014a765cd16a25a56f2cf644b56a788c70c4dc749" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "apply-tags", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "apply-tags" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "push-dockerfile", "params": [ { "name": "IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "DOCKERFILE", "value": "docker/Dockerfile" }, { "name": "CONTEXT", "value": "python-component" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "push-dockerfile-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:7855471abfe87de080b914f2f3ca27c59e64f6448a7c2435e51435b764494c71" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:d4e3499ad4af6869470233bef6faaa1bdd69ef56276841eeec93ce6e62deeb93" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "skippedTasks": [ { "name": "clone-repository", "reason": "PipelineRun was stopping" }, { "name": "prefetch-dependencies", "reason": "PipelineRun was stopping" }, { "name": "build-container", "reason": "PipelineRun was stopping" }, { "name": "build-image-index", "reason": "PipelineRun was stopping" }, { "name": "build-source-image", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "true" ] } ] }, { "name": "deprecated-base-image-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "apply-tags", "reason": "PipelineRun was stopping" }, { "name": "push-dockerfile", "reason": "PipelineRun was stopping" }, { "name": "rpms-signature-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "startTime": "2026-05-15T10:52:21Z" } } ], "kind": "List", "metadata": { "resourceVersion": "" } }