{ "apiVersion": "v1", "items": [ { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "appstudio.openshift.io/snapshot": "build-suite-positive-mc-pwnn-20260427-130045-000", "appstudio.openshift.io/snapshots": "build-suite-positive-mc-pwnn-20260427-130045-000", "build.appstudio.openshift.io/repo": "https://github.com/redhat-appstudio-qe/sample-multi-component?rev=2d3594d2a5126d58e31eba86d25ad5a65d470685", "build.appstudio.redhat.com/commit_sha": "2d3594d2a5126d58e31eba86d25ad5a65d470685", "build.appstudio.redhat.com/pull_request_number": "32613", "build.appstudio.redhat.com/target_branch": "multi-component-base-rmkuhk", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "multi-component-base-rmkuhk", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "73194774287", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-bpkbgc", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "72200095", "pipelinesascode.tekton.dev/log-url": "https://44.225.201.128:9443/ns/build-e2e-qxzr/pipelinerun/go-component-pfibdn-on-pull-request-bm6jr", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"multi-component-base-rmkuhk\" \u0026\u0026 ( \"go-component/***\".pathChanged() || \".tekton/go-component-pfibdn-pull-request.yaml\".pathChanged() )", "pipelinesascode.tekton.dev/original-prname": "go-component-pfibdn-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "32613", "pipelinesascode.tekton.dev/repo-url": "https://github.com/redhat-appstudio-qe/sample-multi-component", "pipelinesascode.tekton.dev/repository": "github.com.redhat-appstudio-qe.sample-multi-component", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "konflux-ci-e2e-tests[bot]", "pipelinesascode.tekton.dev/sha": "2d3594d2a5126d58e31eba86d25ad5a65d470685", "pipelinesascode.tekton.dev/sha-title": "e2e test commit message", "pipelinesascode.tekton.dev/sha-url": "https://github.com/redhat-appstudio-qe/sample-multi-component/commit/2d3594d2a5126d58e31eba86d25ad5a65d470685", "pipelinesascode.tekton.dev/source-branch": "konflux-go-component-pfibdn", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/redhat-appstudio-qe/sample-multi-component", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "sample-multi-component", "results.tekton.dev/record": "build-e2e-qxzr/results/9fdbf04a-72fd-4896-bd25-6a66737eed6d/records/9fdbf04a-72fd-4896-bd25-6a66737eed6d", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"sample-multi-component\",\"commit\":\"2d3594d2a5126d58e31eba86d25ad5a65d470685\",\"eventType\":\"pull_request\",\"pull_request-id\":32613}", "results.tekton.dev/result": "build-e2e-qxzr/results/9fdbf04a-72fd-4896-bd25-6a66737eed6d", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Sucessfully created snapshot. See annotation appstudio.openshift.io/snapshot for name\",\"status\":\"success\"}", "test.appstudio.openshift.io/pr-group": "konflux-go-component-pfibdn", "test.appstudio.openshift.io/snapshot-creation-report": "SnapshotCreated" }, "creationTimestamp": "2026-04-27T13:00:45Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer", "results.tekton.dev/pipelinerun" ], "generateName": "go-component-pfibdn-on-pull-request-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.42.0", "appstudio.openshift.io/application": "build-suite-positive-mc-pwnn", "appstudio.openshift.io/component": "go-component-pfibdn", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "73194774287", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/original-prname": "go-component-pfibdn-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "32613", "pipelinesascode.tekton.dev/repository": "github.com.redhat-appstudio-qe.sample-multi-component", "pipelinesascode.tekton.dev/sha": "2d3594d2a5126d58e31eba86d25ad5a65d470685", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "sample-multi-component", "tekton.dev/pipeline": "go-component-pfibdn-on-pull-request-bm6jr", "test.appstudio.openshift.io/pr-group-sha": "0ff5838e825bf88e97b1310c1b83acb79b7d84bd65f2fd2ccebf47b31d3a4f" }, "name": "go-component-pfibdn-on-pull-request-bm6jr", "namespace": "build-e2e-qxzr", "resourceVersion": "43926", "uid": "9fdbf04a-72fd-4896-bd25-6a66737eed6d" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/redhat-appstudio-qe/sample-multi-component" }, { "name": "revision", "value": "2d3594d2a5126d58e31eba86d25ad5a65d470685" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/build-e2e-qxzr/go-component-pfibdn:on-pr-2d3594d2a5126d58e31eba86d25ad5a65d470685" }, { "name": "image-expires-after", "value": "5d" }, { "name": "dockerfile", "value": "docker/Dockerfile" }, { "name": "path-context", "value": "go-component" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:78c5f696f6f7db7436060a91eb05252f913363caed46c05ad5a4b09957aa4197" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:b2224a0442ac705e20a25b8609e1760321d9d86da7901fd0392a90102688e37d" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-go-component-pfibdn" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-bpkbgc" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-pfibdn-on-pull-request-bm6jr-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-pfibdn-on-pull-request-bm6jr-clone-repository", "pipelineTaskName": "clone-repository" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-pfibdn-on-pull-request-bm6jr-prefetch-dependencies", "pipelineTaskName": "prefetch-dependencies" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-pfibdn-on-pull-request-bm6jr-build-container", "pipelineTaskName": "build-container" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-pfibdn-on-pull-request-bm6jr-build-image-index", "pipelineTaskName": "build-image-index" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-0bc9a8b6b17dc79ad2c56577c1c0f338-deprecated-base-image-check", "pipelineTaskName": "deprecated-base-image-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-pfibdn-on-pull-request-bm6jr-clamav-scan", "pipelineTaskName": "clamav-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-pfibdn-on-pull-request-bm6jr-sast-shell-check", "pipelineTaskName": "sast-shell-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-pfibdn-on-pull-request-bm6jr-sast-unicode-check", "pipelineTaskName": "sast-unicode-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-pfibdn-on-pull-request-bm6jr-rpms-signature-scan", "pipelineTaskName": "rpms-signature-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-pfibdn-on-pull-request-bm6jr-tpa-scan", "pipelineTaskName": "tpa-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "completionTime": "2026-04-27T13:24:10Z", "conditions": [ { "lastTransitionTime": "2026-04-27T13:24:10Z", "message": "Tasks Completed: 11 (Failed: 0, Cancelled 0), Skipped: 0", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/redhat-appstudio-qe/sample-multi-component" }, { "name": "revision", "value": "2d3594d2a5126d58e31eba86d25ad5a65d470685" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-qxzr/go-component-pfibdn:on-pr-2d3594d2a5126d58e31eba86d25ad5a65d470685.git" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-qxzr/go-component-pfibdn:on-pr-2d3594d2a5126d58e31eba86d25ad5a65d470685.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:78c5f696f6f7db7436060a91eb05252f913363caed46c05ad5a4b09957aa4197" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-qxzr/go-component-pfibdn:on-pr-2d3594d2a5126d58e31eba86d25ad5a65d470685" }, { "name": "DOCKERFILE", "value": "docker/Dockerfile" }, { "name": "CONTEXT", "value": "go-component" }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "5d" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-qxzr/go-component-pfibdn:on-pr-2d3594d2a5126d58e31eba86d25ad5a65d470685" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:b2224a0442ac705e20a25b8609e1760321d9d86da7901fd0392a90102688e37d" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "IMAGE_URL", "value": "quay.io/redhat-appstudio-qe/build-e2e-qxzr/go-component-pfibdn:on-pr-2d3594d2a5126d58e31eba86d25ad5a65d470685" }, { "name": "IMAGE_DIGEST", "value": "sha256:1431826d424c1cea5fa685e590997a0ec80e58d2d9f4cdf4d932137f699a9050" }, { "name": "CHAINS-GIT_URL", "value": "https://github.com/redhat-appstudio-qe/sample-multi-component" }, { "name": "CHAINS-GIT_COMMIT", "value": "2d3594d2a5126d58e31eba86d25ad5a65d470685" } ], "startTime": "2026-04-27T13:00:45Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "appstudio.openshift.io/snapshot": "build-suite-positive-mc-pwnn-20260427-132444-000", "appstudio.openshift.io/snapshots": "build-suite-positive-mc-pwnn-20260427-132444-000", "build.appstudio.openshift.io/repo": "https://github.com/redhat-appstudio-qe/sample-multi-component?rev=4549b4664d49610a1cdbc95138edbb0ddf9ad6f3", "build.appstudio.redhat.com/commit_sha": "4549b4664d49610a1cdbc95138edbb0ddf9ad6f3", "build.appstudio.redhat.com/target_branch": "multi-component-base-rmkuhk", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "multi-component-base-rmkuhk", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "73198869958", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-meoqnm", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "72200095", "pipelinesascode.tekton.dev/log-url": "https://44.225.201.128:9443/ns/build-e2e-qxzr/pipelinerun/go-component-pfibdn-on-push-j58dg", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"push\" \u0026\u0026 target_branch == \"multi-component-base-rmkuhk\" \u0026\u0026 ( \"go-component/***\".pathChanged() || \".tekton/go-component-pfibdn-push.yaml\".pathChanged() )", "pipelinesascode.tekton.dev/original-prname": "go-component-pfibdn-on-push", "pipelinesascode.tekton.dev/pull-request": "32613", "pipelinesascode.tekton.dev/repo-url": "https://github.com/redhat-appstudio-qe/sample-multi-component", "pipelinesascode.tekton.dev/repository": "github.com.redhat-appstudio-qe.sample-multi-component", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-qe-bots-2", "pipelinesascode.tekton.dev/sha": "4549b4664d49610a1cdbc95138edbb0ddf9ad6f3", "pipelinesascode.tekton.dev/sha-title": "Merge pull request #32613 from redhat-appstudio-qe/konflux-go-component-pfibdn\n\nkonflux-ci e2e-tests update go-component-pfibdn", "pipelinesascode.tekton.dev/sha-url": "https://github.com/redhat-appstudio-qe/sample-multi-component/commit/4549b4664d49610a1cdbc95138edbb0ddf9ad6f3", "pipelinesascode.tekton.dev/source-branch": "refs/heads/multi-component-base-rmkuhk", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/redhat-appstudio-qe/sample-multi-component", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "sample-multi-component", "results.tekton.dev/record": "build-e2e-qxzr/results/bc9b5f06-42a5-4426-9861-24e0e97e5b8e/records/bc9b5f06-42a5-4426-9861-24e0e97e5b8e", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"sample-multi-component\",\"commit\":\"4549b4664d49610a1cdbc95138edbb0ddf9ad6f3\",\"eventType\":\"push\",\"pull_request-id\":32613}", "results.tekton.dev/result": "build-e2e-qxzr/results/bc9b5f06-42a5-4426-9861-24e0e97e5b8e", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/added-to-global-candidate-list": "{\"result\":true,\"reason\":\"Success\",\"lastupdatedtime\":\"2026-04-27T13:44:02Z\"}", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Sucessfully created snapshot. See annotation appstudio.openshift.io/snapshot for name\",\"status\":\"success\"}", "test.appstudio.openshift.io/pr-status": "merged" }, "creationTimestamp": "2026-04-27T13:24:44Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer", "results.tekton.dev/pipelinerun" ], "generateName": "go-component-pfibdn-on-push-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.42.0", "appstudio.openshift.io/application": "build-suite-positive-mc-pwnn", "appstudio.openshift.io/component": "go-component-pfibdn", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "73198869958", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/original-prname": "go-component-pfibdn-on-push", "pipelinesascode.tekton.dev/pull-request": "32613", "pipelinesascode.tekton.dev/repository": "github.com.redhat-appstudio-qe.sample-multi-component", "pipelinesascode.tekton.dev/sha": "4549b4664d49610a1cdbc95138edbb0ddf9ad6f3", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "sample-multi-component", "tekton.dev/pipeline": "go-component-pfibdn-on-push-j58dg" }, "name": "go-component-pfibdn-on-push-j58dg", "namespace": "build-e2e-qxzr", "resourceVersion": "54323", "uid": "bc9b5f06-42a5-4426-9861-24e0e97e5b8e" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/redhat-appstudio-qe/sample-multi-component" }, { "name": "revision", "value": "4549b4664d49610a1cdbc95138edbb0ddf9ad6f3" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/build-e2e-qxzr/go-component-pfibdn:4549b4664d49610a1cdbc95138edbb0ddf9ad6f3" }, { "name": "dockerfile", "value": "docker/Dockerfile" }, { "name": "path-context", "value": "go-component" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:78c5f696f6f7db7436060a91eb05252f913363caed46c05ad5a4b09957aa4197" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:b2224a0442ac705e20a25b8609e1760321d9d86da7901fd0392a90102688e37d" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-go-component-pfibdn" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-meoqnm" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-pfibdn-on-push-j58dg-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-pfibdn-on-push-j58dg-clone-repository", "pipelineTaskName": "clone-repository" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-pfibdn-on-push-j58dg-prefetch-dependencies", "pipelineTaskName": "prefetch-dependencies" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-pfibdn-on-push-j58dg-build-container", "pipelineTaskName": "build-container" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-pfibdn-on-push-j58dg-build-image-index", "pipelineTaskName": "build-image-index" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-pfibdn-on-push-j58dg-deprecated-base-image-check", "pipelineTaskName": "deprecated-base-image-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-pfibdn-on-push-j58dg-clamav-scan", "pipelineTaskName": "clamav-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-pfibdn-on-push-j58dg-sast-shell-check", "pipelineTaskName": "sast-shell-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-pfibdn-on-push-j58dg-sast-unicode-check", "pipelineTaskName": "sast-unicode-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-pfibdn-on-push-j58dg-rpms-signature-scan", "pipelineTaskName": "rpms-signature-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-pfibdn-on-push-j58dg-tpa-scan", "pipelineTaskName": "tpa-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "completionTime": "2026-04-27T13:43:59Z", "conditions": [ { "lastTransitionTime": "2026-04-27T13:43:59Z", "message": "Tasks Completed: 11 (Failed: 0, Cancelled 0), Skipped: 0", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/redhat-appstudio-qe/sample-multi-component" }, { "name": "revision", "value": "4549b4664d49610a1cdbc95138edbb0ddf9ad6f3" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-qxzr/go-component-pfibdn:4549b4664d49610a1cdbc95138edbb0ddf9ad6f3.git" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-qxzr/go-component-pfibdn:4549b4664d49610a1cdbc95138edbb0ddf9ad6f3.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:78c5f696f6f7db7436060a91eb05252f913363caed46c05ad5a4b09957aa4197" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-qxzr/go-component-pfibdn:4549b4664d49610a1cdbc95138edbb0ddf9ad6f3" }, { "name": "DOCKERFILE", "value": "docker/Dockerfile" }, { "name": "CONTEXT", "value": "go-component" }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-qxzr/go-component-pfibdn:4549b4664d49610a1cdbc95138edbb0ddf9ad6f3" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:b2224a0442ac705e20a25b8609e1760321d9d86da7901fd0392a90102688e37d" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "IMAGE_URL", "value": "quay.io/redhat-appstudio-qe/build-e2e-qxzr/go-component-pfibdn:4549b4664d49610a1cdbc95138edbb0ddf9ad6f3" }, { "name": "IMAGE_DIGEST", "value": "sha256:b256ccf786ad8d7049268864e8fccecd45860cd3edb46408c083d5a08420cfd2" }, { "name": "CHAINS-GIT_URL", "value": "https://github.com/redhat-appstudio-qe/sample-multi-component" }, { "name": "CHAINS-GIT_COMMIT", "value": "4549b4664d49610a1cdbc95138edbb0ddf9ad6f3" } ], "startTime": "2026-04-27T13:24:44Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "appstudio.openshift.io/snapshot": "build-suite-component-update-txyr-20260427-130039-000", "appstudio.openshift.io/snapshots": "build-suite-component-update-txyr-20260427-130039-000", "build.appstudio.openshift.io/repo": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh/-/tree/0981ed9d79a198be5008cdc26ad502cc6e484a74", "build.appstudio.redhat.com/commit_sha": "0981ed9d79a198be5008cdc26ad502cc6e484a74", "build.appstudio.redhat.com/pull_request_number": "1", "build.appstudio.redhat.com/target_branch": "multi-component-child-base-fswd", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "multi-component-child-base-fswd", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "Merge Request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-ukivpw", "pipelinesascode.tekton.dev/git-provider": "gitlab", "pipelinesascode.tekton.dev/log-url": "https://44.225.201.128:9443/ns/build-e2e-trvz/pipelinerun/gl-multi-component-child-fswd-on-pull-request-mc2w4", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"multi-component-child-base-fswd\"", "pipelinesascode.tekton.dev/original-prname": "gl-multi-component-child-fswd-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "1", "pipelinesascode.tekton.dev/repo-url": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh", "pipelinesascode.tekton.dev/repository": "gitlab.com.konflux-qe.build-nudge-child-uwduhh", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "konflux-ci-qe-bot", "pipelinesascode.tekton.dev/sha": "0981ed9d79a198be5008cdc26ad502cc6e484a74", "pipelinesascode.tekton.dev/sha-title": "e2e test commit message", "pipelinesascode.tekton.dev/sha-url": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh/-/commit/0981ed9d79a198be5008cdc26ad502cc6e484a74", "pipelinesascode.tekton.dev/source-branch": "konflux-gl-multi-component-child-fswd", "pipelinesascode.tekton.dev/source-project-id": "81682768", "pipelinesascode.tekton.dev/source-repo-url": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/target-project-id": "81682768", "pipelinesascode.tekton.dev/url-org": "konflux-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-child-uwduhh", "results.tekton.dev/record": "build-e2e-trvz/results/91aab9c1-712d-4a9f-8392-49b0efcf26f5/records/91aab9c1-712d-4a9f-8392-49b0efcf26f5", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"build-nudge-child-uwduhh\",\"commit\":\"0981ed9d79a198be5008cdc26ad502cc6e484a74\",\"eventType\":\"Merge Request\",\"pull_request-id\":1}", "results.tekton.dev/result": "build-e2e-trvz/results/91aab9c1-712d-4a9f-8392-49b0efcf26f5", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Sucessfully created snapshot. See annotation appstudio.openshift.io/snapshot for name\",\"status\":\"success\"}", "test.appstudio.openshift.io/pr-group": "konflux-gl-multi-component-child-fswd", "test.appstudio.openshift.io/snapshot-creation-report": "SnapshotCreated" }, "creationTimestamp": "2026-04-27T13:00:38Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer", "results.tekton.dev/pipelinerun" ], "generateName": "gl-multi-component-child-fswd-on-pull-request-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.42.0", "appstudio.openshift.io/application": "build-suite-component-update-txyr", "appstudio.openshift.io/component": "gl-multi-component-child-fswd", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/event-type": "Merge_Request", "pipelinesascode.tekton.dev/original-prname": "gl-multi-component-child-fswd-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "1", "pipelinesascode.tekton.dev/repository": "gitlab.com.konflux-qe.build-nudge-child-uwduhh", "pipelinesascode.tekton.dev/sha": "0981ed9d79a198be5008cdc26ad502cc6e484a74", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "konflux-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-child-uwduhh", "tekton.dev/pipeline": "gl-multi-component-child-fswd-on-pull-request-mc2w4", "test.appstudio.openshift.io/pr-group-sha": "bb9421dde73fa49457cacebb124fa85761c0e1d8c64d7b9ae405e62ca1ee10" }, "name": "gl-multi-component-child-fswd-on-pull-request-mc2w4", "namespace": "build-e2e-trvz", "resourceVersion": "27562", "uid": "91aab9c1-712d-4a9f-8392-49b0efcf26f5" }, "spec": { "params": [ { "name": "git-url", "value": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh" }, { "name": "revision", "value": "0981ed9d79a198be5008cdc26ad502cc6e484a74" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-child-fswd:on-pr-0981ed9d79a198be5008cdc26ad502cc6e484a74" }, { "name": "image-expires-after", "value": "5d" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:78c5f696f6f7db7436060a91eb05252f913363caed46c05ad5a4b09957aa4197" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:b2224a0442ac705e20a25b8609e1760321d9d86da7901fd0392a90102688e37d" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-gl-multi-component-child-fswd" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-ukivpw" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-component-child-fswd-on-pull-request-mc2w4-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-compo05923902f46bde3b02085ada40d2066a-clone-repository", "pipelineTaskName": "clone-repository" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-05923902f46bde3b02085ada40d2066a-prefetch-dependencies", "pipelineTaskName": "prefetch-dependencies" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-compon05923902f46bde3b02085ada40d2066a-build-container", "pipelineTaskName": "build-container" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-comp05923902f46bde3b02085ada40d2066a-build-image-index", "pipelineTaskName": "build-image-index" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-05923902f46bde3b02085ada40d2066a-deprecated-base-image-check", "pipelineTaskName": "deprecated-base-image-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-component-child-fswd-on-pull-request-mc2w4-clamav-scan", "pipelineTaskName": "clamav-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-compo05923902f46bde3b02085ada40d2066a-sast-shell-check", "pipelineTaskName": "sast-shell-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-com05923902f46bde3b02085ada40d2066a-sast-unicode-check", "pipelineTaskName": "sast-unicode-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-co05923902f46bde3b02085ada40d2066a-rpms-signature-scan", "pipelineTaskName": "rpms-signature-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-component-child-fswd-on-pull-request-mc2w4-tpa-scan", "pipelineTaskName": "tpa-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "completionTime": "2026-04-27T13:06:06Z", "conditions": [ { "lastTransitionTime": "2026-04-27T13:06:06Z", "message": "Tasks Completed: 11 (Failed: 0, Cancelled 0), Skipped: 0", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh" }, { "name": "revision", "value": "0981ed9d79a198be5008cdc26ad502cc6e484a74" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-child-fswd:on-pr-0981ed9d79a198be5008cdc26ad502cc6e484a74.git" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-child-fswd:on-pr-0981ed9d79a198be5008cdc26ad502cc6e484a74.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:78c5f696f6f7db7436060a91eb05252f913363caed46c05ad5a4b09957aa4197" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-child-fswd:on-pr-0981ed9d79a198be5008cdc26ad502cc6e484a74" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "5d" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-child-fswd:on-pr-0981ed9d79a198be5008cdc26ad502cc6e484a74" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:b2224a0442ac705e20a25b8609e1760321d9d86da7901fd0392a90102688e37d" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "IMAGE_URL", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-child-fswd:on-pr-0981ed9d79a198be5008cdc26ad502cc6e484a74" }, { "name": "IMAGE_DIGEST", "value": "sha256:e1a9ae0d50630e499d4676888682aed71c5f2d5c9611ba1ae87953b116a7a11a" }, { "name": "CHAINS-GIT_URL", "value": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh" }, { "name": "CHAINS-GIT_COMMIT", "value": "0981ed9d79a198be5008cdc26ad502cc6e484a74" } ], "startTime": "2026-04-27T13:00:39Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.openshift.io/repo": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh/-/tree/97519d15ba541cdba144b73bf33b2f6519113950", "build.appstudio.redhat.com/commit_sha": "97519d15ba541cdba144b73bf33b2f6519113950", "build.appstudio.redhat.com/pull_request_number": "2", "build.appstudio.redhat.com/target_branch": "multi-component-child-base-fswd", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "multi-component-child-base-fswd", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "Merge Request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-virrpf", "pipelinesascode.tekton.dev/git-provider": "gitlab", "pipelinesascode.tekton.dev/log-url": "https://44.225.201.128:9443/ns/build-e2e-trvz/pipelinerun/gl-multi-component-child-fswd-on-pull-request-srgjj", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"multi-component-child-base-fswd\"", "pipelinesascode.tekton.dev/original-prname": "gl-multi-component-child-fswd-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "2", "pipelinesascode.tekton.dev/repo-url": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh", "pipelinesascode.tekton.dev/repository": "gitlab.com.konflux-qe.build-nudge-child-uwduhh", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "konflux-ci-qe-bot", "pipelinesascode.tekton.dev/sha": "97519d15ba541cdba144b73bf33b2f6519113950", "pipelinesascode.tekton.dev/sha-title": "e2e test commit message", "pipelinesascode.tekton.dev/sha-url": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh/-/commit/97519d15ba541cdba144b73bf33b2f6519113950", "pipelinesascode.tekton.dev/source-branch": "konflux-gl-multi-component-child-fswd", "pipelinesascode.tekton.dev/source-project-id": "81682768", "pipelinesascode.tekton.dev/source-repo-url": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/target-project-id": "81682768", "pipelinesascode.tekton.dev/url-org": "konflux-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-child-uwduhh", "results.tekton.dev/record": "build-e2e-trvz/results/812d344b-b8cc-45b2-9763-0b30715ad1c2/records/812d344b-b8cc-45b2-9763-0b30715ad1c2", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"build-nudge-child-uwduhh\",\"commit\":\"97519d15ba541cdba144b73bf33b2f6519113950\",\"eventType\":\"Merge Request\",\"pull_request-id\":2}", "results.tekton.dev/result": "build-e2e-trvz/results/812d344b-b8cc-45b2-9763-0b30715ad1c2", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/pr-group": "konflux-gl-multi-component-child-fswd" }, "creationTimestamp": "2026-04-27T13:06:36Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer", "results.tekton.dev/pipelinerun" ], "generateName": "gl-multi-component-child-fswd-on-pull-request-", "generation": 2, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.42.0", "appstudio.openshift.io/application": "build-suite-component-update-txyr", "appstudio.openshift.io/component": "gl-multi-component-child-fswd", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/event-type": "Merge_Request", "pipelinesascode.tekton.dev/original-prname": "gl-multi-component-child-fswd-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "2", "pipelinesascode.tekton.dev/repository": "gitlab.com.konflux-qe.build-nudge-child-uwduhh", "pipelinesascode.tekton.dev/sha": "97519d15ba541cdba144b73bf33b2f6519113950", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "konflux-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-child-uwduhh", "tekton.dev/pipeline": "gl-multi-component-child-fswd-on-pull-request-srgjj", "test.appstudio.openshift.io/pr-group-sha": "bb9421dde73fa49457cacebb124fa85761c0e1d8c64d7b9ae405e62ca1ee10" }, "name": "gl-multi-component-child-fswd-on-pull-request-srgjj", "namespace": "build-e2e-trvz", "resourceVersion": "28881", "uid": "812d344b-b8cc-45b2-9763-0b30715ad1c2" }, "spec": { "params": [ { "name": "git-url", "value": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh" }, { "name": "revision", "value": "97519d15ba541cdba144b73bf33b2f6519113950" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-child-fswd:on-pr-97519d15ba541cdba144b73bf33b2f6519113950" }, { "name": "image-expires-after", "value": "5d" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:78c5f696f6f7db7436060a91eb05252f913363caed46c05ad5a4b09957aa4197" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:b2224a0442ac705e20a25b8609e1760321d9d86da7901fd0392a90102688e37d" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "status": "CancelledRunFinally", "taskRunTemplate": { "serviceAccountName": "build-pipeline-gl-multi-component-child-fswd" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-virrpf" } } ] }, "status": { "completionTime": "2026-04-27T13:07:03Z", "conditions": [ { "lastTransitionTime": "2026-04-27T13:07:03Z", "message": "PipelineRun \"gl-multi-component-child-fswd-on-pull-request-srgjj\" was cancelled", "reason": "Cancelled", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh" }, { "name": "revision", "value": "97519d15ba541cdba144b73bf33b2f6519113950" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-child-fswd:on-pr-97519d15ba541cdba144b73bf33b2f6519113950.git" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-child-fswd:on-pr-97519d15ba541cdba144b73bf33b2f6519113950.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:78c5f696f6f7db7436060a91eb05252f913363caed46c05ad5a4b09957aa4197" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-child-fswd:on-pr-97519d15ba541cdba144b73bf33b2f6519113950" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "5d" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-child-fswd:on-pr-97519d15ba541cdba144b73bf33b2f6519113950" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:b2224a0442ac705e20a25b8609e1760321d9d86da7901fd0392a90102688e37d" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "skippedTasks": [ { "name": "init", "reason": "PipelineRun was gracefully cancelled" }, { "name": "clone-repository", "reason": "PipelineRun was gracefully cancelled" }, { "name": "prefetch-dependencies", "reason": "PipelineRun was gracefully cancelled" }, { "name": "build-container", "reason": "PipelineRun was gracefully cancelled" }, { "name": "build-image-index", "reason": "PipelineRun was gracefully cancelled" }, { "name": "deprecated-base-image-check", "reason": "PipelineRun was gracefully cancelled", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "reason": "PipelineRun was gracefully cancelled", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "reason": "PipelineRun was gracefully cancelled", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "reason": "PipelineRun was gracefully cancelled", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "reason": "PipelineRun was gracefully cancelled", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "reason": "PipelineRun was gracefully cancelled", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "startTime": "2026-04-27T13:06:36Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.openshift.io/repo": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh/-/tree/97519d15ba541cdba144b73bf33b2f6519113950", "build.appstudio.redhat.com/commit_sha": "97519d15ba541cdba144b73bf33b2f6519113950", "build.appstudio.redhat.com/pull_request_number": "2", "build.appstudio.redhat.com/target_branch": "multi-component-child-base-fswd", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "multi-component-child-base-fswd", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "Merge Request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-wjzibw", "pipelinesascode.tekton.dev/git-provider": "gitlab", "pipelinesascode.tekton.dev/log-url": "https://44.225.201.128:9443/ns/build-e2e-trvz/pipelinerun/gl-multi-component-child-fswd-on-pull-request-w5n76", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"multi-component-child-base-fswd\"", "pipelinesascode.tekton.dev/original-prname": "gl-multi-component-child-fswd-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "2", "pipelinesascode.tekton.dev/repo-url": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh", "pipelinesascode.tekton.dev/repository": "gitlab.com.konflux-qe.build-nudge-child-uwduhh", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "konflux-ci-qe-bot", "pipelinesascode.tekton.dev/sha": "97519d15ba541cdba144b73bf33b2f6519113950", "pipelinesascode.tekton.dev/sha-title": "e2e test commit message", "pipelinesascode.tekton.dev/sha-url": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh/-/commit/97519d15ba541cdba144b73bf33b2f6519113950", "pipelinesascode.tekton.dev/source-branch": "konflux-gl-multi-component-child-fswd", "pipelinesascode.tekton.dev/source-project-id": "81682768", "pipelinesascode.tekton.dev/source-repo-url": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/target-project-id": "81682768", "pipelinesascode.tekton.dev/url-org": "konflux-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-child-uwduhh", "results.tekton.dev/record": "build-e2e-trvz/results/6c33a2ac-51f3-42cd-aa5b-2a01131174e2/records/6c33a2ac-51f3-42cd-aa5b-2a01131174e2", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"build-nudge-child-uwduhh\",\"commit\":\"97519d15ba541cdba144b73bf33b2f6519113950\",\"eventType\":\"Merge Request\",\"pull_request-id\":2}", "results.tekton.dev/result": "build-e2e-trvz/results/6c33a2ac-51f3-42cd-aa5b-2a01131174e2", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/pr-group": "konflux-gl-multi-component-child-fswd" }, "creationTimestamp": "2026-04-27T13:06:36Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer", "results.tekton.dev/pipelinerun" ], "generateName": "gl-multi-component-child-fswd-on-pull-request-", "generation": 2, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.42.0", "appstudio.openshift.io/application": "build-suite-component-update-txyr", "appstudio.openshift.io/component": "gl-multi-component-child-fswd", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/event-type": "Merge_Request", "pipelinesascode.tekton.dev/original-prname": "gl-multi-component-child-fswd-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "2", "pipelinesascode.tekton.dev/repository": "gitlab.com.konflux-qe.build-nudge-child-uwduhh", "pipelinesascode.tekton.dev/sha": "97519d15ba541cdba144b73bf33b2f6519113950", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "konflux-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-child-uwduhh", "tekton.dev/pipeline": "gl-multi-component-child-fswd-on-pull-request-w5n76", "test.appstudio.openshift.io/pr-group-sha": "bb9421dde73fa49457cacebb124fa85761c0e1d8c64d7b9ae405e62ca1ee10" }, "name": "gl-multi-component-child-fswd-on-pull-request-w5n76", "namespace": "build-e2e-trvz", "resourceVersion": "28875", "uid": "6c33a2ac-51f3-42cd-aa5b-2a01131174e2" }, "spec": { "params": [ { "name": "git-url", "value": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh" }, { "name": "revision", "value": "97519d15ba541cdba144b73bf33b2f6519113950" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-child-fswd:on-pr-97519d15ba541cdba144b73bf33b2f6519113950" }, { "name": "image-expires-after", "value": "5d" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:78c5f696f6f7db7436060a91eb05252f913363caed46c05ad5a4b09957aa4197" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:b2224a0442ac705e20a25b8609e1760321d9d86da7901fd0392a90102688e37d" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "status": "CancelledRunFinally", "taskRunTemplate": { "serviceAccountName": "build-pipeline-gl-multi-component-child-fswd" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-wjzibw" } } ] }, "status": { "completionTime": "2026-04-27T13:07:07Z", "conditions": [ { "lastTransitionTime": "2026-04-27T13:07:07Z", "message": "PipelineRun \"gl-multi-component-child-fswd-on-pull-request-w5n76\" was cancelled", "reason": "Cancelled", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh" }, { "name": "revision", "value": "97519d15ba541cdba144b73bf33b2f6519113950" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-child-fswd:on-pr-97519d15ba541cdba144b73bf33b2f6519113950.git" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-child-fswd:on-pr-97519d15ba541cdba144b73bf33b2f6519113950.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:78c5f696f6f7db7436060a91eb05252f913363caed46c05ad5a4b09957aa4197" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-child-fswd:on-pr-97519d15ba541cdba144b73bf33b2f6519113950" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "5d" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-child-fswd:on-pr-97519d15ba541cdba144b73bf33b2f6519113950" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:b2224a0442ac705e20a25b8609e1760321d9d86da7901fd0392a90102688e37d" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "skippedTasks": [ { "name": "init", "reason": "PipelineRun was gracefully cancelled" }, { "name": "clone-repository", "reason": "PipelineRun was gracefully cancelled" }, { "name": "prefetch-dependencies", "reason": "PipelineRun was gracefully cancelled" }, { "name": "build-container", "reason": "PipelineRun was gracefully cancelled" }, { "name": "build-image-index", "reason": "PipelineRun was gracefully cancelled" }, { "name": "deprecated-base-image-check", "reason": "PipelineRun was gracefully cancelled", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "reason": "PipelineRun was gracefully cancelled", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "reason": "PipelineRun was gracefully cancelled", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "reason": "PipelineRun was gracefully cancelled", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "reason": "PipelineRun was gracefully cancelled", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "reason": "PipelineRun was gracefully cancelled", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "startTime": "2026-04-27T13:06:36Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "appstudio.openshift.io/snapshot": "build-suite-component-update-txyr-20260427-130629-000", "appstudio.openshift.io/snapshots": "build-suite-component-update-txyr-20260427-130629-000", "build.appstudio.openshift.io/repo": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh/-/tree/493d3023ee47f5db08342c9d817564f8b80ff133", "build.appstudio.redhat.com/commit_sha": "493d3023ee47f5db08342c9d817564f8b80ff133", "build.appstudio.redhat.com/target_branch": "multi-component-child-base-fswd", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "multi-component-child-base-fswd", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-zbynzi", "pipelinesascode.tekton.dev/git-provider": "gitlab", "pipelinesascode.tekton.dev/log-url": "https://44.225.201.128:9443/ns/build-e2e-trvz/pipelinerun/gl-multi-component-child-fswd-on-push-5gtbw", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"push\" \u0026\u0026 target_branch == \"multi-component-child-base-fswd\"", "pipelinesascode.tekton.dev/original-prname": "gl-multi-component-child-fswd-on-push", "pipelinesascode.tekton.dev/repo-url": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh", "pipelinesascode.tekton.dev/repository": "gitlab.com.konflux-qe.build-nudge-child-uwduhh", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "konflux-ci-qe-bot", "pipelinesascode.tekton.dev/sha": "493d3023ee47f5db08342c9d817564f8b80ff133", "pipelinesascode.tekton.dev/sha-title": "Merge branch 'konflux-gl-multi-component-child-fswd' into 'multi-component-child-base-fswd'", "pipelinesascode.tekton.dev/sha-url": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh/-/commit/493d3023ee47f5db08342c9d817564f8b80ff133", "pipelinesascode.tekton.dev/source-branch": "refs/heads/multi-component-child-base-fswd", "pipelinesascode.tekton.dev/source-project-id": "81682768", "pipelinesascode.tekton.dev/source-repo-url": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/target-project-id": "81682768", "pipelinesascode.tekton.dev/url-org": "konflux-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-child-uwduhh", "results.tekton.dev/record": "build-e2e-trvz/results/ff3aaee9-8f03-4afd-b944-ecdc0ba4ef8c/records/ff3aaee9-8f03-4afd-b944-ecdc0ba4ef8c", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"build-nudge-child-uwduhh\",\"commit\":\"493d3023ee47f5db08342c9d817564f8b80ff133\",\"eventType\":\"push\"}", "results.tekton.dev/result": "build-e2e-trvz/results/ff3aaee9-8f03-4afd-b944-ecdc0ba4ef8c", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/added-to-global-candidate-list": "{\"result\":true,\"reason\":\"Success\",\"lastupdatedtime\":\"2026-04-27T13:18:53Z\"}", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Sucessfully created snapshot. See annotation appstudio.openshift.io/snapshot for name\",\"status\":\"success\"}" }, "creationTimestamp": "2026-04-27T13:06:29Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer", "results.tekton.dev/pipelinerun" ], "generateName": "gl-multi-component-child-fswd-on-push-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.42.0", "appstudio.openshift.io/application": "build-suite-component-update-txyr", "appstudio.openshift.io/component": "gl-multi-component-child-fswd", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/original-prname": "gl-multi-component-child-fswd-on-push", "pipelinesascode.tekton.dev/repository": "gitlab.com.konflux-qe.build-nudge-child-uwduhh", "pipelinesascode.tekton.dev/sha": "493d3023ee47f5db08342c9d817564f8b80ff133", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "konflux-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-child-uwduhh", "tekton.dev/pipeline": "gl-multi-component-child-fswd-on-push-5gtbw" }, "name": "gl-multi-component-child-fswd-on-push-5gtbw", "namespace": "build-e2e-trvz", "resourceVersion": "37644", "uid": "ff3aaee9-8f03-4afd-b944-ecdc0ba4ef8c" }, "spec": { "params": [ { "name": "git-url", "value": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh" }, { "name": "revision", "value": "493d3023ee47f5db08342c9d817564f8b80ff133" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-child-fswd:493d3023ee47f5db08342c9d817564f8b80ff133" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:78c5f696f6f7db7436060a91eb05252f913363caed46c05ad5a4b09957aa4197" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:b2224a0442ac705e20a25b8609e1760321d9d86da7901fd0392a90102688e37d" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-gl-multi-component-child-fswd" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-zbynzi" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-component-child-fswd-on-push-5gtbw-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-component-child-fswd-on-push-5gtbw-clone-repository", "pipelineTaskName": "clone-repository" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-7c470ffa9d525f026c04250f3408fbc5-prefetch-dependencies", "pipelineTaskName": "prefetch-dependencies" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-component-child-fswd-on-push-5gtbw-build-container", "pipelineTaskName": "build-container" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-component-child-fswd-on-push-5gtbw-build-image-index", "pipelineTaskName": "build-image-index" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-7c470ffa9d525f026c04250f3408fbc5-deprecated-base-image-check", "pipelineTaskName": "deprecated-base-image-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-component-child-fswd-on-push-5gtbw-clamav-scan", "pipelineTaskName": "clamav-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-component-child-fswd-on-push-5gtbw-sast-shell-check", "pipelineTaskName": "sast-shell-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-component-child-fswd-on-push-5gtbw-sast-unicode-check", "pipelineTaskName": "sast-unicode-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-component-child-fswd-on-push-5gtbw-rpms-signature-scan", "pipelineTaskName": "rpms-signature-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-component-child-fswd-on-push-5gtbw-tpa-scan", "pipelineTaskName": "tpa-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "completionTime": "2026-04-27T13:18:48Z", "conditions": [ { "lastTransitionTime": "2026-04-27T13:18:48Z", "message": "Tasks Completed: 11 (Failed: 0, Cancelled 0), Skipped: 0", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh" }, { "name": "revision", "value": "493d3023ee47f5db08342c9d817564f8b80ff133" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-child-fswd:493d3023ee47f5db08342c9d817564f8b80ff133.git" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-child-fswd:493d3023ee47f5db08342c9d817564f8b80ff133.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:78c5f696f6f7db7436060a91eb05252f913363caed46c05ad5a4b09957aa4197" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-child-fswd:493d3023ee47f5db08342c9d817564f8b80ff133" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-child-fswd:493d3023ee47f5db08342c9d817564f8b80ff133" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:b2224a0442ac705e20a25b8609e1760321d9d86da7901fd0392a90102688e37d" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "IMAGE_URL", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-child-fswd:493d3023ee47f5db08342c9d817564f8b80ff133" }, { "name": "IMAGE_DIGEST", "value": "sha256:59b3647834e940b80601cf741fd1213cfff330632684bace17992fc7d7de43f0" }, { "name": "CHAINS-GIT_URL", "value": "https://gitlab.com/konflux-qe/build-nudge-child-uwduhh" }, { "name": "CHAINS-GIT_COMMIT", "value": "493d3023ee47f5db08342c9d817564f8b80ff133" } ], "startTime": "2026-04-27T13:06:29Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "appstudio.openshift.io/snapshot": "build-suite-component-update-txyr-20260427-125353-000", "appstudio.openshift.io/snapshots": "build-suite-component-update-txyr-20260427-125353-000", "build.appstudio.openshift.io/repo": "https://gitlab.com/konflux-qe/build-nudge-parent-uwduhh/-/tree/1254f32fe313146a3511cb564acb50e3e8f92b5d", "build.appstudio.redhat.com/commit_sha": "1254f32fe313146a3511cb564acb50e3e8f92b5d", "build.appstudio.redhat.com/pull_request_number": "1", "build.appstudio.redhat.com/target_branch": "multi-component-parent-base-fswd", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "multi-component-parent-base-fswd", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "Merge Request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-pvlrep", "pipelinesascode.tekton.dev/git-provider": "gitlab", "pipelinesascode.tekton.dev/log-url": "https://44.225.201.128:9443/ns/build-e2e-trvz/pipelinerun/gl-multi-component-parent-fswd-on-pull-request-zhmhb", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"multi-component-parent-base-fswd\"", "pipelinesascode.tekton.dev/original-prname": "gl-multi-component-parent-fswd-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "1", "pipelinesascode.tekton.dev/repo-url": "https://gitlab.com/konflux-qe/build-nudge-parent-uwduhh", "pipelinesascode.tekton.dev/repository": "gitlab.com.konflux-qe.build-nudge-parent-uwduhh", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "konflux-ci-qe-bot", "pipelinesascode.tekton.dev/sha": "1254f32fe313146a3511cb564acb50e3e8f92b5d", "pipelinesascode.tekton.dev/sha-title": "Konflux update gl-multi-component-parent-fswd", "pipelinesascode.tekton.dev/sha-url": "https://gitlab.com/konflux-qe/build-nudge-parent-uwduhh/-/commit/1254f32fe313146a3511cb564acb50e3e8f92b5d", "pipelinesascode.tekton.dev/source-branch": "konflux-gl-multi-component-parent-fswd", "pipelinesascode.tekton.dev/source-project-id": "81682755", "pipelinesascode.tekton.dev/source-repo-url": "https://gitlab.com/konflux-qe/build-nudge-parent-uwduhh", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/target-project-id": "81682755", "pipelinesascode.tekton.dev/url-org": "konflux-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-parent-uwduhh", "results.tekton.dev/record": "build-e2e-trvz/results/7dbbc855-5bbc-4998-8c2e-542d65b8f805/records/7dbbc855-5bbc-4998-8c2e-542d65b8f805", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"build-nudge-parent-uwduhh\",\"commit\":\"1254f32fe313146a3511cb564acb50e3e8f92b5d\",\"eventType\":\"Merge Request\",\"pull_request-id\":1}", "results.tekton.dev/result": "build-e2e-trvz/results/7dbbc855-5bbc-4998-8c2e-542d65b8f805", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Sucessfully created snapshot. See annotation appstudio.openshift.io/snapshot for name\",\"status\":\"success\"}", "test.appstudio.openshift.io/pr-group": "konflux-gl-multi-component-parent-fswd", "test.appstudio.openshift.io/snapshot-creation-report": "SnapshotCreated" }, "creationTimestamp": "2026-04-27T12:53:50Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer", "results.tekton.dev/pipelinerun" ], "generateName": "gl-multi-component-parent-fswd-on-pull-request-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.42.0", "appstudio.openshift.io/application": "build-suite-component-update-txyr", "appstudio.openshift.io/component": "gl-multi-component-parent-fswd", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/event-type": "Merge_Request", "pipelinesascode.tekton.dev/original-prname": "gl-multi-component-parent-fswd-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "1", "pipelinesascode.tekton.dev/repository": "gitlab.com.konflux-qe.build-nudge-parent-uwduhh", "pipelinesascode.tekton.dev/sha": "1254f32fe313146a3511cb564acb50e3e8f92b5d", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "konflux-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-parent-uwduhh", "tekton.dev/pipeline": "gl-multi-component-parent-fswd-on-pull-request-zhmhb", "test.appstudio.openshift.io/pr-group-sha": "2e1c1508665e107196cd0108958cbd18c20e6f68372f66f687eea20d615a89" }, "name": "gl-multi-component-parent-fswd-on-pull-request-zhmhb", "namespace": "build-e2e-trvz", "resourceVersion": "20137", "uid": "7dbbc855-5bbc-4998-8c2e-542d65b8f805" }, "spec": { "params": [ { "name": "git-url", "value": "https://gitlab.com/konflux-qe/build-nudge-parent-uwduhh" }, { "name": "revision", "value": "1254f32fe313146a3511cb564acb50e3e8f92b5d" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-parent-fswd:on-pr-1254f32fe313146a3511cb564acb50e3e8f92b5d" }, { "name": "image-expires-after", "value": "5d" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:78c5f696f6f7db7436060a91eb05252f913363caed46c05ad5a4b09957aa4197" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:b2224a0442ac705e20a25b8609e1760321d9d86da7901fd0392a90102688e37d" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-gl-multi-component-parent-fswd" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-pvlrep" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-component-parent-fswd-on-pull-request-zhmhb-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-compo9364a72261fbfec3b7e86f406198cf38-clone-repository", "pipelineTaskName": "clone-repository" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-9364a72261fbfec3b7e86f406198cf38-prefetch-dependencies", "pipelineTaskName": "prefetch-dependencies" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-compon9364a72261fbfec3b7e86f406198cf38-build-container", "pipelineTaskName": "build-container" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-comp9364a72261fbfec3b7e86f406198cf38-build-image-index", "pipelineTaskName": "build-image-index" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-9364a72261fbfec3b7e86f406198cf38-deprecated-base-image-check", "pipelineTaskName": "deprecated-base-image-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-component-9364a72261fbfec3b7e86f406198cf38-clamav-scan", "pipelineTaskName": "clamav-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-compo9364a72261fbfec3b7e86f406198cf38-sast-shell-check", "pipelineTaskName": "sast-shell-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-com9364a72261fbfec3b7e86f406198cf38-sast-unicode-check", "pipelineTaskName": "sast-unicode-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-co9364a72261fbfec3b7e86f406198cf38-rpms-signature-scan", "pipelineTaskName": "rpms-signature-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-component-parent-fswd-on-pull-request-zhmhb-tpa-scan", "pipelineTaskName": "tpa-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "completionTime": "2026-04-27T13:00:28Z", "conditions": [ { "lastTransitionTime": "2026-04-27T13:00:28Z", "message": "Tasks Completed: 11 (Failed: 0, Cancelled 0), Skipped: 0", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://gitlab.com/konflux-qe/build-nudge-parent-uwduhh" }, { "name": "revision", "value": "1254f32fe313146a3511cb564acb50e3e8f92b5d" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-parent-fswd:on-pr-1254f32fe313146a3511cb564acb50e3e8f92b5d.git" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-parent-fswd:on-pr-1254f32fe313146a3511cb564acb50e3e8f92b5d.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:78c5f696f6f7db7436060a91eb05252f913363caed46c05ad5a4b09957aa4197" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-parent-fswd:on-pr-1254f32fe313146a3511cb564acb50e3e8f92b5d" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "5d" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-parent-fswd:on-pr-1254f32fe313146a3511cb564acb50e3e8f92b5d" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:b2224a0442ac705e20a25b8609e1760321d9d86da7901fd0392a90102688e37d" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "IMAGE_URL", "value": "quay.io/redhat-appstudio-qe/build-e2e-trvz/gl-multi-component-parent-fswd:on-pr-1254f32fe313146a3511cb564acb50e3e8f92b5d" }, { "name": "IMAGE_DIGEST", "value": "sha256:6308b0969096b542338c0c14ef7bcc44830e8744bbb24511b9a119f74b6d42f9" }, { "name": "CHAINS-GIT_URL", "value": "https://gitlab.com/konflux-qe/build-nudge-parent-uwduhh" }, { "name": "CHAINS-GIT_COMMIT", "value": "1254f32fe313146a3511cb564acb50e3e8f92b5d" } ], "startTime": "2026-04-27T12:53:53Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.openshift.io/repo": "https://codeberg.org/konflux-qe/build-nudge-child-glvbqv/commit/6cc338968c3fc4973be6170a85ebe94bba9c3043", "build.appstudio.redhat.com/commit_sha": "6cc338968c3fc4973be6170a85ebe94bba9c3043", "build.appstudio.redhat.com/pull_request_number": "2", "build.appstudio.redhat.com/target_branch": "multi-component-child-base-toco", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "multi-component-child-base-toco", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-jtrvgu", "pipelinesascode.tekton.dev/git-provider": "gitea", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"multi-component-child-base-toco\"", "pipelinesascode.tekton.dev/original-prname": "fj-multi-component-child-toco-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "2", "pipelinesascode.tekton.dev/repo-url": "https://codeberg.org/konflux-qe/build-nudge-child-glvbqv", "pipelinesascode.tekton.dev/repository": "codeberg.org.konflux-qe.build-nudge-child-glvbqv", "pipelinesascode.tekton.dev/sender": "konflux-ci-qe-bot", "pipelinesascode.tekton.dev/sha": "6cc338968c3fc4973be6170a85ebe94bba9c3043", "pipelinesascode.tekton.dev/sha-title": "e2e test commit message\n", "pipelinesascode.tekton.dev/sha-url": "https://codeberg.org/konflux-qe/build-nudge-child-glvbqv/commit/6cc338968c3fc4973be6170a85ebe94bba9c3043", "pipelinesascode.tekton.dev/source-branch": "konflux-fj-multi-component-child-toco", "pipelinesascode.tekton.dev/source-repo-url": "https://codeberg.org/konflux-qe/build-nudge-child-glvbqv", "pipelinesascode.tekton.dev/url-org": "konflux-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-child-glvbqv", "results.tekton.dev/record": "build-e2e-vatw/results/0e725860-2b0d-4837-a595-c61308db8add/records/0e725860-2b0d-4837-a595-c61308db8add", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"build-nudge-child-glvbqv\",\"commit\":\"6cc338968c3fc4973be6170a85ebe94bba9c3043\",\"eventType\":\"pull_request\",\"pull_request-id\":2}", "results.tekton.dev/result": "build-e2e-vatw/results/0e725860-2b0d-4837-a595-c61308db8add", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Failed to create snapshot. Error: Component.appstudio.redhat.com \\\"fj-multi-component-child-toco\\\" not found\",\"status\":\"failed\"}" }, "creationTimestamp": "2026-04-27T13:23:52Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun" ], "generateName": "fj-multi-component-child-toco-on-pull-request-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.42.0", "appstudio.openshift.io/application": "build-suite-component-update-vgrz", "appstudio.openshift.io/component": "fj-multi-component-child-toco", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/original-prname": "fj-multi-component-child-toco-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "2", "pipelinesascode.tekton.dev/repository": "codeberg.org.konflux-qe.build-nudge-child-glvbqv", "pipelinesascode.tekton.dev/sha": "6cc338968c3fc4973be6170a85ebe94bba9c3043", "pipelinesascode.tekton.dev/state": "started", "pipelinesascode.tekton.dev/url-org": "konflux-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-child-glvbqv", "tekton.dev/pipeline": "fj-multi-component-child-toco-on-pull-request-jnjkl" }, "name": "fj-multi-component-child-toco-on-pull-request-jnjkl", "namespace": "build-e2e-vatw", "resourceVersion": "43777", "uid": "0e725860-2b0d-4837-a595-c61308db8add" }, "spec": { "params": [ { "name": "git-url", "value": "https://codeberg.org/konflux-qe/build-nudge-child-glvbqv" }, { "name": "revision", "value": "6cc338968c3fc4973be6170a85ebe94bba9c3043" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/build-e2e-vatw/fj-multi-component-child-toco:on-pr-6cc338968c3fc4973be6170a85ebe94bba9c3043" }, { "name": "image-expires-after", "value": "5d" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:78c5f696f6f7db7436060a91eb05252f913363caed46c05ad5a4b09957aa4197" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:b2224a0442ac705e20a25b8609e1760321d9d86da7901fd0392a90102688e37d" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-fj-multi-component-child-toco" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-jtrvgu" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "fj-multi-component-child-toco-on-pull-request-jnjkl-init", "pipelineTaskName": "init" } ], "completionTime": "2026-04-27T13:23:56Z", "conditions": [ { "lastTransitionTime": "2026-04-27T13:23:56Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 10", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://codeberg.org/konflux-qe/build-nudge-child-glvbqv" }, { "name": "revision", "value": "6cc338968c3fc4973be6170a85ebe94bba9c3043" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-vatw/fj-multi-component-child-toco:on-pr-6cc338968c3fc4973be6170a85ebe94bba9c3043.git" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-vatw/fj-multi-component-child-toco:on-pr-6cc338968c3fc4973be6170a85ebe94bba9c3043.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:78c5f696f6f7db7436060a91eb05252f913363caed46c05ad5a4b09957aa4197" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-vatw/fj-multi-component-child-toco:on-pr-6cc338968c3fc4973be6170a85ebe94bba9c3043" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "5d" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-vatw/fj-multi-component-child-toco:on-pr-6cc338968c3fc4973be6170a85ebe94bba9c3043" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:b2224a0442ac705e20a25b8609e1760321d9d86da7901fd0392a90102688e37d" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "skippedTasks": [ { "name": "clone-repository", "reason": "PipelineRun was stopping" }, { "name": "prefetch-dependencies", "reason": "PipelineRun was stopping" }, { "name": "build-container", "reason": "PipelineRun was stopping" }, { "name": "build-image-index", "reason": "PipelineRun was stopping" }, { "name": "deprecated-base-image-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "startTime": "2026-04-27T13:23:52Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.redhat.com/nudged-components": "fj-multi-component-child-toco", "build.appstudio.redhat.com/nudging-commit": "cc242489895487a9df56f7fa02bec88d72a36773", "build.appstudio.redhat.com/nudging-component": "fj-multi-component-parent-toco", "build.appstudio.redhat.com/nudging-image": "quay.io/redhat-appstudio-qe/build-e2e-vatw/fj-multi-component-parent-toco:cc242489895487a9df56f7fa02bec88d72a36773", "build.appstudio.redhat.com/nudging-pipeline": "fj-multi-component-parent-toco-on-push-vnh8q", "chains.tekton.dev/signed": "true", "results.tekton.dev/record": "build-e2e-vatw/results/a042175f-a98f-47a4-a4a6-c0999a96af60/records/a042175f-a98f-47a4-a4a6-c0999a96af60", "results.tekton.dev/result": "build-e2e-vatw/results/a042175f-a98f-47a4-a4a6-c0999a96af60", "results.tekton.dev/stored": "true" }, "creationTimestamp": "2026-04-27T13:22:38Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun" ], "generation": 1, "labels": { "build.appstudio.redhat.com/type": "nudge", "tekton.dev/pipeline": "renovate-pipeline-1777296158-8b24c" }, "name": "renovate-pipeline-1777296158-8b24c", "namespace": "build-e2e-vatw", "resourceVersion": "42419", "uid": "a042175f-a98f-47a4-a4a6-c0999a96af60" }, "spec": { "pipelineSpec": { "tasks": [ { "name": "renovate", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "command": [ "bash", "-c", "RENOVATE_X_GITLAB_MERGE_REQUEST_DELAY=5000 RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS=11 RENOVATE_PR_HOURLY_LIMIT=0 RENOVATE_PR_CONCURRENT_LIMIT=0 RENOVATE_TOKEN=$TOKEN_2017d86faa RENOVATE_CONFIG_FILE=/configs/fj-multi-component-child-toco-53566.json RENOVATE_HOST_RULES=\"[{'matchHost':'quay.io','username':'redhat-appstudio-qe+build_e2e_vatw_fj_multi_component_parent_toco_0dbf643296','password':'${TOKEN_689be39351}'}]\" renovate" ], "computeResources": {}, "env": [ { "name": "LOG_LEVEL", "value": "debug" } ], "envFrom": [ { "prefix": "TOKEN_", "secretRef": { "name": "renovate-pipeline-1777296158-8b24c" } } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:29a2f31", "name": "renovate", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "volumeMounts": [ { "mountPath": "/configs", "name": "renovate-pipeline-1777296158-8b24c" } ] } ], "volumes": [ { "configMap": { "name": "renovate-pipeline-1777296158-8b24c" }, "name": "renovate-pipeline-1777296158-8b24c" } ] } } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-fj-multi-component-parent-toco" }, "timeouts": { "pipeline": "1h0m0s" } }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "renovate-pipeline-1777296158-8b24c-renovate", "pipelineTaskName": "renovate" } ], "completionTime": "2026-04-27T13:23:06Z", "conditions": [ { "lastTransitionTime": "2026-04-27T13:23:06Z", "message": "Tasks Completed: 1 (Failed: 0, Cancelled 0), Skipped: 0", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "tasks": [ { "name": "renovate", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "command": [ "bash", "-c", "RENOVATE_X_GITLAB_MERGE_REQUEST_DELAY=5000 RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS=11 RENOVATE_PR_HOURLY_LIMIT=0 RENOVATE_PR_CONCURRENT_LIMIT=0 RENOVATE_TOKEN=$TOKEN_2017d86faa RENOVATE_CONFIG_FILE=/configs/fj-multi-component-child-toco-53566.json RENOVATE_HOST_RULES=\"[{'matchHost':'quay.io','username':'redhat-appstudio-qe+build_e2e_vatw_fj_multi_component_parent_toco_0dbf643296','password':'${TOKEN_689be39351}'}]\" renovate" ], "computeResources": {}, "env": [ { "name": "LOG_LEVEL", "value": "debug" } ], "envFrom": [ { "prefix": "TOKEN_", "secretRef": { "name": "renovate-pipeline-1777296158-8b24c" } } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:29a2f31", "name": "renovate", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "volumeMounts": [ { "mountPath": "/configs", "name": "renovate-pipeline-1777296158-8b24c" } ] } ], "volumes": [ { "configMap": { "name": "renovate-pipeline-1777296158-8b24c" }, "name": "renovate-pipeline-1777296158-8b24c" } ] } } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "startTime": "2026-04-27T13:22:38Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.redhat.com/nudged-components": "gh-multi-component-child-gzbw", "build.appstudio.redhat.com/nudging-commit": "build-nudge-parent-uenwjg?rev=a89d71e1e593bdd89c5086fbad318b27f5aeb3a8", "build.appstudio.redhat.com/nudging-component": "gh-multi-component-parent-gzbw", "build.appstudio.redhat.com/nudging-image": "quay.io/redhat-appstudio-qe/build-e2e-vxkh/gh-multi-component-parent-gzbw:a89d71e1e593bdd89c5086fbad318b27f5aeb3a8", "build.appstudio.redhat.com/nudging-pipeline": "gh-multi-component-parent-gzbw-on-push-z9z6z", "chains.tekton.dev/signed": "true", "results.tekton.dev/record": "build-e2e-vxkh/results/be0ba796-73af-442c-8f85-dd5e5a841285/records/be0ba796-73af-442c-8f85-dd5e5a841285", "results.tekton.dev/result": "build-e2e-vxkh/results/be0ba796-73af-442c-8f85-dd5e5a841285", "results.tekton.dev/stored": "true" }, "creationTimestamp": "2026-04-27T13:06:40Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun" ], "generation": 1, "labels": { "build.appstudio.redhat.com/type": "nudge", "tekton.dev/pipeline": "renovate-pipeline-1777295200-9e06a" }, "name": "renovate-pipeline-1777295200-9e06a", "namespace": "build-e2e-vxkh", "resourceVersion": "31958", "uid": "be0ba796-73af-442c-8f85-dd5e5a841285" }, "spec": { "pipelineSpec": { "tasks": [ { "name": "renovate", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "command": [ "bash", "-c", "RENOVATE_X_GITLAB_MERGE_REQUEST_DELAY=5000 RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS=11 RENOVATE_PR_HOURLY_LIMIT=0 RENOVATE_PR_CONCURRENT_LIMIT=0 RENOVATE_TOKEN=$TOKEN_38d22ee0a1 RENOVATE_CONFIG_FILE=/configs/gh-multi-component-child-gzbw-c7380.json RENOVATE_HOST_RULES=\"[{'matchHost':'quay.io','username':'redhat-appstudio-qe+build_e2e_vxkh_gh_multi_component_parent_gzbw_9f7b126884','password':'${TOKEN_cbba3265b7}'}]\" renovate" ], "computeResources": {}, "env": [ { "name": "LOG_LEVEL", "value": "debug" } ], "envFrom": [ { "prefix": "TOKEN_", "secretRef": { "name": "renovate-pipeline-1777295200-9e06a" } } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:29a2f31", "name": "renovate", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "volumeMounts": [ { "mountPath": "/configs", "name": "renovate-pipeline-1777295200-9e06a" } ] } ], "volumes": [ { "configMap": { "name": "renovate-pipeline-1777295200-9e06a" }, "name": "renovate-pipeline-1777295200-9e06a" } ] } } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-gh-multi-component-parent-gzbw" }, "timeouts": { "pipeline": "1h0m0s" } }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "renovate-pipeline-1777295200-9e06a-renovate", "pipelineTaskName": "renovate" } ], "completionTime": "2026-04-27T13:13:31Z", "conditions": [ { "lastTransitionTime": "2026-04-27T13:13:31Z", "message": "Tasks Completed: 1 (Failed: 0, Cancelled 0), Skipped: 0", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "tasks": [ { "name": "renovate", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "command": [ "bash", "-c", "RENOVATE_X_GITLAB_MERGE_REQUEST_DELAY=5000 RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS=11 RENOVATE_PR_HOURLY_LIMIT=0 RENOVATE_PR_CONCURRENT_LIMIT=0 RENOVATE_TOKEN=$TOKEN_38d22ee0a1 RENOVATE_CONFIG_FILE=/configs/gh-multi-component-child-gzbw-c7380.json RENOVATE_HOST_RULES=\"[{'matchHost':'quay.io','username':'redhat-appstudio-qe+build_e2e_vxkh_gh_multi_component_parent_gzbw_9f7b126884','password':'${TOKEN_cbba3265b7}'}]\" renovate" ], "computeResources": {}, "env": [ { "name": "LOG_LEVEL", "value": "debug" } ], "envFrom": [ { "prefix": "TOKEN_", "secretRef": { "name": "renovate-pipeline-1777295200-9e06a" } } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:29a2f31", "name": "renovate", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "volumeMounts": [ { "mountPath": "/configs", "name": "renovate-pipeline-1777295200-9e06a" } ] } ], "volumes": [ { "configMap": { "name": "renovate-pipeline-1777295200-9e06a" }, "name": "renovate-pipeline-1777295200-9e06a" } ] } } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "startTime": "2026-04-27T13:06:40Z" } } ], "kind": "List", "metadata": { "resourceVersion": "" } }