{ "apiVersion": "v1", "items": [ { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.openshift.io/repo": "https://github.com/redhat-appstudio-qe/build-nudge-child-nygugf?rev=61b563029ca7f605d54bf7fba37a23c15011773d", "build.appstudio.redhat.com/commit_sha": "61b563029ca7f605d54bf7fba37a23c15011773d", "build.appstudio.redhat.com/pull_request_number": "2", "build.appstudio.redhat.com/target_branch": "multi-component-child-base-iqog", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "multi-component-child-base-iqog", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74407070742", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-gmuglf", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "40773614", "pipelinesascode.tekton.dev/log-url": "https://console-openshift-console.apps.rosa.kx-fe60bf3fac.sd8i.p3.openshiftapps.com/k8s/ns/build-e2e-klql/tekton.dev~v1~PipelineRun/gh-multi-component-child-iqog-on-pull-request-9zffg", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"multi-component-child-base-iqog\"", "pipelinesascode.tekton.dev/original-prname": "gh-multi-component-child-iqog-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "2", "pipelinesascode.tekton.dev/repo-url": "https://github.com/redhat-appstudio-qe/build-nudge-child-nygugf", "pipelinesascode.tekton.dev/repository": "gh-multi-component-child-iqog", "pipelinesascode.tekton.dev/sender": "rhtap-qe-bots", "pipelinesascode.tekton.dev/sha": "61b563029ca7f605d54bf7fba37a23c15011773d", "pipelinesascode.tekton.dev/sha-title": "e2e test commit message", "pipelinesascode.tekton.dev/sha-url": "https://github.com/redhat-appstudio-qe/build-nudge-child-nygugf/commit/61b563029ca7f605d54bf7fba37a23c15011773d", "pipelinesascode.tekton.dev/source-branch": "konflux-gh-multi-component-child-iqog", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/redhat-appstudio-qe/build-nudge-child-nygugf", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-child-nygugf", "results.tekton.dev/record": "build-e2e-klql/results/29f0a8f6-1a84-4c59-a7a7-e6a460787812/records/29f0a8f6-1a84-4c59-a7a7-e6a460787812", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"build-nudge-child-nygugf\",\"commit\":\"61b563029ca7f605d54bf7fba37a23c15011773d\",\"eventType\":\"pull_request\",\"pull_request-id\":2}", "results.tekton.dev/result": "build-e2e-klql/results/29f0a8f6-1a84-4c59-a7a7-e6a460787812", "test.appstudio.openshift.io/pr-group": "konflux-gh-multi-component-child-iqog" }, "creationTimestamp": "2026-05-05T11:54:32Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer", "results.tekton.dev/pipelinerun" ], "generateName": "gh-multi-component-child-iqog-on-pull-request-", "generation": 3, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.43.0", "appstudio.openshift.io/application": "build-suite-component-update-zbvc", "appstudio.openshift.io/component": "gh-multi-component-child-iqog", "kueue.x-k8s.io/priority-class": "konflux-pre-merge-build", "kueue.x-k8s.io/queue-name": "pipelines-queue", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74407070742", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/original-prname": "gh-multi-component-child-iqog-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "2", "pipelinesascode.tekton.dev/repository": "gh-multi-component-child-iqog", "pipelinesascode.tekton.dev/sha": "61b563029ca7f605d54bf7fba37a23c15011773d", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-child-nygugf", "tekton.dev/pipeline": "gh-multi-component-child-iqog-on-pull-request-9zffg", "test.appstudio.openshift.io/pr-group-sha": "ac4f037e7c3e603cbe8a787cc6b045ba1a71318a8e00a3b6db92c4d5d44c96" }, "name": "gh-multi-component-child-iqog-on-pull-request-9zffg", "namespace": "build-e2e-klql", "resourceVersion": "96586", "uid": "29f0a8f6-1a84-4c59-a7a7-e6a460787812" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/redhat-appstudio-qe/build-nudge-child-nygugf" }, { "name": "revision", "value": "61b563029ca7f605d54bf7fba37a23c15011773d" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-child-iqog:on-pr-61b563029ca7f605d54bf7fba37a23c15011773d" }, { "name": "image-expires-after", "value": "6h" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:97c0d0ac1d508a70f8610c7dc79de453a990414fba7d7e0f8d21ec22f5796d96" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:ecfae10944b45b91988ddc6311c7232bf2c98ba73c5fc6261861ecfd33434db0" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:96badf0b06d83fc1e7cf50048f94091e257819ee537f063830541f9c97295200" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:8f7f445df165eb6498cfd5f36a043670f8275fdd739f08a4accf69868dfaa821" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "status": "CancelledRunFinally", "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "build-pipeline-gh-multi-component-child-iqog" }, "timeouts": { "pipeline": "2h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-gmuglf" } } ] }, "status": { "completionTime": "2026-05-05T11:54:40Z", "conditions": [ { "lastTransitionTime": "2026-05-05T11:54:40Z", "message": "PipelineRun \"gh-multi-component-child-iqog-on-pull-request-9zffg\" was cancelled", "reason": "Cancelled", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/redhat-appstudio-qe/build-nudge-child-nygugf" }, { "name": "revision", "value": "61b563029ca7f605d54bf7fba37a23c15011773d" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-child-iqog:on-pr-61b563029ca7f605d54bf7fba37a23c15011773d.git" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-child-iqog:on-pr-61b563029ca7f605d54bf7fba37a23c15011773d.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-child-iqog:on-pr-61b563029ca7f605d54bf7fba37a23c15011773d" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "6h" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:97c0d0ac1d508a70f8610c7dc79de453a990414fba7d7e0f8d21ec22f5796d96" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-child-iqog:on-pr-61b563029ca7f605d54bf7fba37a23c15011773d" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:ecfae10944b45b91988ddc6311c7232bf2c98ba73c5fc6261861ecfd33434db0" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:96badf0b06d83fc1e7cf50048f94091e257819ee537f063830541f9c97295200" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:8f7f445df165eb6498cfd5f36a043670f8275fdd739f08a4accf69868dfaa821" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "skippedTasks": [ { "name": "init", "reason": "PipelineRun was gracefully cancelled" }, { "name": "clone-repository", "reason": "PipelineRun was gracefully cancelled" }, { "name": "prefetch-dependencies", "reason": "PipelineRun was gracefully cancelled" }, { "name": "build-container", "reason": "PipelineRun was gracefully cancelled" }, { "name": "build-image-index", "reason": "PipelineRun was gracefully cancelled" }, { "name": "deprecated-base-image-check", "reason": "PipelineRun was gracefully cancelled", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "reason": "PipelineRun was gracefully cancelled", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "reason": "PipelineRun was gracefully cancelled", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "reason": "PipelineRun was gracefully cancelled", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "reason": "PipelineRun was gracefully cancelled", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "reason": "PipelineRun was gracefully cancelled", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "spanContext": { "traceparent": "00-db9d19ec7bff7af83ec99684c4faafb8-59f4ca17ee038a50-01" }, "startTime": "2026-05-05T11:54:33Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "appstudio.openshift.io/snapshot": "build-suite-component-update-zbvc-20260505-114918-000", "appstudio.openshift.io/snapshots": "build-suite-component-update-zbvc-20260505-114918-000", "build.appstudio.openshift.io/repo": "https://github.com/redhat-appstudio-qe/build-nudge-child-nygugf?rev=90b83c1049de6fcd77d79f79a284b592d9b10937", "build.appstudio.redhat.com/commit_sha": "90b83c1049de6fcd77d79f79a284b592d9b10937", "build.appstudio.redhat.com/pull_request_number": "1", "build.appstudio.redhat.com/target_branch": "multi-component-child-base-iqog", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "multi-component-child-base-iqog", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74406292279", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-ixivpi", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "40773614", "pipelinesascode.tekton.dev/log-url": "https://console-openshift-console.apps.rosa.kx-fe60bf3fac.sd8i.p3.openshiftapps.com/k8s/ns/build-e2e-klql/tekton.dev~v1~PipelineRun/gh-multi-component-child-iqog-on-pull-request-kbf2l", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"multi-component-child-base-iqog\"", "pipelinesascode.tekton.dev/original-prname": "gh-multi-component-child-iqog-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "1", "pipelinesascode.tekton.dev/repo-url": "https://github.com/redhat-appstudio-qe/build-nudge-child-nygugf", "pipelinesascode.tekton.dev/repository": "gh-multi-component-child-iqog", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-qe-app[bot]", "pipelinesascode.tekton.dev/sha": "90b83c1049de6fcd77d79f79a284b592d9b10937", "pipelinesascode.tekton.dev/sha-title": "e2e test commit message", "pipelinesascode.tekton.dev/sha-url": "https://github.com/redhat-appstudio-qe/build-nudge-child-nygugf/commit/90b83c1049de6fcd77d79f79a284b592d9b10937", "pipelinesascode.tekton.dev/source-branch": "konflux-gh-multi-component-child-iqog", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/redhat-appstudio-qe/build-nudge-child-nygugf", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-child-nygugf", "results.tekton.dev/record": "build-e2e-klql/results/fe4fa324-3254-4003-84c1-0c1699f0d501/records/fe4fa324-3254-4003-84c1-0c1699f0d501", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"build-nudge-child-nygugf\",\"commit\":\"90b83c1049de6fcd77d79f79a284b592d9b10937\",\"eventType\":\"pull_request\",\"pull_request-id\":1}", "results.tekton.dev/result": "build-e2e-klql/results/fe4fa324-3254-4003-84c1-0c1699f0d501", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Sucessfully created snapshot. See annotation appstudio.openshift.io/snapshot for name\",\"status\":\"success\"}", "test.appstudio.openshift.io/pr-group": "konflux-gh-multi-component-child-iqog", "test.appstudio.openshift.io/snapshot-creation-report": "SnapshotCreated" }, "creationTimestamp": "2026-05-05T11:49:17Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer", "results.tekton.dev/pipelinerun" ], "generateName": "gh-multi-component-child-iqog-on-pull-request-", "generation": 2, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.43.0", "appstudio.openshift.io/application": "build-suite-component-update-zbvc", "appstudio.openshift.io/component": "gh-multi-component-child-iqog", "kueue.x-k8s.io/priority-class": "konflux-pre-merge-build", "kueue.x-k8s.io/queue-name": "pipelines-queue", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74406292279", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/original-prname": "gh-multi-component-child-iqog-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "1", "pipelinesascode.tekton.dev/repository": "gh-multi-component-child-iqog", "pipelinesascode.tekton.dev/sha": "90b83c1049de6fcd77d79f79a284b592d9b10937", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-child-nygugf", "tekton.dev/pipeline": "gh-multi-component-child-iqog-on-pull-request-kbf2l", "test.appstudio.openshift.io/pr-group-sha": "ac4f037e7c3e603cbe8a787cc6b045ba1a71318a8e00a3b6db92c4d5d44c96" }, "name": "gh-multi-component-child-iqog-on-pull-request-kbf2l", "namespace": "build-e2e-klql", "resourceVersion": "96360", "uid": "fe4fa324-3254-4003-84c1-0c1699f0d501" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/redhat-appstudio-qe/build-nudge-child-nygugf" }, { "name": "revision", "value": "90b83c1049de6fcd77d79f79a284b592d9b10937" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-child-iqog:on-pr-90b83c1049de6fcd77d79f79a284b592d9b10937" }, { "name": "image-expires-after", "value": "6h" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:97c0d0ac1d508a70f8610c7dc79de453a990414fba7d7e0f8d21ec22f5796d96" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:ecfae10944b45b91988ddc6311c7232bf2c98ba73c5fc6261861ecfd33434db0" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:96badf0b06d83fc1e7cf50048f94091e257819ee537f063830541f9c97295200" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:8f7f445df165eb6498cfd5f36a043670f8275fdd739f08a4accf69868dfaa821" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "build-pipeline-gh-multi-component-child-iqog" }, "timeouts": { "pipeline": "2h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-ixivpi" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-component-child-iqog-on-pull-request-kbf2l-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-compo3869e2921c3a66c0e29d160cb87017c3-clone-repository", "pipelineTaskName": "clone-repository" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-3869e2921c3a66c0e29d160cb87017c3-prefetch-dependencies", "pipelineTaskName": "prefetch-dependencies" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-compon3869e2921c3a66c0e29d160cb87017c3-build-container", "pipelineTaskName": "build-container" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-comp3869e2921c3a66c0e29d160cb87017c3-build-image-index", "pipelineTaskName": "build-image-index" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-3869e2921c3a66c0e29d160cb87017c3-deprecated-base-image-check", "pipelineTaskName": "deprecated-base-image-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-component-child-iqog-on-pull-request-kbf2l-clamav-scan", "pipelineTaskName": "clamav-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-compo3869e2921c3a66c0e29d160cb87017c3-sast-shell-check", "pipelineTaskName": "sast-shell-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-com3869e2921c3a66c0e29d160cb87017c3-sast-unicode-check", "pipelineTaskName": "sast-unicode-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-co3869e2921c3a66c0e29d160cb87017c3-rpms-signature-scan", "pipelineTaskName": "rpms-signature-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-component-child-iqog-on-pull-request-kbf2l-tpa-scan", "pipelineTaskName": "tpa-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "completionTime": "2026-05-05T11:54:17Z", "conditions": [ { "lastTransitionTime": "2026-05-05T11:54:17Z", "message": "Tasks Completed: 11 (Failed: 0, Cancelled 0), Skipped: 0", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/redhat-appstudio-qe/build-nudge-child-nygugf" }, { "name": "revision", "value": "90b83c1049de6fcd77d79f79a284b592d9b10937" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-child-iqog:on-pr-90b83c1049de6fcd77d79f79a284b592d9b10937.git" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-child-iqog:on-pr-90b83c1049de6fcd77d79f79a284b592d9b10937.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-child-iqog:on-pr-90b83c1049de6fcd77d79f79a284b592d9b10937" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "6h" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:97c0d0ac1d508a70f8610c7dc79de453a990414fba7d7e0f8d21ec22f5796d96" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-child-iqog:on-pr-90b83c1049de6fcd77d79f79a284b592d9b10937" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:ecfae10944b45b91988ddc6311c7232bf2c98ba73c5fc6261861ecfd33434db0" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:96badf0b06d83fc1e7cf50048f94091e257819ee537f063830541f9c97295200" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:8f7f445df165eb6498cfd5f36a043670f8275fdd739f08a4accf69868dfaa821" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "IMAGE_URL", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-child-iqog:on-pr-90b83c1049de6fcd77d79f79a284b592d9b10937" }, { "name": "IMAGE_DIGEST", "value": "sha256:8cf56ed607bbdb748858c3073f367a63306cb911b3b141fafafe150eebf7e10d" }, { "name": "CHAINS-GIT_URL", "value": "https://github.com/redhat-appstudio-qe/build-nudge-child-nygugf" }, { "name": "CHAINS-GIT_COMMIT", "value": "90b83c1049de6fcd77d79f79a284b592d9b10937" } ], "spanContext": { "traceparent": "00-f90dae32d931d24457909e30cb431df5-c542571c15f437fa-01" }, "startTime": "2026-05-05T11:49:18Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "appstudio.openshift.io/snapshot": "build-suite-component-update-zbvc-20260505-115437-000", "appstudio.openshift.io/snapshots": "build-suite-component-update-zbvc-20260505-115437-000", "build.appstudio.openshift.io/repo": "https://github.com/redhat-appstudio-qe/build-nudge-child-nygugf?rev=cb02c71d58ca62aa6d1745fdb6ce7ced11c19e25", "build.appstudio.redhat.com/commit_sha": "cb02c71d58ca62aa6d1745fdb6ce7ced11c19e25", "build.appstudio.redhat.com/target_branch": "multi-component-child-base-iqog", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "multi-component-child-base-iqog", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "74407077799", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-ugbpyu", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "40773614", "pipelinesascode.tekton.dev/log-url": "https://console-openshift-console.apps.rosa.kx-fe60bf3fac.sd8i.p3.openshiftapps.com/k8s/ns/build-e2e-klql/tekton.dev~v1~PipelineRun/gh-multi-component-child-iqog-on-push-qfzgx", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"push\" \u0026\u0026 target_branch == \"multi-component-child-base-iqog\"", "pipelinesascode.tekton.dev/original-prname": "gh-multi-component-child-iqog-on-push", "pipelinesascode.tekton.dev/pull-request": "2", "pipelinesascode.tekton.dev/repo-url": "https://github.com/redhat-appstudio-qe/build-nudge-child-nygugf", "pipelinesascode.tekton.dev/repository": "gh-multi-component-child-iqog", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-qe-bots", "pipelinesascode.tekton.dev/sha": "cb02c71d58ca62aa6d1745fdb6ce7ced11c19e25", "pipelinesascode.tekton.dev/sha-title": "Merge pull request #2 from redhat-appstudio-qe/konflux-gh-multi-component-child-iqog\n\nupdated to build repo image", "pipelinesascode.tekton.dev/sha-url": "https://github.com/redhat-appstudio-qe/build-nudge-child-nygugf/commit/cb02c71d58ca62aa6d1745fdb6ce7ced11c19e25", "pipelinesascode.tekton.dev/source-branch": "refs/heads/multi-component-child-base-iqog", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/redhat-appstudio-qe/build-nudge-child-nygugf", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-child-nygugf", "results.tekton.dev/record": "build-e2e-klql/results/55f47537-2e67-4bb0-88eb-8913816ac9fe/records/55f47537-2e67-4bb0-88eb-8913816ac9fe", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"build-nudge-child-nygugf\",\"commit\":\"cb02c71d58ca62aa6d1745fdb6ce7ced11c19e25\",\"eventType\":\"push\",\"pull_request-id\":2}", "results.tekton.dev/result": "build-e2e-klql/results/55f47537-2e67-4bb0-88eb-8913816ac9fe", "test.appstudio.openshift.io/added-to-global-candidate-list": "{\"result\":true,\"reason\":\"Success\",\"lastupdatedtime\":\"2026-05-05T11:59:06Z\"}", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Sucessfully created snapshot. See annotation appstudio.openshift.io/snapshot for name\",\"status\":\"success\"}", "test.appstudio.openshift.io/pr-status": "merged" }, "creationTimestamp": "2026-05-05T11:54:35Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "gh-multi-component-child-iqog-on-push-", "generation": 2, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.43.0", "appstudio.openshift.io/application": "build-suite-component-update-zbvc", "appstudio.openshift.io/component": "gh-multi-component-child-iqog", "kueue.x-k8s.io/priority-class": "konflux-post-merge-build", "kueue.x-k8s.io/queue-name": "pipelines-queue", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "74407077799", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/original-prname": "gh-multi-component-child-iqog-on-push", "pipelinesascode.tekton.dev/pull-request": "2", "pipelinesascode.tekton.dev/repository": "gh-multi-component-child-iqog", "pipelinesascode.tekton.dev/sha": "cb02c71d58ca62aa6d1745fdb6ce7ced11c19e25", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-child-nygugf", "tekton.dev/pipeline": "gh-multi-component-child-iqog-on-push-qfzgx" }, "name": "gh-multi-component-child-iqog-on-push-qfzgx", "namespace": "build-e2e-klql", "resourceVersion": "104937", "uid": "55f47537-2e67-4bb0-88eb-8913816ac9fe" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/redhat-appstudio-qe/build-nudge-child-nygugf" }, { "name": "revision", "value": "cb02c71d58ca62aa6d1745fdb6ce7ced11c19e25" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-child-iqog:cb02c71d58ca62aa6d1745fdb6ce7ced11c19e25" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:97c0d0ac1d508a70f8610c7dc79de453a990414fba7d7e0f8d21ec22f5796d96" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:ecfae10944b45b91988ddc6311c7232bf2c98ba73c5fc6261861ecfd33434db0" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:96badf0b06d83fc1e7cf50048f94091e257819ee537f063830541f9c97295200" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:8f7f445df165eb6498cfd5f36a043670f8275fdd739f08a4accf69868dfaa821" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "build-pipeline-gh-multi-component-child-iqog" }, "timeouts": { "pipeline": "2h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-ugbpyu" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-component-child-iqog-on-push-qfzgx-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-component-child-iqog-on-push-qfzgx-clone-repository", "pipelineTaskName": "clone-repository" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-4a452c39cc90bedf5bd4d110a98f1b9d-prefetch-dependencies", "pipelineTaskName": "prefetch-dependencies" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-component-child-iqog-on-push-qfzgx-build-container", "pipelineTaskName": "build-container" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-component-child-iqog-on-push-qfzgx-build-image-index", "pipelineTaskName": "build-image-index" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-4a452c39cc90bedf5bd4d110a98f1b9d-deprecated-base-image-check", "pipelineTaskName": "deprecated-base-image-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-component-child-iqog-on-push-qfzgx-clamav-scan", "pipelineTaskName": "clamav-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-component-child-iqog-on-push-qfzgx-sast-shell-check", "pipelineTaskName": "sast-shell-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-component-child-iqog-on-push-qfzgx-sast-unicode-check", "pipelineTaskName": "sast-unicode-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-component-child-iqog-on-push-qfzgx-rpms-signature-scan", "pipelineTaskName": "rpms-signature-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-component-child-iqog-on-push-qfzgx-tpa-scan", "pipelineTaskName": "tpa-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "completionTime": "2026-05-05T11:59:04Z", "conditions": [ { "lastTransitionTime": "2026-05-05T11:59:04Z", "message": "Tasks Completed: 11 (Failed: 0, Cancelled 0), Skipped: 0", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/redhat-appstudio-qe/build-nudge-child-nygugf" }, { "name": "revision", "value": "cb02c71d58ca62aa6d1745fdb6ce7ced11c19e25" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-child-iqog:cb02c71d58ca62aa6d1745fdb6ce7ced11c19e25.git" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-child-iqog:cb02c71d58ca62aa6d1745fdb6ce7ced11c19e25.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-child-iqog:cb02c71d58ca62aa6d1745fdb6ce7ced11c19e25" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:97c0d0ac1d508a70f8610c7dc79de453a990414fba7d7e0f8d21ec22f5796d96" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-child-iqog:cb02c71d58ca62aa6d1745fdb6ce7ced11c19e25" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:ecfae10944b45b91988ddc6311c7232bf2c98ba73c5fc6261861ecfd33434db0" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:96badf0b06d83fc1e7cf50048f94091e257819ee537f063830541f9c97295200" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:8f7f445df165eb6498cfd5f36a043670f8275fdd739f08a4accf69868dfaa821" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "IMAGE_URL", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-child-iqog:cb02c71d58ca62aa6d1745fdb6ce7ced11c19e25" }, { "name": "IMAGE_DIGEST", "value": "sha256:ec2267fccfc5c96dfeb882176e9c2cfa00cd0272d14dd23cae125ba840783ca9" }, { "name": "CHAINS-GIT_URL", "value": "https://github.com/redhat-appstudio-qe/build-nudge-child-nygugf" }, { "name": "CHAINS-GIT_COMMIT", "value": "cb02c71d58ca62aa6d1745fdb6ce7ced11c19e25" } ], "spanContext": { "traceparent": "00-321aac573ace20d67fc015422e412b25-a5d9e749a15e3fa6-01" }, "startTime": "2026-05-05T11:54:37Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "appstudio.openshift.io/snapshot": "build-suite-component-update-zbvc-20260505-114102-000", "appstudio.openshift.io/snapshots": "build-suite-component-update-zbvc-20260505-114102-000", "build.appstudio.openshift.io/repo": "https://github.com/redhat-appstudio-qe/build-nudge-parent-nygugf?rev=1a229bc002a69fee531832cbab66c61d4f585464", "build.appstudio.redhat.com/commit_sha": "1a229bc002a69fee531832cbab66c61d4f585464", "build.appstudio.redhat.com/pull_request_number": "1", "build.appstudio.redhat.com/target_branch": "multi-component-parent-base-iqog", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "multi-component-parent-base-iqog", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74405058595", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-mmytmw", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "40773614", "pipelinesascode.tekton.dev/log-url": "https://console-openshift-console.apps.rosa.kx-fe60bf3fac.sd8i.p3.openshiftapps.com/k8s/ns/build-e2e-klql/tekton.dev~v1~PipelineRun/gh-multi-component-parent-iqog-on-pull-request-tcwbg", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"multi-component-parent-base-iqog\"", "pipelinesascode.tekton.dev/original-prname": "gh-multi-component-parent-iqog-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "1", "pipelinesascode.tekton.dev/repo-url": "https://github.com/redhat-appstudio-qe/build-nudge-parent-nygugf", "pipelinesascode.tekton.dev/repository": "gh-multi-component-parent-iqog", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-qe-app[bot]", "pipelinesascode.tekton.dev/sha": "1a229bc002a69fee531832cbab66c61d4f585464", "pipelinesascode.tekton.dev/sha-title": "RHTAP-Qe-App update gh-multi-component-parent-iqog", "pipelinesascode.tekton.dev/sha-url": "https://github.com/redhat-appstudio-qe/build-nudge-parent-nygugf/commit/1a229bc002a69fee531832cbab66c61d4f585464", "pipelinesascode.tekton.dev/source-branch": "konflux-gh-multi-component-parent-iqog", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/redhat-appstudio-qe/build-nudge-parent-nygugf", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-parent-nygugf", "results.tekton.dev/record": "build-e2e-klql/results/da3ecf42-299a-452c-8a1b-65c089bd6ce0/records/da3ecf42-299a-452c-8a1b-65c089bd6ce0", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"build-nudge-parent-nygugf\",\"commit\":\"1a229bc002a69fee531832cbab66c61d4f585464\",\"eventType\":\"pull_request\",\"pull_request-id\":1}", "results.tekton.dev/result": "build-e2e-klql/results/da3ecf42-299a-452c-8a1b-65c089bd6ce0", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Sucessfully created snapshot. See annotation appstudio.openshift.io/snapshot for name\",\"status\":\"success\"}", "test.appstudio.openshift.io/pr-group": "konflux-gh-multi-component-parent-iqog", "test.appstudio.openshift.io/snapshot-creation-report": "SnapshotCreated" }, "creationTimestamp": "2026-05-05T11:40:59Z", "finalizers": [ "results.tekton.dev/pipelinerun", "chains.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "gh-multi-component-parent-iqog-on-pull-request-", "generation": 2, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.43.0", "appstudio.openshift.io/application": "build-suite-component-update-zbvc", "appstudio.openshift.io/component": "gh-multi-component-parent-iqog", "kueue.x-k8s.io/priority-class": "konflux-pre-merge-build", "kueue.x-k8s.io/queue-name": "pipelines-queue", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74405058595", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/original-prname": "gh-multi-component-parent-iqog-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "1", "pipelinesascode.tekton.dev/repository": "gh-multi-component-parent-iqog", "pipelinesascode.tekton.dev/sha": "1a229bc002a69fee531832cbab66c61d4f585464", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-parent-nygugf", "tekton.dev/pipeline": "gh-multi-component-parent-iqog-on-pull-request-tcwbg", "test.appstudio.openshift.io/pr-group-sha": "8e6e9f4872c2f20a32911ac46c2e6a4136fbf9a181c1b21ad40d2bf4325edd" }, "name": "gh-multi-component-parent-iqog-on-pull-request-tcwbg", "namespace": "build-e2e-klql", "resourceVersion": "83588", "uid": "da3ecf42-299a-452c-8a1b-65c089bd6ce0" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/redhat-appstudio-qe/build-nudge-parent-nygugf" }, { "name": "revision", "value": "1a229bc002a69fee531832cbab66c61d4f585464" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-parent-iqog:on-pr-1a229bc002a69fee531832cbab66c61d4f585464" }, { "name": "image-expires-after", "value": "6h" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:97c0d0ac1d508a70f8610c7dc79de453a990414fba7d7e0f8d21ec22f5796d96" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:ecfae10944b45b91988ddc6311c7232bf2c98ba73c5fc6261861ecfd33434db0" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:96badf0b06d83fc1e7cf50048f94091e257819ee537f063830541f9c97295200" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:8f7f445df165eb6498cfd5f36a043670f8275fdd739f08a4accf69868dfaa821" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "build-pipeline-gh-multi-component-parent-iqog" }, "timeouts": { "pipeline": "2h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-mmytmw" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-component-parent-iqog-on-pull-request-tcwbg-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-compo74910bc9c584e0e853904c2b41f81d9f-clone-repository", "pipelineTaskName": "clone-repository" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-74910bc9c584e0e853904c2b41f81d9f-prefetch-dependencies", "pipelineTaskName": "prefetch-dependencies" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-compon74910bc9c584e0e853904c2b41f81d9f-build-container", "pipelineTaskName": "build-container" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-comp74910bc9c584e0e853904c2b41f81d9f-build-image-index", "pipelineTaskName": "build-image-index" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-74910bc9c584e0e853904c2b41f81d9f-deprecated-base-image-check", "pipelineTaskName": "deprecated-base-image-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-component-74910bc9c584e0e853904c2b41f81d9f-clamav-scan", "pipelineTaskName": "clamav-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-compo74910bc9c584e0e853904c2b41f81d9f-sast-shell-check", "pipelineTaskName": "sast-shell-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-com74910bc9c584e0e853904c2b41f81d9f-sast-unicode-check", "pipelineTaskName": "sast-unicode-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-co74910bc9c584e0e853904c2b41f81d9f-rpms-signature-scan", "pipelineTaskName": "rpms-signature-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-component-parent-iqog-on-pull-request-tcwbg-tpa-scan", "pipelineTaskName": "tpa-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "completionTime": "2026-05-05T11:49:10Z", "conditions": [ { "lastTransitionTime": "2026-05-05T11:49:10Z", "message": "Tasks Completed: 11 (Failed: 0, Cancelled 0), Skipped: 0", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/redhat-appstudio-qe/build-nudge-parent-nygugf" }, { "name": "revision", "value": "1a229bc002a69fee531832cbab66c61d4f585464" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-parent-iqog:on-pr-1a229bc002a69fee531832cbab66c61d4f585464.git" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-parent-iqog:on-pr-1a229bc002a69fee531832cbab66c61d4f585464.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-parent-iqog:on-pr-1a229bc002a69fee531832cbab66c61d4f585464" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "6h" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:97c0d0ac1d508a70f8610c7dc79de453a990414fba7d7e0f8d21ec22f5796d96" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-parent-iqog:on-pr-1a229bc002a69fee531832cbab66c61d4f585464" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:ecfae10944b45b91988ddc6311c7232bf2c98ba73c5fc6261861ecfd33434db0" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:96badf0b06d83fc1e7cf50048f94091e257819ee537f063830541f9c97295200" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:8f7f445df165eb6498cfd5f36a043670f8275fdd739f08a4accf69868dfaa821" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "IMAGE_URL", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-parent-iqog:on-pr-1a229bc002a69fee531832cbab66c61d4f585464" }, { "name": "IMAGE_DIGEST", "value": "sha256:9b0a9cf3a93c668f1473cd53ee4e1671700364d87e338321e5b496b12b1075e4" }, { "name": "CHAINS-GIT_URL", "value": "https://github.com/redhat-appstudio-qe/build-nudge-parent-nygugf" }, { "name": "CHAINS-GIT_COMMIT", "value": "1a229bc002a69fee531832cbab66c61d4f585464" } ], "spanContext": { "traceparent": "00-6881c67618af751a6ffcfa6a5d9f1230-36d543602df2c323-01" }, "startTime": "2026-05-05T11:41:02Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "appstudio.openshift.io/snapshot": "build-suite-component-update-zbvc-20260505-115907-000", "appstudio.openshift.io/snapshots": "build-suite-component-update-zbvc-20260505-115907-000", "build.appstudio.openshift.io/component-nudge-processed": "true", "build.appstudio.openshift.io/repo": "https://github.com/redhat-appstudio-qe/build-nudge-parent-nygugf?rev=e4e9dabe2e7a23ee3c3a463958f26176fecd8acd", "build.appstudio.redhat.com/commit_sha": "e4e9dabe2e7a23ee3c3a463958f26176fecd8acd", "build.appstudio.redhat.com/target_branch": "multi-component-parent-base-iqog", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "multi-component-parent-base-iqog", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "74407749275", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-hqklui", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "40773614", "pipelinesascode.tekton.dev/log-url": "https://console-openshift-console.apps.rosa.kx-fe60bf3fac.sd8i.p3.openshiftapps.com/k8s/ns/build-e2e-klql/tekton.dev~v1~PipelineRun/gh-multi-component-parent-iqog-on-push-zjkbh", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"push\" \u0026\u0026 target_branch == \"multi-component-parent-base-iqog\"", "pipelinesascode.tekton.dev/original-prname": "gh-multi-component-parent-iqog-on-push", "pipelinesascode.tekton.dev/repo-url": "https://github.com/redhat-appstudio-qe/build-nudge-parent-nygugf", "pipelinesascode.tekton.dev/repository": "gh-multi-component-parent-iqog", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-qe-bots", "pipelinesascode.tekton.dev/sha": "e4e9dabe2e7a23ee3c3a463958f26176fecd8acd", "pipelinesascode.tekton.dev/sha-title": "e2e test commit message", "pipelinesascode.tekton.dev/sha-url": "https://github.com/redhat-appstudio-qe/build-nudge-parent-nygugf/commit/e4e9dabe2e7a23ee3c3a463958f26176fecd8acd", "pipelinesascode.tekton.dev/source-branch": "refs/heads/multi-component-parent-base-iqog", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/redhat-appstudio-qe/build-nudge-parent-nygugf", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-parent-nygugf", "results.tekton.dev/record": "build-e2e-klql/results/4db5e3b0-1678-4b1d-8627-e6a7f19e1241/records/4db5e3b0-1678-4b1d-8627-e6a7f19e1241", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"build-nudge-parent-nygugf\",\"commit\":\"e4e9dabe2e7a23ee3c3a463958f26176fecd8acd\",\"eventType\":\"push\"}", "results.tekton.dev/result": "build-e2e-klql/results/4db5e3b0-1678-4b1d-8627-e6a7f19e1241", "test.appstudio.openshift.io/added-to-global-candidate-list": "{\"result\":true,\"reason\":\"Success\",\"lastupdatedtime\":\"2026-05-05T12:06:14Z\"}", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Sucessfully created snapshot. See annotation appstudio.openshift.io/snapshot for name\",\"status\":\"success\"}" }, "creationTimestamp": "2026-05-05T11:59:07Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer", "results.tekton.dev/pipelinerun" ], "generateName": "gh-multi-component-parent-iqog-on-push-", "generation": 2, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.43.0", "appstudio.openshift.io/application": "build-suite-component-update-zbvc", "appstudio.openshift.io/component": "gh-multi-component-parent-iqog", "kueue.x-k8s.io/priority-class": "konflux-post-merge-build", "kueue.x-k8s.io/queue-name": "pipelines-queue", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "74407749275", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/original-prname": "gh-multi-component-parent-iqog-on-push", "pipelinesascode.tekton.dev/repository": "gh-multi-component-parent-iqog", "pipelinesascode.tekton.dev/sha": "e4e9dabe2e7a23ee3c3a463958f26176fecd8acd", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-parent-nygugf", "tekton.dev/pipeline": "gh-multi-component-parent-iqog-on-push-zjkbh" }, "name": "gh-multi-component-parent-iqog-on-push-zjkbh", "namespace": "build-e2e-klql", "resourceVersion": "118459", "uid": "4db5e3b0-1678-4b1d-8627-e6a7f19e1241" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/redhat-appstudio-qe/build-nudge-parent-nygugf" }, { "name": "revision", "value": "e4e9dabe2e7a23ee3c3a463958f26176fecd8acd" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-parent-iqog:e4e9dabe2e7a23ee3c3a463958f26176fecd8acd" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:97c0d0ac1d508a70f8610c7dc79de453a990414fba7d7e0f8d21ec22f5796d96" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:ecfae10944b45b91988ddc6311c7232bf2c98ba73c5fc6261861ecfd33434db0" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:96badf0b06d83fc1e7cf50048f94091e257819ee537f063830541f9c97295200" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:8f7f445df165eb6498cfd5f36a043670f8275fdd739f08a4accf69868dfaa821" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "build-pipeline-gh-multi-component-parent-iqog" }, "timeouts": { "pipeline": "2h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-hqklui" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-component-parent-iqog-on-push-zjkbh-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-component-parent-iqog-on-push-zjkbh-clone-repository", "pipelineTaskName": "clone-repository" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-eb5058c5b26d0b115b9878e972c84cd0-prefetch-dependencies", "pipelineTaskName": "prefetch-dependencies" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-component-parent-iqog-on-push-zjkbh-build-container", "pipelineTaskName": "build-container" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-component-parent-iqog-on-push-zjkbh-build-image-index", "pipelineTaskName": "build-image-index" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-eb5058c5b26d0b115b9878e972c84cd0-deprecated-base-image-check", "pipelineTaskName": "deprecated-base-image-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-component-parent-iqog-on-push-zjkbh-clamav-scan", "pipelineTaskName": "clamav-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-component-parent-iqog-on-push-zjkbh-sast-shell-check", "pipelineTaskName": "sast-shell-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-component-parent-iqog-on-push-zjkbh-sast-unicode-check", "pipelineTaskName": "sast-unicode-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-coeb5058c5b26d0b115b9878e972c84cd0-rpms-signature-scan", "pipelineTaskName": "rpms-signature-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gh-multi-component-parent-iqog-on-push-zjkbh-tpa-scan", "pipelineTaskName": "tpa-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "completionTime": "2026-05-05T12:06:12Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:06:12Z", "message": "Tasks Completed: 11 (Failed: 0, Cancelled 0), Skipped: 0", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/redhat-appstudio-qe/build-nudge-parent-nygugf" }, { "name": "revision", "value": "e4e9dabe2e7a23ee3c3a463958f26176fecd8acd" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-parent-iqog:e4e9dabe2e7a23ee3c3a463958f26176fecd8acd.git" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-parent-iqog:e4e9dabe2e7a23ee3c3a463958f26176fecd8acd.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-parent-iqog:e4e9dabe2e7a23ee3c3a463958f26176fecd8acd" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:97c0d0ac1d508a70f8610c7dc79de453a990414fba7d7e0f8d21ec22f5796d96" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-parent-iqog:e4e9dabe2e7a23ee3c3a463958f26176fecd8acd" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:ecfae10944b45b91988ddc6311c7232bf2c98ba73c5fc6261861ecfd33434db0" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:96badf0b06d83fc1e7cf50048f94091e257819ee537f063830541f9c97295200" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:8f7f445df165eb6498cfd5f36a043670f8275fdd739f08a4accf69868dfaa821" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "IMAGE_URL", "value": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-parent-iqog:e4e9dabe2e7a23ee3c3a463958f26176fecd8acd" }, { "name": "IMAGE_DIGEST", "value": "sha256:253e9d0c742b18dcdb99182c8c4826374bd4195239358679145a02499fc78d02" }, { "name": "CHAINS-GIT_URL", "value": "https://github.com/redhat-appstudio-qe/build-nudge-parent-nygugf" }, { "name": "CHAINS-GIT_COMMIT", "value": "e4e9dabe2e7a23ee3c3a463958f26176fecd8acd" } ], "spanContext": { "traceparent": "00-69b8d7a373129a956332f6a77793f16a-ae14e03fd5c1eba0-01" }, "startTime": "2026-05-05T11:59:07Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.redhat.com/nudged-components": "gh-multi-component-child-iqog", "build.appstudio.redhat.com/nudging-commit": "build-nudge-parent-nygugf?rev=e4e9dabe2e7a23ee3c3a463958f26176fecd8acd", "build.appstudio.redhat.com/nudging-component": "gh-multi-component-parent-iqog", "build.appstudio.redhat.com/nudging-image": "quay.io/redhat-appstudio-qe/build-e2e-klql/gh-multi-component-parent-iqog:e4e9dabe2e7a23ee3c3a463958f26176fecd8acd", "build.appstudio.redhat.com/nudging-pipeline": "gh-multi-component-parent-iqog-on-push-zjkbh", "chains.tekton.dev/signed": "true", "results.tekton.dev/record": "build-e2e-klql/results/d5e18e59-979c-404a-a129-c875b605d927/records/d5e18e59-979c-404a-a129-c875b605d927", "results.tekton.dev/result": "build-e2e-klql/results/d5e18e59-979c-404a-a129-c875b605d927" }, "creationTimestamp": "2026-05-05T12:06:13Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun" ], "generation": 2, "labels": { "build.appstudio.redhat.com/type": "nudge", "kueue.x-k8s.io/priority-class": "konflux-default", "kueue.x-k8s.io/queue-name": "pipelines-queue", "tekton.dev/pipeline": "renovate-pipeline-1777982773-ca992" }, "name": "renovate-pipeline-1777982773-ca992", "namespace": "build-e2e-klql", "resourceVersion": "122375", "uid": "d5e18e59-979c-404a-a129-c875b605d927" }, "spec": { "pipelineSpec": { "tasks": [ { "name": "renovate", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "command": [ "bash", "-c", "RENOVATE_X_GITLAB_MERGE_REQUEST_DELAY=5000 RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS=11 RENOVATE_PR_HOURLY_LIMIT=0 RENOVATE_PR_CONCURRENT_LIMIT=0 RENOVATE_TOKEN=$TOKEN_9c34244007 RENOVATE_CONFIG_FILE=/configs/gh-multi-component-child-iqog-10b7c.json RENOVATE_HOST_RULES=\"[{'matchHost':'quay.io','username':'redhat-appstudio-qe+build_e2e_klql_gh_multi_component_parent_iqog_719609f321','password':'${TOKEN_1eef8821d5}'}]\" renovate" ], "computeResources": {}, "env": [ { "name": "LOG_LEVEL", "value": "debug" } ], "envFrom": [ { "prefix": "TOKEN_", "secretRef": { "name": "renovate-pipeline-1777982773-ca992" } } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:29a2f31", "name": "renovate", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "volumeMounts": [ { "mountPath": "/configs", "name": "renovate-pipeline-1777982773-ca992" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true } ] } ], "volumes": [ { "configMap": { "name": "renovate-pipeline-1777982773-ca992" }, "name": "renovate-pipeline-1777982773-ca992" }, { "configMap": { "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "renovate-ca-1777982773-ca992" }, "name": "trusted-ca" } ] } } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "build-pipeline-gh-multi-component-parent-iqog" }, "timeouts": { "pipeline": "2h0m0s" } }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "renovate-pipeline-1777982773-ca992-renovate", "pipelineTaskName": "renovate" } ], "completionTime": "2026-05-05T12:08:46Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:08:46Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 0", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "tasks": [ { "name": "renovate", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "command": [ "bash", "-c", "RENOVATE_X_GITLAB_MERGE_REQUEST_DELAY=5000 RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS=11 RENOVATE_PR_HOURLY_LIMIT=0 RENOVATE_PR_CONCURRENT_LIMIT=0 RENOVATE_TOKEN=$TOKEN_9c34244007 RENOVATE_CONFIG_FILE=/configs/gh-multi-component-child-iqog-10b7c.json RENOVATE_HOST_RULES=\"[{'matchHost':'quay.io','username':'redhat-appstudio-qe+build_e2e_klql_gh_multi_component_parent_iqog_719609f321','password':'${TOKEN_1eef8821d5}'}]\" renovate" ], "computeResources": {}, "env": [ { "name": "LOG_LEVEL", "value": "debug" } ], "envFrom": [ { "prefix": "TOKEN_", "secretRef": { "name": "renovate-pipeline-1777982773-ca992" } } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:29a2f31", "name": "renovate", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "volumeMounts": [ { "mountPath": "/configs", "name": "renovate-pipeline-1777982773-ca992" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true } ] } ], "volumes": [ { "configMap": { "name": "renovate-pipeline-1777982773-ca992" }, "name": "renovate-pipeline-1777982773-ca992" }, { "configMap": { "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "renovate-ca-1777982773-ca992" }, "name": "trusted-ca" } ] } } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "spanContext": { "traceparent": "00-65e70cd41e9e47fecc148cde31fc85e7-e7665c92a1e395fc-01" }, "startTime": "2026-05-05T12:06:13Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "appstudio.openshift.io/snapshot": "build-suite-positive-mc-zzkl-20260505-114021-000", "appstudio.openshift.io/snapshots": "build-suite-positive-mc-zzkl-20260505-114021-000", "build.appstudio.openshift.io/repo": "https://github.com/redhat-appstudio-qe/sample-multi-component?rev=1bec79174e21d57375bb455bced550c52b2b366f", "build.appstudio.redhat.com/commit_sha": "1bec79174e21d57375bb455bced550c52b2b366f", "build.appstudio.redhat.com/pull_request_number": "32874", "build.appstudio.redhat.com/target_branch": "multi-component-base-ogojzn", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "multi-component-base-ogojzn", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74404900700", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-djhdfs", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "40773614", "pipelinesascode.tekton.dev/log-url": "https://console-openshift-console.apps.rosa.kx-fe60bf3fac.sd8i.p3.openshiftapps.com/k8s/ns/build-e2e-xsku/tekton.dev~v1~PipelineRun/go-component-xahymx-on-pull-request-g9925", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"multi-component-base-ogojzn\" \u0026\u0026 ( \"go-component/***\".pathChanged() || \".tekton/go-component-xahymx-pull-request.yaml\".pathChanged() )", "pipelinesascode.tekton.dev/original-prname": "go-component-xahymx-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "32874", "pipelinesascode.tekton.dev/repo-url": "https://github.com/redhat-appstudio-qe/sample-multi-component", "pipelinesascode.tekton.dev/repository": "go-component-xahymx", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-qe-app[bot]", "pipelinesascode.tekton.dev/sha": "1bec79174e21d57375bb455bced550c52b2b366f", "pipelinesascode.tekton.dev/sha-title": "RHTAP-Qe-App update go-component-xahymx", "pipelinesascode.tekton.dev/sha-url": "https://github.com/redhat-appstudio-qe/sample-multi-component/commit/1bec79174e21d57375bb455bced550c52b2b366f", "pipelinesascode.tekton.dev/source-branch": "konflux-go-component-xahymx", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/redhat-appstudio-qe/sample-multi-component", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "sample-multi-component", "results.tekton.dev/record": "build-e2e-xsku/results/e236ee09-53b8-400d-8b30-16bb10d85daf/records/e236ee09-53b8-400d-8b30-16bb10d85daf", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"sample-multi-component\",\"commit\":\"1bec79174e21d57375bb455bced550c52b2b366f\",\"eventType\":\"pull_request\",\"pull_request-id\":32874}", "results.tekton.dev/result": "build-e2e-xsku/results/e236ee09-53b8-400d-8b30-16bb10d85daf", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Sucessfully created snapshot. See annotation appstudio.openshift.io/snapshot for name\",\"status\":\"success\"}", "test.appstudio.openshift.io/pr-group": "konflux-go-component-xahymx", "test.appstudio.openshift.io/snapshot-creation-report": "SnapshotCreated" }, "creationTimestamp": "2026-05-05T11:39:56Z", "finalizers": [ "results.tekton.dev/pipelinerun", "chains.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "go-component-xahymx-on-pull-request-", "generation": 2, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.43.0", "appstudio.openshift.io/application": "build-suite-positive-mc-zzkl", "appstudio.openshift.io/component": "go-component-xahymx", "kueue.x-k8s.io/priority-class": "konflux-pre-merge-build", "kueue.x-k8s.io/queue-name": "pipelines-queue", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74404900700", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/original-prname": "go-component-xahymx-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "32874", "pipelinesascode.tekton.dev/repository": "go-component-xahymx", "pipelinesascode.tekton.dev/sha": "1bec79174e21d57375bb455bced550c52b2b366f", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "sample-multi-component", "tekton.dev/pipeline": "go-component-xahymx-on-pull-request-g9925", "test.appstudio.openshift.io/pr-group-sha": "5f548f11cd8ff7b7e9ac14755f5719f94a46feb9efbef299c66e24a374c29d" }, "name": "go-component-xahymx-on-pull-request-g9925", "namespace": "build-e2e-xsku", "resourceVersion": "122592", "uid": "e236ee09-53b8-400d-8b30-16bb10d85daf" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/redhat-appstudio-qe/sample-multi-component" }, { "name": "revision", "value": "1bec79174e21d57375bb455bced550c52b2b366f" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/build-e2e-xsku/go-component-xahymx:on-pr-1bec79174e21d57375bb455bced550c52b2b366f" }, { "name": "image-expires-after", "value": "6h" }, { "name": "dockerfile", "value": "docker/Dockerfile" }, { "name": "path-context", "value": "go-component" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:97c0d0ac1d508a70f8610c7dc79de453a990414fba7d7e0f8d21ec22f5796d96" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:ecfae10944b45b91988ddc6311c7232bf2c98ba73c5fc6261861ecfd33434db0" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:96badf0b06d83fc1e7cf50048f94091e257819ee537f063830541f9c97295200" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:8f7f445df165eb6498cfd5f36a043670f8275fdd739f08a4accf69868dfaa821" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "build-pipeline-go-component-xahymx" }, "timeouts": { "pipeline": "2h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-djhdfs" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-xahymx-on-pull-request-g9925-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-xahymx-on-pull-request-g9925-clone-repository", "pipelineTaskName": "clone-repository" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-xahymx-on-pull-request-g9925-prefetch-dependencies", "pipelineTaskName": "prefetch-dependencies" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-xahymx-on-pull-request-g9925-build-container", "pipelineTaskName": "build-container" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-xahymx-on-pull-request-g9925-build-image-index", "pipelineTaskName": "build-image-index" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-2d041477ed11e339a8f6e1883e6bb5a9-deprecated-base-image-check", "pipelineTaskName": "deprecated-base-image-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-xahymx-on-pull-request-g9925-clamav-scan", "pipelineTaskName": "clamav-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-xahymx-on-pull-request-g9925-sast-shell-check", "pipelineTaskName": "sast-shell-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-xahymx-on-pull-request-g9925-sast-unicode-check", "pipelineTaskName": "sast-unicode-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-xahymx-on-pull-request-g9925-rpms-signature-scan", "pipelineTaskName": "rpms-signature-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-xahymx-on-pull-request-g9925-tpa-scan", "pipelineTaskName": "tpa-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "completionTime": "2026-05-05T12:08:52Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:08:52Z", "message": "Tasks Completed: 11 (Failed: 0, Cancelled 0), Skipped: 0", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/redhat-appstudio-qe/sample-multi-component" }, { "name": "revision", "value": "1bec79174e21d57375bb455bced550c52b2b366f" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-xsku/go-component-xahymx:on-pr-1bec79174e21d57375bb455bced550c52b2b366f.git" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-xsku/go-component-xahymx:on-pr-1bec79174e21d57375bb455bced550c52b2b366f.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-xsku/go-component-xahymx:on-pr-1bec79174e21d57375bb455bced550c52b2b366f" }, { "name": "DOCKERFILE", "value": "docker/Dockerfile" }, { "name": "CONTEXT", "value": "go-component" }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "6h" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:97c0d0ac1d508a70f8610c7dc79de453a990414fba7d7e0f8d21ec22f5796d96" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-xsku/go-component-xahymx:on-pr-1bec79174e21d57375bb455bced550c52b2b366f" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:ecfae10944b45b91988ddc6311c7232bf2c98ba73c5fc6261861ecfd33434db0" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:96badf0b06d83fc1e7cf50048f94091e257819ee537f063830541f9c97295200" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:8f7f445df165eb6498cfd5f36a043670f8275fdd739f08a4accf69868dfaa821" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "IMAGE_URL", "value": "quay.io/redhat-appstudio-qe/build-e2e-xsku/go-component-xahymx:on-pr-1bec79174e21d57375bb455bced550c52b2b366f" }, { "name": "IMAGE_DIGEST", "value": "sha256:a1ae2ec06872196ef9c5f1a88bce428f66843adc71051660f9b1d4e42ae3cbfe" }, { "name": "CHAINS-GIT_URL", "value": "https://github.com/redhat-appstudio-qe/sample-multi-component" }, { "name": "CHAINS-GIT_COMMIT", "value": "1bec79174e21d57375bb455bced550c52b2b366f" } ], "spanContext": { "traceparent": "00-d3cd52f15a621a0f93c7d43ed8602806-4abd1ea2f8b63c49-01" }, "startTime": "2026-05-05T11:40:21Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "appstudio.openshift.io/snapshot": "build-suite-positive-mc-zzkl-20260505-120909-000", "appstudio.openshift.io/snapshots": "build-suite-positive-mc-zzkl-20260505-120909-000", "build.appstudio.openshift.io/repo": "https://github.com/redhat-appstudio-qe/sample-multi-component?rev=44c9fc555d02f85bda9ea5ea87f2a7fc27e4df79", "build.appstudio.redhat.com/commit_sha": "44c9fc555d02f85bda9ea5ea87f2a7fc27e4df79", "build.appstudio.redhat.com/target_branch": "multi-component-base-ogojzn", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "multi-component-base-ogojzn", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "74409282939", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-bnfbcw", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "40773614", "pipelinesascode.tekton.dev/log-url": "https://console-openshift-console.apps.rosa.kx-fe60bf3fac.sd8i.p3.openshiftapps.com/k8s/ns/build-e2e-xsku/tekton.dev~v1~PipelineRun/go-component-xahymx-on-push-4hm8p", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"push\" \u0026\u0026 target_branch == \"multi-component-base-ogojzn\" \u0026\u0026 ( \"go-component/***\".pathChanged() || \".tekton/go-component-xahymx-push.yaml\".pathChanged() )", "pipelinesascode.tekton.dev/original-prname": "go-component-xahymx-on-push", "pipelinesascode.tekton.dev/repo-url": "https://github.com/redhat-appstudio-qe/sample-multi-component", "pipelinesascode.tekton.dev/repository": "go-component-xahymx", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-qe-bots", "pipelinesascode.tekton.dev/sha": "44c9fc555d02f85bda9ea5ea87f2a7fc27e4df79", "pipelinesascode.tekton.dev/sha-title": "Merge pull request #32874 from redhat-appstudio-qe/konflux-go-component-xahymx\n\nRHTAP-Qe-App update go-component-xahymx", "pipelinesascode.tekton.dev/sha-url": "https://github.com/redhat-appstudio-qe/sample-multi-component/commit/44c9fc555d02f85bda9ea5ea87f2a7fc27e4df79", "pipelinesascode.tekton.dev/source-branch": "refs/heads/multi-component-base-ogojzn", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/redhat-appstudio-qe/sample-multi-component", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "sample-multi-component", "results.tekton.dev/record": "build-e2e-xsku/results/8ffbdb35-09d6-4507-87f5-4e0462c9c48f/records/8ffbdb35-09d6-4507-87f5-4e0462c9c48f", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"sample-multi-component\",\"commit\":\"44c9fc555d02f85bda9ea5ea87f2a7fc27e4df79\",\"eventType\":\"push\"}", "results.tekton.dev/result": "build-e2e-xsku/results/8ffbdb35-09d6-4507-87f5-4e0462c9c48f", "test.appstudio.openshift.io/added-to-global-candidate-list": "{\"result\":true,\"reason\":\"Success\",\"lastupdatedtime\":\"2026-05-05T12:30:39Z\"}", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Sucessfully created snapshot. See annotation appstudio.openshift.io/snapshot for name\",\"status\":\"success\"}" }, "creationTimestamp": "2026-05-05T12:09:09Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "go-component-xahymx-on-push-", "generation": 2, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.43.0", "appstudio.openshift.io/application": "build-suite-positive-mc-zzkl", "appstudio.openshift.io/component": "go-component-xahymx", "kueue.x-k8s.io/priority-class": "konflux-post-merge-build", "kueue.x-k8s.io/queue-name": "pipelines-queue", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "74409282939", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/original-prname": "go-component-xahymx-on-push", "pipelinesascode.tekton.dev/repository": "go-component-xahymx", "pipelinesascode.tekton.dev/sha": "44c9fc555d02f85bda9ea5ea87f2a7fc27e4df79", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "sample-multi-component", "tekton.dev/pipeline": "go-component-xahymx-on-push-4hm8p" }, "name": "go-component-xahymx-on-push-4hm8p", "namespace": "build-e2e-xsku", "resourceVersion": "149422", "uid": "8ffbdb35-09d6-4507-87f5-4e0462c9c48f" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/redhat-appstudio-qe/sample-multi-component" }, { "name": "revision", "value": "44c9fc555d02f85bda9ea5ea87f2a7fc27e4df79" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/build-e2e-xsku/go-component-xahymx:44c9fc555d02f85bda9ea5ea87f2a7fc27e4df79" }, { "name": "dockerfile", "value": "docker/Dockerfile" }, { "name": "path-context", "value": "go-component" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:97c0d0ac1d508a70f8610c7dc79de453a990414fba7d7e0f8d21ec22f5796d96" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:ecfae10944b45b91988ddc6311c7232bf2c98ba73c5fc6261861ecfd33434db0" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:96badf0b06d83fc1e7cf50048f94091e257819ee537f063830541f9c97295200" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:8f7f445df165eb6498cfd5f36a043670f8275fdd739f08a4accf69868dfaa821" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "build-pipeline-go-component-xahymx" }, "timeouts": { "pipeline": "2h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-bnfbcw" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-xahymx-on-push-4hm8p-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-xahymx-on-push-4hm8p-clone-repository", "pipelineTaskName": "clone-repository" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-xahymx-on-push-4hm8p-prefetch-dependencies", "pipelineTaskName": "prefetch-dependencies" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-xahymx-on-push-4hm8p-build-container", "pipelineTaskName": "build-container" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-xahymx-on-push-4hm8p-build-image-index", "pipelineTaskName": "build-image-index" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-xahymx-on-push-4hm8p-deprecated-base-image-check", "pipelineTaskName": "deprecated-base-image-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-xahymx-on-push-4hm8p-clamav-scan", "pipelineTaskName": "clamav-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-xahymx-on-push-4hm8p-sast-shell-check", "pipelineTaskName": "sast-shell-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-xahymx-on-push-4hm8p-sast-unicode-check", "pipelineTaskName": "sast-unicode-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-xahymx-on-push-4hm8p-rpms-signature-scan", "pipelineTaskName": "rpms-signature-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "go-component-xahymx-on-push-4hm8p-tpa-scan", "pipelineTaskName": "tpa-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "completionTime": "2026-05-05T12:30:36Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:30:36Z", "message": "Tasks Completed: 11 (Failed: 0, Cancelled 0), Skipped: 0", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/redhat-appstudio-qe/sample-multi-component" }, { "name": "revision", "value": "44c9fc555d02f85bda9ea5ea87f2a7fc27e4df79" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-xsku/go-component-xahymx:44c9fc555d02f85bda9ea5ea87f2a7fc27e4df79.git" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-xsku/go-component-xahymx:44c9fc555d02f85bda9ea5ea87f2a7fc27e4df79.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-xsku/go-component-xahymx:44c9fc555d02f85bda9ea5ea87f2a7fc27e4df79" }, { "name": "DOCKERFILE", "value": "docker/Dockerfile" }, { "name": "CONTEXT", "value": "go-component" }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:97c0d0ac1d508a70f8610c7dc79de453a990414fba7d7e0f8d21ec22f5796d96" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-xsku/go-component-xahymx:44c9fc555d02f85bda9ea5ea87f2a7fc27e4df79" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:ecfae10944b45b91988ddc6311c7232bf2c98ba73c5fc6261861ecfd33434db0" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:96badf0b06d83fc1e7cf50048f94091e257819ee537f063830541f9c97295200" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:8f7f445df165eb6498cfd5f36a043670f8275fdd739f08a4accf69868dfaa821" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "IMAGE_URL", "value": "quay.io/redhat-appstudio-qe/build-e2e-xsku/go-component-xahymx:44c9fc555d02f85bda9ea5ea87f2a7fc27e4df79" }, { "name": "IMAGE_DIGEST", "value": "sha256:13fe12b856bd92d715597ba21dd68583da900760375c5ecb48cf501b267c70a1" }, { "name": "CHAINS-GIT_URL", "value": "https://github.com/redhat-appstudio-qe/sample-multi-component" }, { "name": "CHAINS-GIT_COMMIT", "value": "44c9fc555d02f85bda9ea5ea87f2a7fc27e4df79" } ], "spanContext": { "traceparent": "00-0c49b961a4f2520db3c2eea51ed5cacc-7e7a919b229b8faa-01" }, "startTime": "2026-05-05T12:09:09Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.openshift.io/repo": "https://github.com/redhat-appstudio-qe/sample-multi-component?rev=04b61ca4dbfd05f9d355c7d167b324cf587d5825", "build.appstudio.redhat.com/commit_sha": "04b61ca4dbfd05f9d355c7d167b324cf587d5825", "build.appstudio.redhat.com/pull_request_number": "32876", "build.appstudio.redhat.com/target_branch": "multi-component-base-ogojzn", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "multi-component-base-ogojzn", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74409627107", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-ylvqpi", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "40773614", "pipelinesascode.tekton.dev/log-url": "https://console-openshift-console.apps.rosa.kx-fe60bf3fac.sd8i.p3.openshiftapps.com/k8s/ns/build-e2e-xsku/tekton.dev~v1~PipelineRun/python-component-nvncht-on-pull-request-lms28", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"multi-component-base-ogojzn\" \u0026\u0026 ( \"python-component/***\".pathChanged() || \".tekton/python-component-nvncht-pull-request.yaml\".pathChanged() )", "pipelinesascode.tekton.dev/original-prname": "python-component-nvncht-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "32876", "pipelinesascode.tekton.dev/repo-url": "https://github.com/redhat-appstudio-qe/sample-multi-component", "pipelinesascode.tekton.dev/repository": "go-component-xahymx", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-qe-app[bot]", "pipelinesascode.tekton.dev/sha": "04b61ca4dbfd05f9d355c7d167b324cf587d5825", "pipelinesascode.tekton.dev/sha-title": "e2e test commit message", "pipelinesascode.tekton.dev/sha-url": "https://github.com/redhat-appstudio-qe/sample-multi-component/commit/04b61ca4dbfd05f9d355c7d167b324cf587d5825", "pipelinesascode.tekton.dev/source-branch": "konflux-python-component-nvncht", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/redhat-appstudio-qe/sample-multi-component", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "sample-multi-component", "results.tekton.dev/record": "build-e2e-xsku/results/600b74db-f1e8-487f-b646-d591f77c478e/records/600b74db-f1e8-487f-b646-d591f77c478e", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"sample-multi-component\",\"commit\":\"04b61ca4dbfd05f9d355c7d167b324cf587d5825\",\"eventType\":\"pull_request\",\"pull_request-id\":32876}", "results.tekton.dev/result": "build-e2e-xsku/results/600b74db-f1e8-487f-b646-d591f77c478e", "test.appstudio.openshift.io/pr-group": "konflux-python-component-nvncht" }, "creationTimestamp": "2026-05-05T12:11:31Z", "finalizers": [ "results.tekton.dev/pipelinerun", "chains.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "python-component-nvncht-on-pull-request-", "generation": 2, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.43.0", "appstudio.openshift.io/application": "build-suite-positive-mc-zzkl", "appstudio.openshift.io/component": "python-component-nvncht", "kueue.x-k8s.io/priority-class": "konflux-pre-merge-build", "kueue.x-k8s.io/queue-name": "pipelines-queue", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74409627107", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/original-prname": "python-component-nvncht-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "32876", "pipelinesascode.tekton.dev/repository": "go-component-xahymx", "pipelinesascode.tekton.dev/sha": "04b61ca4dbfd05f9d355c7d167b324cf587d5825", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "sample-multi-component", "tekton.dev/pipeline": "python-component-nvncht-on-pull-request-lms28", "test.appstudio.openshift.io/pr-group-sha": "5782de64257c2aa4f9ee046ca8b3102495196134c2d6b71999ad554732538e" }, "name": "python-component-nvncht-on-pull-request-lms28", "namespace": "build-e2e-xsku", "resourceVersion": "128394", "uid": "600b74db-f1e8-487f-b646-d591f77c478e" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/redhat-appstudio-qe/sample-multi-component" }, { "name": "revision", "value": "04b61ca4dbfd05f9d355c7d167b324cf587d5825" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/build-e2e-xsku/python-component-nvncht:on-pr-04b61ca4dbfd05f9d355c7d167b324cf587d5825" }, { "name": "image-expires-after", "value": "6h" }, { "name": "dockerfile", "value": "docker/Dockerfile" }, { "name": "path-context", "value": "python-component" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:97c0d0ac1d508a70f8610c7dc79de453a990414fba7d7e0f8d21ec22f5796d96" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:ecfae10944b45b91988ddc6311c7232bf2c98ba73c5fc6261861ecfd33434db0" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:96badf0b06d83fc1e7cf50048f94091e257819ee537f063830541f9c97295200" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:8f7f445df165eb6498cfd5f36a043670f8275fdd739f08a4accf69868dfaa821" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "build-pipeline-python-component-nvncht" }, "timeouts": { "pipeline": "2h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-ylvqpi" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "python-component-nvncht-on-pull-request-lms28-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "python-component-nvncht-on-pull-request-lms28-clone-repository", "pipelineTaskName": "clone-repository" } ], "completionTime": "2026-05-05T12:11:50Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:11:50Z", "message": "Tasks Completed: 2 (Failed: 1, Cancelled 0), Skipped: 9", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/redhat-appstudio-qe/sample-multi-component" }, { "name": "revision", "value": "04b61ca4dbfd05f9d355c7d167b324cf587d5825" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-xsku/python-component-nvncht:on-pr-04b61ca4dbfd05f9d355c7d167b324cf587d5825.git" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-xsku/python-component-nvncht:on-pr-04b61ca4dbfd05f9d355c7d167b324cf587d5825.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-xsku/python-component-nvncht:on-pr-04b61ca4dbfd05f9d355c7d167b324cf587d5825" }, { "name": "DOCKERFILE", "value": "docker/Dockerfile" }, { "name": "CONTEXT", "value": "python-component" }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "6h" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:97c0d0ac1d508a70f8610c7dc79de453a990414fba7d7e0f8d21ec22f5796d96" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-xsku/python-component-nvncht:on-pr-04b61ca4dbfd05f9d355c7d167b324cf587d5825" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:ecfae10944b45b91988ddc6311c7232bf2c98ba73c5fc6261861ecfd33434db0" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:96badf0b06d83fc1e7cf50048f94091e257819ee537f063830541f9c97295200" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:8f7f445df165eb6498cfd5f36a043670f8275fdd739f08a4accf69868dfaa821" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "CHAINS-GIT_URL", "value": "https://github.com/redhat-appstudio-qe/sample-multi-component" }, { "name": "CHAINS-GIT_COMMIT", "value": "04b61ca4dbfd05f9d355c7d167b324cf587d5825" } ], "skippedTasks": [ { "name": "prefetch-dependencies", "reason": "PipelineRun was stopping" }, { "name": "build-container", "reason": "PipelineRun was stopping" }, { "name": "build-image-index", "reason": "PipelineRun was stopping" }, { "name": "deprecated-base-image-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "spanContext": { "traceparent": "00-8911ab55d945252a1ea460e921300210-dd260ed6db3da9b1-01" }, "startTime": "2026-05-05T12:11:31Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "appstudio.openshift.io/snapshot": "build-suite-component-update-kixx-20260505-114112-000", "appstudio.openshift.io/snapshots": "build-suite-component-update-kixx-20260505-114112-000", "build.appstudio.openshift.io/repo": "https://gitlab.com/konflux-qe/build-nudge-child-iobonh/-/tree/75761c9035ca2aa820650cdf4fd2141181e82ff8", "build.appstudio.redhat.com/commit_sha": "75761c9035ca2aa820650cdf4fd2141181e82ff8", "build.appstudio.redhat.com/pull_request_number": "1", "build.appstudio.redhat.com/target_branch": "multi-component-child-base-gtah", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "multi-component-child-base-gtah", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "Merge Request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-ebazed", "pipelinesascode.tekton.dev/git-provider": "gitlab", "pipelinesascode.tekton.dev/log-url": "https://console-openshift-console.apps.rosa.kx-fe60bf3fac.sd8i.p3.openshiftapps.com/k8s/ns/build-e2e-xyii/tekton.dev~v1~PipelineRun/gl-multi-component-child-gtah-on-pull-request-nf7w8", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"multi-component-child-base-gtah\"", "pipelinesascode.tekton.dev/original-prname": "gl-multi-component-child-gtah-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "1", "pipelinesascode.tekton.dev/repo-url": "https://gitlab.com/konflux-qe/build-nudge-child-iobonh", "pipelinesascode.tekton.dev/repository": "gl-multi-component-child-gtah", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "konflux-ci-qe-bot", "pipelinesascode.tekton.dev/sha": "75761c9035ca2aa820650cdf4fd2141181e82ff8", "pipelinesascode.tekton.dev/sha-title": "Konflux update gl-multi-component-child-gtah", "pipelinesascode.tekton.dev/sha-url": "https://gitlab.com/konflux-qe/build-nudge-child-iobonh/-/commit/75761c9035ca2aa820650cdf4fd2141181e82ff8", "pipelinesascode.tekton.dev/source-branch": "konflux-gl-multi-component-child-gtah", "pipelinesascode.tekton.dev/source-project-id": "81921023", "pipelinesascode.tekton.dev/source-repo-url": "https://gitlab.com/konflux-qe/build-nudge-child-iobonh", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/target-project-id": "81921023", "pipelinesascode.tekton.dev/url-org": "konflux-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-child-iobonh", "results.tekton.dev/record": "build-e2e-xyii/results/556ae34e-e870-406d-a09a-df23f33a07cd/records/556ae34e-e870-406d-a09a-df23f33a07cd", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"build-nudge-child-iobonh\",\"commit\":\"75761c9035ca2aa820650cdf4fd2141181e82ff8\",\"eventType\":\"Merge Request\",\"pull_request-id\":1}", "results.tekton.dev/result": "build-e2e-xyii/results/556ae34e-e870-406d-a09a-df23f33a07cd", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Sucessfully created snapshot. See annotation appstudio.openshift.io/snapshot for name\",\"status\":\"success\"}", "test.appstudio.openshift.io/pr-group": "konflux-gl-multi-component-child-gtah", "test.appstudio.openshift.io/snapshot-creation-report": "SnapshotCreated" }, "creationTimestamp": "2026-05-05T11:41:11Z", "finalizers": [ "results.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer", "chains.tekton.dev/pipelinerun" ], "generateName": "gl-multi-component-child-gtah-on-pull-request-", "generation": 2, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.43.0", "appstudio.openshift.io/application": "build-suite-component-update-kixx", "appstudio.openshift.io/component": "gl-multi-component-child-gtah", "kueue.x-k8s.io/priority-class": "konflux-pre-merge-build", "kueue.x-k8s.io/queue-name": "pipelines-queue", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/event-type": "Merge_Request", "pipelinesascode.tekton.dev/original-prname": "gl-multi-component-child-gtah-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "1", "pipelinesascode.tekton.dev/repository": "gl-multi-component-child-gtah", "pipelinesascode.tekton.dev/sha": "75761c9035ca2aa820650cdf4fd2141181e82ff8", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "konflux-qe", "pipelinesascode.tekton.dev/url-repository": "build-nudge-child-iobonh", "tekton.dev/pipeline": "gl-multi-component-child-gtah-on-pull-request-nf7w8", "test.appstudio.openshift.io/pr-group-sha": "bfe80dc9c9f4751f421620894b1209d0b7b3dbd9c5bdfc89e3fe78116de693" }, "name": "gl-multi-component-child-gtah-on-pull-request-nf7w8", "namespace": "build-e2e-xyii", "resourceVersion": "84509", "uid": "556ae34e-e870-406d-a09a-df23f33a07cd" }, "spec": { "params": [ { "name": "git-url", "value": "https://gitlab.com/konflux-qe/build-nudge-child-iobonh" }, { "name": "revision", "value": "75761c9035ca2aa820650cdf4fd2141181e82ff8" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/build-e2e-xyii/gl-multi-component-child-gtah:on-pr-75761c9035ca2aa820650cdf4fd2141181e82ff8" }, { "name": "image-expires-after", "value": "6h" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:97c0d0ac1d508a70f8610c7dc79de453a990414fba7d7e0f8d21ec22f5796d96" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:ecfae10944b45b91988ddc6311c7232bf2c98ba73c5fc6261861ecfd33434db0" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:96badf0b06d83fc1e7cf50048f94091e257819ee537f063830541f9c97295200" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:8f7f445df165eb6498cfd5f36a043670f8275fdd739f08a4accf69868dfaa821" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "build-pipeline-gl-multi-component-child-gtah" }, "timeouts": { "pipeline": "2h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-ebazed" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-component-child-gtah-on-pull-request-nf7w8-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-compod6f83285db98aa19e79d11d9f2ab4168-clone-repository", "pipelineTaskName": "clone-repository" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-d6f83285db98aa19e79d11d9f2ab4168-prefetch-dependencies", "pipelineTaskName": "prefetch-dependencies" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-compond6f83285db98aa19e79d11d9f2ab4168-build-container", "pipelineTaskName": "build-container" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-compd6f83285db98aa19e79d11d9f2ab4168-build-image-index", "pipelineTaskName": "build-image-index" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-d6f83285db98aa19e79d11d9f2ab4168-deprecated-base-image-check", "pipelineTaskName": "deprecated-base-image-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-component-child-gtah-on-pull-request-nf7w8-clamav-scan", "pipelineTaskName": "clamav-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-compod6f83285db98aa19e79d11d9f2ab4168-sast-shell-check", "pipelineTaskName": "sast-shell-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-comd6f83285db98aa19e79d11d9f2ab4168-sast-unicode-check", "pipelineTaskName": "sast-unicode-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-cod6f83285db98aa19e79d11d9f2ab4168-rpms-signature-scan", "pipelineTaskName": "rpms-signature-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "gl-multi-component-child-gtah-on-pull-request-nf7w8-tpa-scan", "pipelineTaskName": "tpa-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "completionTime": "2026-05-05T11:49:20Z", "conditions": [ { "lastTransitionTime": "2026-05-05T11:49:20Z", "message": "Tasks Completed: 11 (Failed: 0, Cancelled 0), Skipped: 0", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://gitlab.com/konflux-qe/build-nudge-child-iobonh" }, { "name": "revision", "value": "75761c9035ca2aa820650cdf4fd2141181e82ff8" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-xyii/gl-multi-component-child-gtah:on-pr-75761c9035ca2aa820650cdf4fd2141181e82ff8.git" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/build-e2e-xyii/gl-multi-component-child-gtah:on-pr-75761c9035ca2aa820650cdf4fd2141181e82ff8.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-xyii/gl-multi-component-child-gtah:on-pr-75761c9035ca2aa820650cdf4fd2141181e82ff8" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "6h" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:97c0d0ac1d508a70f8610c7dc79de453a990414fba7d7e0f8d21ec22f5796d96" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/build-e2e-xyii/gl-multi-component-child-gtah:on-pr-75761c9035ca2aa820650cdf4fd2141181e82ff8" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:ecfae10944b45b91988ddc6311c7232bf2c98ba73c5fc6261861ecfd33434db0" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:96badf0b06d83fc1e7cf50048f94091e257819ee537f063830541f9c97295200" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:8f7f445df165eb6498cfd5f36a043670f8275fdd739f08a4accf69868dfaa821" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "IMAGE_URL", "value": "quay.io/redhat-appstudio-qe/build-e2e-xyii/gl-multi-component-child-gtah:on-pr-75761c9035ca2aa820650cdf4fd2141181e82ff8" }, { "name": "IMAGE_DIGEST", "value": "sha256:e51cef0055babc0a8a04af45df31df384808ef7144266cac61a382bdc0f37f3c" }, { "name": "CHAINS-GIT_URL", "value": "https://gitlab.com/konflux-qe/build-nudge-child-iobonh" }, { "name": "CHAINS-GIT_COMMIT", "value": "75761c9035ca2aa820650cdf4fd2141181e82ff8" } ], "spanContext": { "traceparent": "00-050ef25461bd5420490bb3da88d7c9af-f908c8b7cf5bd9fc-01" }, "startTime": "2026-05-05T11:41:12Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "results.tekton.dev/record": "chains-e2e-vfev/results/a88f2dd0-a501-40e7-a1ba-a3be244b0ec1/records/a88f2dd0-a501-40e7-a1ba-a3be244b0ec1", "results.tekton.dev/result": "chains-e2e-vfev/results/a88f2dd0-a501-40e7-a1ba-a3be244b0ec1" }, "creationTimestamp": "2026-05-05T11:39:08Z", "finalizers": [ "results.tekton.dev/pipelinerun", "chains.tekton.dev/pipelinerun" ], "generation": 2, "labels": { "kueue.x-k8s.io/priority-class": "konflux-default", "kueue.x-k8s.io/queue-name": "pipelines-queue", "pipelines.openshift.io/runtime": "generic", "pipelines.openshift.io/strategy": "docker", "pipelines.openshift.io/used-by": "build-cloud", "tekton.dev/pipeline": "docker-build" }, "name": "buildah-demo-coiplysddc", "namespace": "chains-e2e-vfev", "resourceVersion": "69925", "uid": "a88f2dd0-a501-40e7-a1ba-a3be244b0ec1" }, "spec": { "params": [ { "name": "dockerfile", "value": "Containerfile" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/test-images:buildah-demo-coiplysddc" }, { "name": "git-url", "value": "https://github.com/conforma/golden-container.git" }, { "name": "skip-checks", "value": "true" } ], "pipelineRef": { "params": [ { "name": "name", "value": "docker-build" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/pipeline-docker-build:devel" }, { "name": "kind", "value": "pipeline" } ], "resolver": "bundles" }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "konflux-integration-runner" }, "timeouts": { "pipeline": "2h0m0s" }, "workspaces": [ { "name": "workspace", "persistentVolumeClaim": { "claimName": "app-studio-default-workspace" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "buildah-demo-coiplysddc-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "buildah-demo-coiplysddc-clone-repository", "pipelineTaskName": "clone-repository" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "buildah-demo-coiplysddc-prefetch-dependencies", "pipelineTaskName": "prefetch-dependencies" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "buildah-demo-coiplysddc-build-container", "pipelineTaskName": "build-container" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "buildah-demo-coiplysddc-build-image-index", "pipelineTaskName": "build-image-index" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "buildah-demo-coiplysddc-apply-tags", "pipelineTaskName": "apply-tags" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "buildah-demo-coiplysddc-push-dockerfile", "pipelineTaskName": "push-dockerfile" } ], "completionTime": "2026-05-05T11:43:20Z", "conditions": [ { "lastTransitionTime": "2026-05-05T11:43:20Z", "message": "Tasks Completed: 7 (Failed: 0, Cancelled 0), Skipped: 9", "reason": "Completed", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building container images from a Containerfile while reducing network traffic.\n\n_Uses `buildah` to create a container image. It also optionally creates a source image and runs some build-time tests. EC will flag a violation for [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) if any tasks are added to the pipeline.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Build a source image.", "name": "build-source-image", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/conforma/golden-container.git" }, { "name": "revision", "value": "" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone:0.1@sha256:7db7ad9653dccc771407cb0294487cf4be9064fa782ffad7e983db1a8ba57e21" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "output", "workspace": "workspace" }, { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies:0.3@sha256:44eb23c2c9a6d7dc471efd28bf835035add9853c065e110312c5feefe87cfc8c" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "source", "workspace": "workspace" }, { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/test-images:buildah-demo-coiplysddc" }, { "name": "DOCKERFILE", "value": "Containerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah:0.9@sha256:62f09c50d552eac57e17638c67e88b0982352a71975858c8ba262bcff293de06" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "source", "workspace": "workspace" } ] }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/test-images:buildah-demo-coiplysddc" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-source-image", "params": [ { "name": "BINARY_IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "BINARY_IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "source-build" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-source-build:0.3@sha256:df999473b440066ce856e36d80afd06b6ed3b575e07b6ac3efe79a25addc2045" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "true" ] } ], "workspaces": [ { "name": "workspace", "workspace": "workspace" } ] }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "true", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clair-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:9397d3eb9f1cbebaa15e93256e0ca9eaca148baa674be72f07f4a00df63c4609" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "true", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "ecosystem-cert-preflight-checks" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:25dcef1d9270b2e03fe6710a733171f7c7208e341fc627dac3a579088f44af34" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "true", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-snyk-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check:0.4@sha256:566753ca880764361b11f2c67d8e62dda94f829b11cb48e4716f27568216a481" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "true", "operator": "in", "values": [ "false" ] } ], "workspaces": [ { "name": "workspace", "workspace": "workspace" } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:9f18b216ce71a66909e7cb17d9b34526c02d73cf12884ba32d1f10614f7b9f5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "true", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check:0.1@sha256:2cd09c97b9f0fae9c7bcd26d956f77221fb7137ee8b2ef17e7351b5e6f1eb89e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "true", "operator": "in", "values": [ "false" ] } ], "workspaces": [ { "name": "workspace", "workspace": "workspace" } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check:0.4@sha256:c162d9d0cd1e4c64dfc340577ba8e6bf55ebd1bb859fe3157217de9b4473c640" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "true", "operator": "in", "values": [ "false" ] } ], "workspaces": [ { "name": "workspace", "workspace": "workspace" } ] }, { "name": "apply-tags", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "apply-tags" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "push-dockerfile", "params": [ { "name": "IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "DOCKERFILE", "value": "Containerfile" }, { "name": "CONTEXT", "value": "." } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "push-dockerfile" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-push-dockerfile:0.3@sha256:359199272c9a403275162a6741d098d7987334232630b59093d781c743fa99e7" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "workspace", "workspace": "workspace" } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:8f7f445df165eb6498cfd5f36a043670f8275fdd739f08a4accf69868dfaa821" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "true", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "workspace" }, { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" }, "refSource": { "digest": { "sha256": "55ac0a55ec0f28b6cc7c93bdc8598491bf702e6b234c91117afcd271a963de85" }, "entryPoint": "docker-build", "uri": "quay.io/konflux-ci/tekton-catalog/pipeline-docker-build" } }, "results": [ { "name": "IMAGE_URL", "value": "quay.io/redhat-appstudio-qe/test-images:buildah-demo-coiplysddc" }, { "name": "IMAGE_DIGEST", "value": "sha256:6b1ab8f69f4744e485fe9e32044cc5066236d2d75dbd7667e5b2584f7b091a45" }, { "name": "CHAINS-GIT_URL", "value": "https://github.com/conforma/golden-container.git" }, { "name": "CHAINS-GIT_COMMIT", "value": "be3214825d8af1a44d1406df6233660e8372d26f" } ], "skippedTasks": [ { "name": "build-source-image", "reason": "When Expressions evaluated to false", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "true" ] } ] }, { "name": "deprecated-base-image-check", "reason": "When Expressions evaluated to false", "whenExpressions": [ { "input": "true", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "reason": "When Expressions evaluated to false", "whenExpressions": [ { "input": "true", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "reason": "When Expressions evaluated to false", "whenExpressions": [ { "input": "true", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "reason": "When Expressions evaluated to false", "whenExpressions": [ { "input": "true", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "reason": "When Expressions evaluated to false", "whenExpressions": [ { "input": "true", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "reason": "When Expressions evaluated to false", "whenExpressions": [ { "input": "true", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "reason": "When Expressions evaluated to false", "whenExpressions": [ { "input": "true", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "reason": "When Expressions evaluated to false", "whenExpressions": [ { "input": "true", "operator": "in", "values": [ "false" ] } ] } ], "spanContext": { "traceparent": "00-894d62c0a482e588518d0ed1fbb63f59-b48e5d71cf8ef965-01" }, "startTime": "2026-05-05T11:39:09Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "results.tekton.dev/record": "chains-e2e-vfev/results/f10d0e5a-2540-4051-8a05-cbfbc2c3c179/records/f10d0e5a-2540-4051-8a05-cbfbc2c3c179", "results.tekton.dev/result": "chains-e2e-vfev/results/f10d0e5a-2540-4051-8a05-cbfbc2c3c179" }, "creationTimestamp": "2026-05-05T11:43:23Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun" ], "generateName": "verify-enterprise-contract-run-", "generation": 2, "labels": { "appstudio.openshift.io/application": "", "kueue.x-k8s.io/priority-class": "konflux-default", "kueue.x-k8s.io/queue-name": "pipelines-queue", "tekton.dev/pipeline": "verify-enterprise-contract-run-dmzl7" }, "name": "verify-enterprise-contract-run-dmzl7", "namespace": "chains-e2e-vfev", "resourceVersion": "82336", "uid": "f10d0e5a-2540-4051-8a05-cbfbc2c3c179" }, "spec": { "pipelineSpec": { "tasks": [ { "name": "verify-enterprise-contract", "params": [ { "name": "IMAGES", "value": "{\"application\":\"\",\"componentGroup\":\"\",\"components\":[{\"name\":\"\",\"version\":\"\",\"containerImage\":\"quay.io/redhat-appstudio-qe/test-images:buildah-demo-coiplysddc@sha256:6b1ab8f69f4744e485fe9e32044cc5066236d2d75dbd7667e5b2584f7b091a45\",\"source\":{}}],\"artifacts\":{}}" }, { "name": "POLICY_CONFIGURATION", "value": "ec-policy" }, { "name": "PUBLIC_KEY", "value": "k8s://chains-e2e-vfev/cosign-public-key" }, { "name": "SSL_CERT_DIR", "value": "/var/run/secrets/kubernetes.io/serviceaccount" }, { "name": "STRICT", "value": "true" }, { "name": "EFFECTIVE_TIME", "value": "now" }, { "name": "IGNORE_REKOR", "value": "true" } ], "taskRef": { "params": [ { "name": "name", "value": "verify-enterprise-contract" }, { "name": "bundle", "value": "quay.io/conforma/tekton-task:kf-b345847182602d9a5ce9e957fa76fe02575c8018@sha256:7df8d121c09999d0376e189c1eb8a8263078aab697aa5ee966512f581427a6ce" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "konflux-integration-runner" }, "timeouts": { "pipeline": "2h0m0s" } }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "verify-enterprise-contract-run-dmzl7-verify-enterprise-contract", "pipelineTaskName": "verify-enterprise-contract" } ], "completionTime": "2026-05-05T11:48:44Z", "conditions": [ { "lastTransitionTime": "2026-05-05T11:48:44Z", "message": "Tasks Completed: 1 (Failed: 0, Cancelled 0), Skipped: 0", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "tasks": [ { "name": "verify-enterprise-contract", "params": [ { "name": "IMAGES", "value": "{\"application\":\"\",\"componentGroup\":\"\",\"components\":[{\"name\":\"\",\"version\":\"\",\"containerImage\":\"quay.io/redhat-appstudio-qe/test-images:buildah-demo-coiplysddc@sha256:6b1ab8f69f4744e485fe9e32044cc5066236d2d75dbd7667e5b2584f7b091a45\",\"source\":{}}],\"artifacts\":{}}" }, { "name": "POLICY_CONFIGURATION", "value": "ec-policy" }, { "name": "PUBLIC_KEY", "value": "k8s://chains-e2e-vfev/cosign-public-key" }, { "name": "SSL_CERT_DIR", "value": "/var/run/secrets/kubernetes.io/serviceaccount" }, { "name": "STRICT", "value": "true" }, { "name": "EFFECTIVE_TIME", "value": "now" }, { "name": "IGNORE_REKOR", "value": "true" } ], "taskRef": { "params": [ { "name": "name", "value": "verify-enterprise-contract" }, { "name": "bundle", "value": "quay.io/conforma/tekton-task:kf-b345847182602d9a5ce9e957fa76fe02575c8018@sha256:7df8d121c09999d0376e189c1eb8a8263078aab697aa5ee966512f581427a6ce" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "spanContext": { "traceparent": "00-080d6800b97026ce0e8207ba80065c53-045209a86b4d6426-01" }, "startTime": "2026-05-05T11:43:23Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "results.tekton.dev/record": "chains-e2e-vfev/results/f044cecd-bc23-4bc8-8711-99702b5afd41/records/f044cecd-bc23-4bc8-8711-99702b5afd41", "results.tekton.dev/result": "chains-e2e-vfev/results/f044cecd-bc23-4bc8-8711-99702b5afd41" }, "creationTimestamp": "2026-05-05T11:48:45Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun" ], "generateName": "verify-enterprise-contract-run-", "generation": 2, "labels": { "appstudio.openshift.io/application": "", "kueue.x-k8s.io/priority-class": "konflux-default", "kueue.x-k8s.io/queue-name": "pipelines-queue", "tekton.dev/pipeline": "verify-enterprise-contract-run-dzvfc" }, "name": "verify-enterprise-contract-run-dzvfc", "namespace": "chains-e2e-vfev", "resourceVersion": "82812", "uid": "f044cecd-bc23-4bc8-8711-99702b5afd41" }, "spec": { "pipelineSpec": { "tasks": [ { "name": "verify-enterprise-contract", "params": [ { "name": "IMAGES", "value": "{\"application\":\"\",\"componentGroup\":\"\",\"components\":[{\"name\":\"\",\"version\":\"\",\"containerImage\":\"quay.io/redhat-appstudio-qe/test-images:buildah-demo-coiplysddc@sha256:6b1ab8f69f4744e485fe9e32044cc5066236d2d75dbd7667e5b2584f7b091a45\",\"source\":{}}],\"artifacts\":{}}" }, { "name": "POLICY_CONFIGURATION", "value": "ec-policy" }, { "name": "PUBLIC_KEY", "value": "k8s://chains-e2e-vfev/cosign-public-key" }, { "name": "SSL_CERT_DIR", "value": "/var/run/secrets/kubernetes.io/serviceaccount" }, { "name": "STRICT", "value": "false" }, { "name": "EFFECTIVE_TIME", "value": "now" }, { "name": "IGNORE_REKOR", "value": "true" } ], "taskRef": { "params": [ { "name": "name", "value": "verify-enterprise-contract" }, { "name": "bundle", "value": "quay.io/conforma/tekton-task:kf-b345847182602d9a5ce9e957fa76fe02575c8018@sha256:7df8d121c09999d0376e189c1eb8a8263078aab697aa5ee966512f581427a6ce" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "konflux-integration-runner" }, "timeouts": { "pipeline": "2h0m0s" } }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "verify-enterprise-contract-run-dzvfc-verify-enterprise-contract", "pipelineTaskName": "verify-enterprise-contract" } ], "completionTime": "2026-05-05T11:48:56Z", "conditions": [ { "lastTransitionTime": "2026-05-05T11:48:56Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 0", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "tasks": [ { "name": "verify-enterprise-contract", "params": [ { "name": "IMAGES", "value": "{\"application\":\"\",\"componentGroup\":\"\",\"components\":[{\"name\":\"\",\"version\":\"\",\"containerImage\":\"quay.io/redhat-appstudio-qe/test-images:buildah-demo-coiplysddc@sha256:6b1ab8f69f4744e485fe9e32044cc5066236d2d75dbd7667e5b2584f7b091a45\",\"source\":{}}],\"artifacts\":{}}" }, { "name": "POLICY_CONFIGURATION", "value": "ec-policy" }, { "name": "PUBLIC_KEY", "value": "k8s://chains-e2e-vfev/cosign-public-key" }, { "name": "SSL_CERT_DIR", "value": "/var/run/secrets/kubernetes.io/serviceaccount" }, { "name": "STRICT", "value": "false" }, { "name": "EFFECTIVE_TIME", "value": "now" }, { "name": "IGNORE_REKOR", "value": "true" } ], "taskRef": { "params": [ { "name": "name", "value": "verify-enterprise-contract" }, { "name": "bundle", "value": "quay.io/conforma/tekton-task:kf-b345847182602d9a5ce9e957fa76fe02575c8018@sha256:7df8d121c09999d0376e189c1eb8a8263078aab697aa5ee966512f581427a6ce" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "spanContext": { "traceparent": "00-3863ee9fcfe230b4353a5712853c3513-b2de0184ae928051-01" }, "startTime": "2026-05-05T11:48:46Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "appstudio.openshift.io/snapshot": "kokohazamar-backwards-compat-dr-20260505-123613-000-e0", "appstudio.openshift.io/snapshots": "kokohazamar-backwards-compat-dr-20260505-123613-000-e0", "build.appstudio.openshift.io/repo": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ghatnd?rev=c22768a7a6e9d7e0a156cc5fd96b40e0666b8851", "build.appstudio.redhat.com/commit_sha": "c22768a7a6e9d7e0a156cc5fd96b40e0666b8851", "build.appstudio.redhat.com/pull_request_number": "3", "build.appstudio.redhat.com/target_branch": "main", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "main", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74413566293", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-ekivof", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "40773614", "pipelinesascode.tekton.dev/log-url": "https://console-openshift-console.apps.rosa.kx-fe60bf3fac.sd8i.p3.openshiftapps.com/k8s/ns/dr-test-kokohazamar-backwards-compat-dr/tekton.dev~v1~PipelineRun/mathwizz-frontend-on-pull-request-g8pmg", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"main\" \u0026\u0026 ( \"frontend/***\".pathChanged() || \".tekton/mathwizz-frontend-pull-request.yaml\".pathChanged() )", "pipelinesascode.tekton.dev/original-prname": "mathwizz-frontend-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "3", "pipelinesascode.tekton.dev/repo-url": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ghatnd", "pipelinesascode.tekton.dev/repository": "mathwizz-web-server", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-qe-app[bot]", "pipelinesascode.tekton.dev/sha": "c22768a7a6e9d7e0a156cc5fd96b40e0666b8851", "pipelinesascode.tekton.dev/sha-title": "RHTAP-Qe-App update mathwizz-frontend", "pipelinesascode.tekton.dev/sha-url": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ghatnd/commit/c22768a7a6e9d7e0a156cc5fd96b40e0666b8851", "pipelinesascode.tekton.dev/source-branch": "konflux-mathwizz-frontend", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ghatnd", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "DR-MathWizz-ghatnd", "results.tekton.dev/record": "dr-test-kokohazamar-backwards-compat-dr/results/883d8b05-e136-40e6-902c-d507783c9a8a/records/883d8b05-e136-40e6-902c-d507783c9a8a", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"DR-MathWizz-ghatnd\",\"commit\":\"c22768a7a6e9d7e0a156cc5fd96b40e0666b8851\",\"eventType\":\"pull_request\",\"pull_request-id\":3}", "results.tekton.dev/result": "dr-test-kokohazamar-backwards-compat-dr/results/883d8b05-e136-40e6-902c-d507783c9a8a", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Sucessfully created snapshot. See annotation appstudio.openshift.io/snapshot for name\",\"status\":\"success\"}", "test.appstudio.openshift.io/pr-group": "konflux-mathwizz-frontend", "test.appstudio.openshift.io/snapshot-creation-report": "SnapshotCreated" }, "creationTimestamp": "2026-05-05T12:35:41Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "mathwizz-frontend-on-pull-request-", "generation": 2, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.43.0", "appstudio.openshift.io/application": "kokohazamar-backwards-compat-dr", "appstudio.openshift.io/component": "mathwizz-frontend", "kueue.x-k8s.io/priority-class": "konflux-pre-merge-build", "kueue.x-k8s.io/queue-name": "pipelines-queue", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74413566293", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/original-prname": "mathwizz-frontend-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "3", "pipelinesascode.tekton.dev/repository": "mathwizz-web-server", "pipelinesascode.tekton.dev/sha": "c22768a7a6e9d7e0a156cc5fd96b40e0666b8851", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "DR-MathWizz-ghatnd", "pipelineservice.appstudio.io/throttled": "mathwizz-frontend-on-pull-request-g8pmg-sast-shell-check", "tekton.dev/pipeline": "mathwizz-frontend-on-pull-request-g8pmg", "test.appstudio.openshift.io/pr-group-sha": "9efa70041c6f541c0c7a03c12fd154337cfef475ab3f9cfb92dcb38958c1db" }, "name": "mathwizz-frontend-on-pull-request-g8pmg", "namespace": "dr-test-kokohazamar-backwards-compat-dr", "resourceVersion": "167379", "uid": "883d8b05-e136-40e6-902c-d507783c9a8a" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ghatnd" }, { "name": "revision", "value": "c22768a7a6e9d7e0a156cc5fd96b40e0666b8851" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/dr-test-kokohazamar-backwards-compat-dr/mathwizz-frontend:on-pr-c22768a7a6e9d7e0a156cc5fd96b40e0666b8851" }, { "name": "image-expires-after", "value": "6h" }, { "name": "dockerfile", "value": "Dockerfile" }, { "name": "path-context", "value": "frontend" } ], "pipelineSpec": { "description": "This pipeline is ideal for building container images from a Containerfile while maintaining trust after pipeline customization.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Build a source image.", "name": "build-source-image", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:13d49df7dc9ae301627e45f95a236011422996152f1bea46cd60217b0f057407" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:1b209c0d93e52e418f3e6cd4b4fd915a84e4bd7f68e1cfd0d6446133540d7f43" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta:0.9@sha256:681d9f65a7f50cb260ee576ccab551e11d63c549f1e1ef3d201da3c112855bd6" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-source-image", "params": [ { "name": "BINARY_IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "BINARY_IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "source-build-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:0917cfc7772e82cb8e74743c2104f43bcf2596aceafe87eec6fce69a8cac5f06" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.build-source-image)", "operator": "in", "values": [ "true" ] } ] }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clair-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:9397d3eb9f1cbebaa15e93256e0ca9eaca148baa674be72f07f4a00df63c4609" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "ecosystem-cert-preflight-checks" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:25dcef1d9270b2e03fe6710a733171f7c7208e341fc627dac3a579088f44af34" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-snyk-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:8f3ecbeaff579e41b8278f82d7fabac27845db17a8e687ea6c510c0c9aceabbb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:9f18b216ce71a66909e7cb17d9b34526c02d73cf12884ba32d1f10614f7b9f5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:c4ef47e3b4e0508572d266fb745be7e374c29dc02580328cbe9f4d472a8aca57" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:90efa582de7770d55102b74014a765cd16a25a56f2cf644b56a788c70c4dc749" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "apply-tags", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "apply-tags" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "push-dockerfile", "params": [ { "name": "IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "push-dockerfile-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:7855471abfe87de080b914f2f3ca27c59e64f6448a7c2435e51435b764494c71" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:4ceea61b0fa81bc5da05afb26d51e06e4843378d739e4d003b062d5d04cc5e90" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "build-pipeline-mathwizz-frontend" }, "timeouts": { "pipeline": "2h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-ekivof" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-g8pmg-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-g8pmg-clone-repository", "pipelineTaskName": "clone-repository" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-g8pmg-prefetch-dependencies", "pipelineTaskName": "prefetch-dependencies" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-g8pmg-build-container", "pipelineTaskName": "build-container" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-g8pmg-build-image-index", "pipelineTaskName": "build-image-index" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mat9a83ce1f138463a62e90c77d8df14809-deprecated-base-image-check", "pipelineTaskName": "deprecated-base-image-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-g8pmg-clair-scan", "pipelineTaskName": "clair-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-requef40b8809303524a661990e52a23c391e", "pipelineTaskName": "ecosystem-cert-preflight-checks", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-g8pmg-sast-snyk-check", "pipelineTaskName": "sast-snyk-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-g8pmg-clamav-scan", "pipelineTaskName": "clamav-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-g8pmg-sast-shell-check", "pipelineTaskName": "sast-shell-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-g8pmg-sast-unicode-check", "pipelineTaskName": "sast-unicode-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-g8pmg-apply-tags", "pipelineTaskName": "apply-tags" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-g8pmg-push-dockerfile", "pipelineTaskName": "push-dockerfile" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-g8pmg-rpms-signature-scan", "pipelineTaskName": "rpms-signature-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "completionTime": "2026-05-05T12:40:24Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:40:24Z", "message": "Tasks Completed: 15 (Failed: 0, Cancelled 0), Skipped: 1", "reason": "Completed", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building container images from a Containerfile while maintaining trust after pipeline customization.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Build a source image.", "name": "build-source-image", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ghatnd" }, { "name": "revision", "value": "c22768a7a6e9d7e0a156cc5fd96b40e0666b8851" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/dr-test-kokohazamar-backwards-compat-dr/mathwizz-frontend:on-pr-c22768a7a6e9d7e0a156cc5fd96b40e0666b8851.git" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:13d49df7dc9ae301627e45f95a236011422996152f1bea46cd60217b0f057407" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/dr-test-kokohazamar-backwards-compat-dr/mathwizz-frontend:on-pr-c22768a7a6e9d7e0a156cc5fd96b40e0666b8851.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:1b209c0d93e52e418f3e6cd4b4fd915a84e4bd7f68e1cfd0d6446133540d7f43" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/dr-test-kokohazamar-backwards-compat-dr/mathwizz-frontend:on-pr-c22768a7a6e9d7e0a156cc5fd96b40e0666b8851" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "frontend" }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "6h" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta:0.9@sha256:681d9f65a7f50cb260ee576ccab551e11d63c549f1e1ef3d201da3c112855bd6" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/dr-test-kokohazamar-backwards-compat-dr/mathwizz-frontend:on-pr-c22768a7a6e9d7e0a156cc5fd96b40e0666b8851" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-source-image", "params": [ { "name": "BINARY_IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "BINARY_IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "source-build-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:0917cfc7772e82cb8e74743c2104f43bcf2596aceafe87eec6fce69a8cac5f06" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "true" ] } ] }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clair-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:9397d3eb9f1cbebaa15e93256e0ca9eaca148baa674be72f07f4a00df63c4609" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "ecosystem-cert-preflight-checks" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:25dcef1d9270b2e03fe6710a733171f7c7208e341fc627dac3a579088f44af34" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-snyk-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:8f3ecbeaff579e41b8278f82d7fabac27845db17a8e687ea6c510c0c9aceabbb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:9f18b216ce71a66909e7cb17d9b34526c02d73cf12884ba32d1f10614f7b9f5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:c4ef47e3b4e0508572d266fb745be7e374c29dc02580328cbe9f4d472a8aca57" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:90efa582de7770d55102b74014a765cd16a25a56f2cf644b56a788c70c4dc749" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "apply-tags", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "apply-tags" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "push-dockerfile", "params": [ { "name": "IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "frontend" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "push-dockerfile-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:7855471abfe87de080b914f2f3ca27c59e64f6448a7c2435e51435b764494c71" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:4ceea61b0fa81bc5da05afb26d51e06e4843378d739e4d003b062d5d04cc5e90" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "IMAGE_URL", "value": "quay.io/redhat-appstudio-qe/dr-test-kokohazamar-backwards-compat-dr/mathwizz-frontend:on-pr-c22768a7a6e9d7e0a156cc5fd96b40e0666b8851" }, { "name": "IMAGE_DIGEST", "value": "sha256:2ff2959e01177834a795199ee3364af5cbacb60402ca81d4ba777efe9aba75af" }, { "name": "CHAINS-GIT_URL", "value": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ghatnd" }, { "name": "CHAINS-GIT_COMMIT", "value": "c22768a7a6e9d7e0a156cc5fd96b40e0666b8851" } ], "skippedTasks": [ { "name": "build-source-image", "reason": "When Expressions evaluated to false", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "true" ] } ] } ], "spanContext": { "traceparent": "00-f0e03816e33e7febbd51256ace728262-a950afaea110c608-01" }, "startTime": "2026-05-05T12:36:13Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "appstudio.openshift.io/snapshot": "kokohazamar-backwards-compat-dr-20260505-123613-000", "appstudio.openshift.io/snapshots": "kokohazamar-backwards-compat-dr-20260505-123613-000", "build.appstudio.openshift.io/repo": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ghatnd?rev=df41ac730f41f329e1a01653969447e03163bccb", "build.appstudio.redhat.com/commit_sha": "df41ac730f41f329e1a01653969447e03163bccb", "build.appstudio.redhat.com/pull_request_number": "2", "build.appstudio.redhat.com/target_branch": "main", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "main", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74413552240", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-aqmxma", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "40773614", "pipelinesascode.tekton.dev/log-url": "https://console-openshift-console.apps.rosa.kx-fe60bf3fac.sd8i.p3.openshiftapps.com/k8s/ns/dr-test-kokohazamar-backwards-compat-dr/tekton.dev~v1~PipelineRun/mathwizz-history-worker-on-pull-request-49cws", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"main\" \u0026\u0026 ( \"history-worker/***\".pathChanged() || \".tekton/mathwizz-history-worker-pull-request.yaml\".pathChanged() )", "pipelinesascode.tekton.dev/original-prname": "mathwizz-history-worker-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "2", "pipelinesascode.tekton.dev/repo-url": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ghatnd", "pipelinesascode.tekton.dev/repository": "mathwizz-web-server", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-qe-app[bot]", "pipelinesascode.tekton.dev/sha": "df41ac730f41f329e1a01653969447e03163bccb", "pipelinesascode.tekton.dev/sha-title": "RHTAP-Qe-App update mathwizz-history-worker", "pipelinesascode.tekton.dev/sha-url": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ghatnd/commit/df41ac730f41f329e1a01653969447e03163bccb", "pipelinesascode.tekton.dev/source-branch": "konflux-mathwizz-history-worker", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ghatnd", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "DR-MathWizz-ghatnd", "results.tekton.dev/record": "dr-test-kokohazamar-backwards-compat-dr/results/b1025729-5750-43d2-9791-4dbcc022ff9f/records/b1025729-5750-43d2-9791-4dbcc022ff9f", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"DR-MathWizz-ghatnd\",\"commit\":\"df41ac730f41f329e1a01653969447e03163bccb\",\"eventType\":\"pull_request\",\"pull_request-id\":2}", "results.tekton.dev/result": "dr-test-kokohazamar-backwards-compat-dr/results/b1025729-5750-43d2-9791-4dbcc022ff9f", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Sucessfully created snapshot. See annotation appstudio.openshift.io/snapshot for name\",\"status\":\"success\"}", "test.appstudio.openshift.io/pr-group": "konflux-mathwizz-history-worker", "test.appstudio.openshift.io/snapshot-creation-report": "SnapshotCreated" }, "creationTimestamp": "2026-05-05T12:35:36Z", "finalizers": [ "results.tekton.dev/pipelinerun", "chains.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "mathwizz-history-worker-on-pull-request-", "generation": 2, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.43.0", "appstudio.openshift.io/application": "kokohazamar-backwards-compat-dr", "appstudio.openshift.io/component": "mathwizz-history-worker", "kueue.x-k8s.io/priority-class": "konflux-pre-merge-build", "kueue.x-k8s.io/queue-name": "pipelines-queue", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74413552240", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/original-prname": "mathwizz-history-worker-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "2", "pipelinesascode.tekton.dev/repository": "mathwizz-web-server", "pipelinesascode.tekton.dev/sha": "df41ac730f41f329e1a01653969447e03163bccb", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "DR-MathWizz-ghatnd", "tekton.dev/pipeline": "mathwizz-history-worker-on-pull-request-49cws", "test.appstudio.openshift.io/pr-group-sha": "178ea6b5ef5d94a3022ad53d265c2f9b1bc2b70874f6a72251339a21796c17" }, "name": "mathwizz-history-worker-on-pull-request-49cws", "namespace": "dr-test-kokohazamar-backwards-compat-dr", "resourceVersion": "167196", "uid": "b1025729-5750-43d2-9791-4dbcc022ff9f" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ghatnd" }, { "name": "revision", "value": "df41ac730f41f329e1a01653969447e03163bccb" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/dr-test-kokohazamar-backwards-compat-dr/mathwizz-history-worker:on-pr-df41ac730f41f329e1a01653969447e03163bccb" }, { "name": "image-expires-after", "value": "6h" }, { "name": "dockerfile", "value": "Dockerfile" }, { "name": "path-context", "value": "history-worker" } ], "pipelineSpec": { "description": "This pipeline is ideal for building container images from a Containerfile while maintaining trust after pipeline customization.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Build a source image.", "name": "build-source-image", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:13d49df7dc9ae301627e45f95a236011422996152f1bea46cd60217b0f057407" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:1b209c0d93e52e418f3e6cd4b4fd915a84e4bd7f68e1cfd0d6446133540d7f43" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta:0.9@sha256:681d9f65a7f50cb260ee576ccab551e11d63c549f1e1ef3d201da3c112855bd6" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-source-image", "params": [ { "name": "BINARY_IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "BINARY_IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "source-build-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:0917cfc7772e82cb8e74743c2104f43bcf2596aceafe87eec6fce69a8cac5f06" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.build-source-image)", "operator": "in", "values": [ "true" ] } ] }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clair-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:9397d3eb9f1cbebaa15e93256e0ca9eaca148baa674be72f07f4a00df63c4609" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "ecosystem-cert-preflight-checks" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:25dcef1d9270b2e03fe6710a733171f7c7208e341fc627dac3a579088f44af34" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-snyk-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:8f3ecbeaff579e41b8278f82d7fabac27845db17a8e687ea6c510c0c9aceabbb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:9f18b216ce71a66909e7cb17d9b34526c02d73cf12884ba32d1f10614f7b9f5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:c4ef47e3b4e0508572d266fb745be7e374c29dc02580328cbe9f4d472a8aca57" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:90efa582de7770d55102b74014a765cd16a25a56f2cf644b56a788c70c4dc749" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "apply-tags", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "apply-tags" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "push-dockerfile", "params": [ { "name": "IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "push-dockerfile-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:7855471abfe87de080b914f2f3ca27c59e64f6448a7c2435e51435b764494c71" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:4ceea61b0fa81bc5da05afb26d51e06e4843378d739e4d003b062d5d04cc5e90" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "build-pipeline-mathwizz-history-worker" }, "timeouts": { "pipeline": "2h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-aqmxma" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-history-worker-on-pull-request-49cws-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-history-worker-on-pull-request-49cws-clone-repository", "pipelineTaskName": "clone-repository" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-9b4392a9a6f1c30a2032692dcc022bac-prefetch-dependencies", "pipelineTaskName": "prefetch-dependencies" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-history-worker-on-pull-request-49cws-build-container", "pipelineTaskName": "build-container" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-history-worker-on-pull-request-49cws-build-image-index", "pipelineTaskName": "build-image-index" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mat9b4392a9a6f1c30a2032692dcc022bac-deprecated-base-image-check", "pipelineTaskName": "deprecated-base-image-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-history-worker-on-pull-request-49cws-clair-scan", "pipelineTaskName": "clair-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-history-worker-on-pull030c5f33bae98f59115a8d6503a3f378", "pipelineTaskName": "ecosystem-cert-preflight-checks", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-history-worker-on-pull-request-49cws-sast-snyk-check", "pipelineTaskName": "sast-snyk-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-history-worker-on-pull-request-49cws-clamav-scan", "pipelineTaskName": "clamav-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-history-worker-on-pull-request-49cws-sast-shell-check", "pipelineTaskName": "sast-shell-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-his9b4392a9a6f1c30a2032692dcc022bac-sast-unicode-check", "pipelineTaskName": "sast-unicode-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-history-worker-on-pull-request-49cws-apply-tags", "pipelineTaskName": "apply-tags" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-history-worker-on-pull-request-49cws-push-dockerfile", "pipelineTaskName": "push-dockerfile" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-hi9b4392a9a6f1c30a2032692dcc022bac-rpms-signature-scan", "pipelineTaskName": "rpms-signature-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "completionTime": "2026-05-05T12:40:12Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:40:12Z", "message": "Tasks Completed: 15 (Failed: 0, Cancelled 0), Skipped: 1", "reason": "Completed", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building container images from a Containerfile while maintaining trust after pipeline customization.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Build a source image.", "name": "build-source-image", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ghatnd" }, { "name": "revision", "value": "df41ac730f41f329e1a01653969447e03163bccb" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/dr-test-kokohazamar-backwards-compat-dr/mathwizz-history-worker:on-pr-df41ac730f41f329e1a01653969447e03163bccb.git" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:13d49df7dc9ae301627e45f95a236011422996152f1bea46cd60217b0f057407" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/dr-test-kokohazamar-backwards-compat-dr/mathwizz-history-worker:on-pr-df41ac730f41f329e1a01653969447e03163bccb.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:1b209c0d93e52e418f3e6cd4b4fd915a84e4bd7f68e1cfd0d6446133540d7f43" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/dr-test-kokohazamar-backwards-compat-dr/mathwizz-history-worker:on-pr-df41ac730f41f329e1a01653969447e03163bccb" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "history-worker" }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "6h" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta:0.9@sha256:681d9f65a7f50cb260ee576ccab551e11d63c549f1e1ef3d201da3c112855bd6" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/dr-test-kokohazamar-backwards-compat-dr/mathwizz-history-worker:on-pr-df41ac730f41f329e1a01653969447e03163bccb" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-source-image", "params": [ { "name": "BINARY_IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "BINARY_IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "source-build-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:0917cfc7772e82cb8e74743c2104f43bcf2596aceafe87eec6fce69a8cac5f06" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "true" ] } ] }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clair-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:9397d3eb9f1cbebaa15e93256e0ca9eaca148baa674be72f07f4a00df63c4609" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "ecosystem-cert-preflight-checks" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:25dcef1d9270b2e03fe6710a733171f7c7208e341fc627dac3a579088f44af34" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-snyk-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:8f3ecbeaff579e41b8278f82d7fabac27845db17a8e687ea6c510c0c9aceabbb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:9f18b216ce71a66909e7cb17d9b34526c02d73cf12884ba32d1f10614f7b9f5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:c4ef47e3b4e0508572d266fb745be7e374c29dc02580328cbe9f4d472a8aca57" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:90efa582de7770d55102b74014a765cd16a25a56f2cf644b56a788c70c4dc749" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "apply-tags", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "apply-tags" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "push-dockerfile", "params": [ { "name": "IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "history-worker" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "push-dockerfile-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:7855471abfe87de080b914f2f3ca27c59e64f6448a7c2435e51435b764494c71" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:4ceea61b0fa81bc5da05afb26d51e06e4843378d739e4d003b062d5d04cc5e90" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "IMAGE_URL", "value": "quay.io/redhat-appstudio-qe/dr-test-kokohazamar-backwards-compat-dr/mathwizz-history-worker:on-pr-df41ac730f41f329e1a01653969447e03163bccb" }, { "name": "IMAGE_DIGEST", "value": "sha256:cd0e08e49e8e7aaaed8cb592347452a162620e399fc1cf9c0ef60d871f7f943c" }, { "name": "CHAINS-GIT_URL", "value": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ghatnd" }, { "name": "CHAINS-GIT_COMMIT", "value": "df41ac730f41f329e1a01653969447e03163bccb" } ], "skippedTasks": [ { "name": "build-source-image", "reason": "When Expressions evaluated to false", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "true" ] } ] } ], "spanContext": { "traceparent": "00-a5132f333dacb776f45a3ec09edabd76-4e708755eeb9c146-01" }, "startTime": "2026-05-05T12:36:13Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "appstudio.openshift.io/snapshot": "kokohazamar-backwards-compat-dr-20260505-123613-000-q7", "appstudio.openshift.io/snapshots": "kokohazamar-backwards-compat-dr-20260505-123613-000-q7", "build.appstudio.openshift.io/repo": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ghatnd?rev=54f2e3b53e40964428948e6e910f23db25eadf13", "build.appstudio.redhat.com/commit_sha": "54f2e3b53e40964428948e6e910f23db25eadf13", "build.appstudio.redhat.com/pull_request_number": "1", "build.appstudio.redhat.com/target_branch": "main", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "main", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74413537382", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-vkcxiq", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "40773614", "pipelinesascode.tekton.dev/log-url": "https://console-openshift-console.apps.rosa.kx-fe60bf3fac.sd8i.p3.openshiftapps.com/k8s/ns/dr-test-kokohazamar-backwards-compat-dr/tekton.dev~v1~PipelineRun/mathwizz-web-server-on-pull-request-zbq48", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"main\" \u0026\u0026 ( \"web-server/***\".pathChanged() || \".tekton/mathwizz-web-server-pull-request.yaml\".pathChanged() )", "pipelinesascode.tekton.dev/original-prname": "mathwizz-web-server-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "1", "pipelinesascode.tekton.dev/repo-url": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ghatnd", "pipelinesascode.tekton.dev/repository": "mathwizz-web-server", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-qe-app[bot]", "pipelinesascode.tekton.dev/sha": "54f2e3b53e40964428948e6e910f23db25eadf13", "pipelinesascode.tekton.dev/sha-title": "RHTAP-Qe-App update mathwizz-web-server", "pipelinesascode.tekton.dev/sha-url": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ghatnd/commit/54f2e3b53e40964428948e6e910f23db25eadf13", "pipelinesascode.tekton.dev/source-branch": "konflux-mathwizz-web-server", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ghatnd", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "DR-MathWizz-ghatnd", "results.tekton.dev/record": "dr-test-kokohazamar-backwards-compat-dr/results/ab7e003f-27a1-4622-aa01-c41a676a9c44/records/ab7e003f-27a1-4622-aa01-c41a676a9c44", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"DR-MathWizz-ghatnd\",\"commit\":\"54f2e3b53e40964428948e6e910f23db25eadf13\",\"eventType\":\"pull_request\",\"pull_request-id\":1}", "results.tekton.dev/result": "dr-test-kokohazamar-backwards-compat-dr/results/ab7e003f-27a1-4622-aa01-c41a676a9c44", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Sucessfully created snapshot. See annotation appstudio.openshift.io/snapshot for name\",\"status\":\"success\"}", "test.appstudio.openshift.io/pr-group": "konflux-mathwizz-web-server", "test.appstudio.openshift.io/snapshot-creation-report": "SnapshotCreated" }, "creationTimestamp": "2026-05-05T12:35:31Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "mathwizz-web-server-on-pull-request-", "generation": 2, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.43.0", "appstudio.openshift.io/application": "kokohazamar-backwards-compat-dr", "appstudio.openshift.io/component": "mathwizz-web-server", "kueue.x-k8s.io/priority-class": "konflux-pre-merge-build", "kueue.x-k8s.io/queue-name": "pipelines-queue", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74413537382", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/original-prname": "mathwizz-web-server-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "1", "pipelinesascode.tekton.dev/repository": "mathwizz-web-server", "pipelinesascode.tekton.dev/sha": "54f2e3b53e40964428948e6e910f23db25eadf13", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "DR-MathWizz-ghatnd", "tekton.dev/pipeline": "mathwizz-web-server-on-pull-request-zbq48", "test.appstudio.openshift.io/pr-group-sha": "6382b0d2d207976a29048c8e4cb1fef47a2b7ad47dc2357e9246ec817759af" }, "name": "mathwizz-web-server-on-pull-request-zbq48", "namespace": "dr-test-kokohazamar-backwards-compat-dr", "resourceVersion": "167517", "uid": "ab7e003f-27a1-4622-aa01-c41a676a9c44" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ghatnd" }, { "name": "revision", "value": "54f2e3b53e40964428948e6e910f23db25eadf13" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/dr-test-kokohazamar-backwards-compat-dr/mathwizz-web-server:on-pr-54f2e3b53e40964428948e6e910f23db25eadf13" }, { "name": "image-expires-after", "value": "6h" }, { "name": "dockerfile", "value": "Dockerfile" }, { "name": "path-context", "value": "web-server" } ], "pipelineSpec": { "description": "This pipeline is ideal for building container images from a Containerfile while maintaining trust after pipeline customization.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Build a source image.", "name": "build-source-image", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:13d49df7dc9ae301627e45f95a236011422996152f1bea46cd60217b0f057407" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:1b209c0d93e52e418f3e6cd4b4fd915a84e4bd7f68e1cfd0d6446133540d7f43" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta:0.9@sha256:681d9f65a7f50cb260ee576ccab551e11d63c549f1e1ef3d201da3c112855bd6" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-source-image", "params": [ { "name": "BINARY_IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "BINARY_IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "source-build-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:0917cfc7772e82cb8e74743c2104f43bcf2596aceafe87eec6fce69a8cac5f06" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.build-source-image)", "operator": "in", "values": [ "true" ] } ] }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clair-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:9397d3eb9f1cbebaa15e93256e0ca9eaca148baa674be72f07f4a00df63c4609" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "ecosystem-cert-preflight-checks" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:25dcef1d9270b2e03fe6710a733171f7c7208e341fc627dac3a579088f44af34" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-snyk-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:8f3ecbeaff579e41b8278f82d7fabac27845db17a8e687ea6c510c0c9aceabbb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:9f18b216ce71a66909e7cb17d9b34526c02d73cf12884ba32d1f10614f7b9f5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:c4ef47e3b4e0508572d266fb745be7e374c29dc02580328cbe9f4d472a8aca57" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:90efa582de7770d55102b74014a765cd16a25a56f2cf644b56a788c70c4dc749" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "apply-tags", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "apply-tags" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "push-dockerfile", "params": [ { "name": "IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "push-dockerfile-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:7855471abfe87de080b914f2f3ca27c59e64f6448a7c2435e51435b764494c71" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:4ceea61b0fa81bc5da05afb26d51e06e4843378d739e4d003b062d5d04cc5e90" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "build-pipeline-mathwizz-web-server" }, "timeouts": { "pipeline": "2h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-vkcxiq" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-zbq48-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-zbq48-clone-repository", "pipelineTaskName": "clone-repository" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-zbq48-prefetch-dependencies", "pipelineTaskName": "prefetch-dependencies" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-zbq48-build-container", "pipelineTaskName": "build-container" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-zbq48-build-image-index", "pipelineTaskName": "build-image-index" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "matc832deacd2f3d79ba4e20e94d1b29c81-deprecated-base-image-check", "pipelineTaskName": "deprecated-base-image-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-zbq48-clair-scan", "pipelineTaskName": "clair-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-req33960638aa1aae9c98ec04ff3d61755f", "pipelineTaskName": "ecosystem-cert-preflight-checks", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-zbq48-sast-snyk-check", "pipelineTaskName": "sast-snyk-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-zbq48-clamav-scan", "pipelineTaskName": "clamav-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-zbq48-sast-shell-check", "pipelineTaskName": "sast-shell-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-zbq48-sast-unicode-check", "pipelineTaskName": "sast-unicode-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-zbq48-apply-tags", "pipelineTaskName": "apply-tags" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-zbq48-push-dockerfile", "pipelineTaskName": "push-dockerfile" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-zbq48-rpms-signature-scan", "pipelineTaskName": "rpms-signature-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "completionTime": "2026-05-05T12:40:34Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:40:34Z", "message": "Tasks Completed: 15 (Failed: 0, Cancelled 0), Skipped: 1", "reason": "Completed", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building container images from a Containerfile while maintaining trust after pipeline customization.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Build a source image.", "name": "build-source-image", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ghatnd" }, { "name": "revision", "value": "54f2e3b53e40964428948e6e910f23db25eadf13" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/dr-test-kokohazamar-backwards-compat-dr/mathwizz-web-server:on-pr-54f2e3b53e40964428948e6e910f23db25eadf13.git" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:13d49df7dc9ae301627e45f95a236011422996152f1bea46cd60217b0f057407" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/dr-test-kokohazamar-backwards-compat-dr/mathwizz-web-server:on-pr-54f2e3b53e40964428948e6e910f23db25eadf13.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:1b209c0d93e52e418f3e6cd4b4fd915a84e4bd7f68e1cfd0d6446133540d7f43" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/dr-test-kokohazamar-backwards-compat-dr/mathwizz-web-server:on-pr-54f2e3b53e40964428948e6e910f23db25eadf13" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "web-server" }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "6h" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta:0.9@sha256:681d9f65a7f50cb260ee576ccab551e11d63c549f1e1ef3d201da3c112855bd6" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/dr-test-kokohazamar-backwards-compat-dr/mathwizz-web-server:on-pr-54f2e3b53e40964428948e6e910f23db25eadf13" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-source-image", "params": [ { "name": "BINARY_IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "BINARY_IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "source-build-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:0917cfc7772e82cb8e74743c2104f43bcf2596aceafe87eec6fce69a8cac5f06" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "true" ] } ] }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clair-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:9397d3eb9f1cbebaa15e93256e0ca9eaca148baa674be72f07f4a00df63c4609" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "ecosystem-cert-preflight-checks" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:25dcef1d9270b2e03fe6710a733171f7c7208e341fc627dac3a579088f44af34" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-snyk-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:8f3ecbeaff579e41b8278f82d7fabac27845db17a8e687ea6c510c0c9aceabbb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:9f18b216ce71a66909e7cb17d9b34526c02d73cf12884ba32d1f10614f7b9f5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:c4ef47e3b4e0508572d266fb745be7e374c29dc02580328cbe9f4d472a8aca57" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:90efa582de7770d55102b74014a765cd16a25a56f2cf644b56a788c70c4dc749" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "apply-tags", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "apply-tags" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "push-dockerfile", "params": [ { "name": "IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "web-server" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "push-dockerfile-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:7855471abfe87de080b914f2f3ca27c59e64f6448a7c2435e51435b764494c71" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:4ceea61b0fa81bc5da05afb26d51e06e4843378d739e4d003b062d5d04cc5e90" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "IMAGE_URL", "value": "quay.io/redhat-appstudio-qe/dr-test-kokohazamar-backwards-compat-dr/mathwizz-web-server:on-pr-54f2e3b53e40964428948e6e910f23db25eadf13" }, { "name": "IMAGE_DIGEST", "value": "sha256:371cb18c432279a04b653be64501a1421f593dc076b606dda4f9725f0e80e01a" }, { "name": "CHAINS-GIT_URL", "value": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ghatnd" }, { "name": "CHAINS-GIT_COMMIT", "value": "54f2e3b53e40964428948e6e910f23db25eadf13" } ], "skippedTasks": [ { "name": "build-source-image", "reason": "When Expressions evaluated to false", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "true" ] } ] } ], "spanContext": { "traceparent": "00-568fc5a47a7d6f7634b8706650b02f04-efdcc899a05c0c5b-01" }, "startTime": "2026-05-05T12:36:13Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "appstudio.openshift.io/snapshot": "moshekipod-backwards-compat-dr-20260505-123526-000", "appstudio.openshift.io/snapshots": "moshekipod-backwards-compat-dr-20260505-123526-000", "build.appstudio.openshift.io/repo": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ftuapi?rev=6b22f19fac4e377450bb5c7f503f73799d9de48a", "build.appstudio.redhat.com/commit_sha": "6b22f19fac4e377450bb5c7f503f73799d9de48a", "build.appstudio.redhat.com/pull_request_number": "2", "build.appstudio.redhat.com/target_branch": "main", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "main", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74413521363", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-fxlbmf", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "40773614", "pipelinesascode.tekton.dev/log-url": "https://console-openshift-console.apps.rosa.kx-fe60bf3fac.sd8i.p3.openshiftapps.com/k8s/ns/dr-test-moshekipod-backwards-compat-dr/tekton.dev~v1~PipelineRun/mathwizz-frontend-on-pull-request-phs6g", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"main\" \u0026\u0026 ( \"frontend/***\".pathChanged() || \".tekton/mathwizz-frontend-pull-request.yaml\".pathChanged() )", "pipelinesascode.tekton.dev/original-prname": "mathwizz-frontend-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "2", "pipelinesascode.tekton.dev/repo-url": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ftuapi", "pipelinesascode.tekton.dev/repository": "mathwizz-history-worker", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-qe-app[bot]", "pipelinesascode.tekton.dev/sha": "6b22f19fac4e377450bb5c7f503f73799d9de48a", "pipelinesascode.tekton.dev/sha-title": "RHTAP-Qe-App update mathwizz-frontend", "pipelinesascode.tekton.dev/sha-url": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ftuapi/commit/6b22f19fac4e377450bb5c7f503f73799d9de48a", "pipelinesascode.tekton.dev/source-branch": "konflux-mathwizz-frontend", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ftuapi", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "DR-MathWizz-ftuapi", "results.tekton.dev/record": "dr-test-moshekipod-backwards-compat-dr/results/6ab558e3-a65d-4545-aad0-d91924dbcd1c/records/6ab558e3-a65d-4545-aad0-d91924dbcd1c", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"DR-MathWizz-ftuapi\",\"commit\":\"6b22f19fac4e377450bb5c7f503f73799d9de48a\",\"eventType\":\"pull_request\",\"pull_request-id\":2}", "results.tekton.dev/result": "dr-test-moshekipod-backwards-compat-dr/results/6ab558e3-a65d-4545-aad0-d91924dbcd1c", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Sucessfully created snapshot. See annotation appstudio.openshift.io/snapshot for name\",\"status\":\"success\"}", "test.appstudio.openshift.io/pr-group": "konflux-mathwizz-frontend", "test.appstudio.openshift.io/snapshot-creation-report": "SnapshotCreated" }, "creationTimestamp": "2026-05-05T12:35:25Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "mathwizz-frontend-on-pull-request-", "generation": 2, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.43.0", "appstudio.openshift.io/application": "moshekipod-backwards-compat-dr", "appstudio.openshift.io/component": "mathwizz-frontend", "kueue.x-k8s.io/priority-class": "konflux-pre-merge-build", "kueue.x-k8s.io/queue-name": "pipelines-queue", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74413521363", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/original-prname": "mathwizz-frontend-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "2", "pipelinesascode.tekton.dev/repository": "mathwizz-history-worker", "pipelinesascode.tekton.dev/sha": "6b22f19fac4e377450bb5c7f503f73799d9de48a", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "DR-MathWizz-ftuapi", "tekton.dev/pipeline": "mathwizz-frontend-on-pull-request-phs6g", "test.appstudio.openshift.io/pr-group-sha": "9efa70041c6f541c0c7a03c12fd154337cfef475ab3f9cfb92dcb38958c1db" }, "name": "mathwizz-frontend-on-pull-request-phs6g", "namespace": "dr-test-moshekipod-backwards-compat-dr", "resourceVersion": "166372", "uid": "6ab558e3-a65d-4545-aad0-d91924dbcd1c" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ftuapi" }, { "name": "revision", "value": "6b22f19fac4e377450bb5c7f503f73799d9de48a" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/dr-test-moshekipod-backwards-compat-dr/mathwizz-frontend:on-pr-6b22f19fac4e377450bb5c7f503f73799d9de48a" }, { "name": "image-expires-after", "value": "6h" }, { "name": "dockerfile", "value": "Dockerfile" }, { "name": "path-context", "value": "frontend" } ], "pipelineSpec": { "description": "This pipeline is ideal for building container images from a Containerfile while maintaining trust after pipeline customization.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Build a source image.", "name": "build-source-image", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:13d49df7dc9ae301627e45f95a236011422996152f1bea46cd60217b0f057407" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:1b209c0d93e52e418f3e6cd4b4fd915a84e4bd7f68e1cfd0d6446133540d7f43" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta:0.9@sha256:681d9f65a7f50cb260ee576ccab551e11d63c549f1e1ef3d201da3c112855bd6" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-source-image", "params": [ { "name": "BINARY_IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "BINARY_IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "source-build-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:0917cfc7772e82cb8e74743c2104f43bcf2596aceafe87eec6fce69a8cac5f06" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.build-source-image)", "operator": "in", "values": [ "true" ] } ] }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clair-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:9397d3eb9f1cbebaa15e93256e0ca9eaca148baa674be72f07f4a00df63c4609" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "ecosystem-cert-preflight-checks" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:25dcef1d9270b2e03fe6710a733171f7c7208e341fc627dac3a579088f44af34" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-snyk-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:8f3ecbeaff579e41b8278f82d7fabac27845db17a8e687ea6c510c0c9aceabbb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:9f18b216ce71a66909e7cb17d9b34526c02d73cf12884ba32d1f10614f7b9f5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:c4ef47e3b4e0508572d266fb745be7e374c29dc02580328cbe9f4d472a8aca57" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:90efa582de7770d55102b74014a765cd16a25a56f2cf644b56a788c70c4dc749" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "apply-tags", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "apply-tags" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "push-dockerfile", "params": [ { "name": "IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "push-dockerfile-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:7855471abfe87de080b914f2f3ca27c59e64f6448a7c2435e51435b764494c71" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:4ceea61b0fa81bc5da05afb26d51e06e4843378d739e4d003b062d5d04cc5e90" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "build-pipeline-mathwizz-frontend" }, "timeouts": { "pipeline": "2h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-fxlbmf" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-phs6g-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-phs6g-clone-repository", "pipelineTaskName": "clone-repository" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-phs6g-prefetch-dependencies", "pipelineTaskName": "prefetch-dependencies" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-phs6g-build-container", "pipelineTaskName": "build-container" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-phs6g-build-image-index", "pipelineTaskName": "build-image-index" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mat94d9fb327c9fecc0c374d03a11833dd2-deprecated-base-image-check", "pipelineTaskName": "deprecated-base-image-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-phs6g-clair-scan", "pipelineTaskName": "clair-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-reque798757dcc1192a26cd8d0a43242a0108", "pipelineTaskName": "ecosystem-cert-preflight-checks", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-phs6g-sast-snyk-check", "pipelineTaskName": "sast-snyk-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-phs6g-clamav-scan", "pipelineTaskName": "clamav-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-phs6g-sast-shell-check", "pipelineTaskName": "sast-shell-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-phs6g-sast-unicode-check", "pipelineTaskName": "sast-unicode-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-phs6g-apply-tags", "pipelineTaskName": "apply-tags" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-phs6g-push-dockerfile", "pipelineTaskName": "push-dockerfile" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-frontend-on-pull-request-phs6g-rpms-signature-scan", "pipelineTaskName": "rpms-signature-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "completionTime": "2026-05-05T12:39:23Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:39:23Z", "message": "Tasks Completed: 15 (Failed: 0, Cancelled 0), Skipped: 1", "reason": "Completed", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building container images from a Containerfile while maintaining trust after pipeline customization.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Build a source image.", "name": "build-source-image", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ftuapi" }, { "name": "revision", "value": "6b22f19fac4e377450bb5c7f503f73799d9de48a" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/dr-test-moshekipod-backwards-compat-dr/mathwizz-frontend:on-pr-6b22f19fac4e377450bb5c7f503f73799d9de48a.git" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:13d49df7dc9ae301627e45f95a236011422996152f1bea46cd60217b0f057407" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/dr-test-moshekipod-backwards-compat-dr/mathwizz-frontend:on-pr-6b22f19fac4e377450bb5c7f503f73799d9de48a.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:1b209c0d93e52e418f3e6cd4b4fd915a84e4bd7f68e1cfd0d6446133540d7f43" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/dr-test-moshekipod-backwards-compat-dr/mathwizz-frontend:on-pr-6b22f19fac4e377450bb5c7f503f73799d9de48a" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "frontend" }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "6h" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta:0.9@sha256:681d9f65a7f50cb260ee576ccab551e11d63c549f1e1ef3d201da3c112855bd6" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/dr-test-moshekipod-backwards-compat-dr/mathwizz-frontend:on-pr-6b22f19fac4e377450bb5c7f503f73799d9de48a" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-source-image", "params": [ { "name": "BINARY_IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "BINARY_IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "source-build-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:0917cfc7772e82cb8e74743c2104f43bcf2596aceafe87eec6fce69a8cac5f06" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "true" ] } ] }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clair-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:9397d3eb9f1cbebaa15e93256e0ca9eaca148baa674be72f07f4a00df63c4609" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "ecosystem-cert-preflight-checks" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:25dcef1d9270b2e03fe6710a733171f7c7208e341fc627dac3a579088f44af34" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-snyk-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:8f3ecbeaff579e41b8278f82d7fabac27845db17a8e687ea6c510c0c9aceabbb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:9f18b216ce71a66909e7cb17d9b34526c02d73cf12884ba32d1f10614f7b9f5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:c4ef47e3b4e0508572d266fb745be7e374c29dc02580328cbe9f4d472a8aca57" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:90efa582de7770d55102b74014a765cd16a25a56f2cf644b56a788c70c4dc749" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "apply-tags", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "apply-tags" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "push-dockerfile", "params": [ { "name": "IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "frontend" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "push-dockerfile-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:7855471abfe87de080b914f2f3ca27c59e64f6448a7c2435e51435b764494c71" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:4ceea61b0fa81bc5da05afb26d51e06e4843378d739e4d003b062d5d04cc5e90" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "IMAGE_URL", "value": "quay.io/redhat-appstudio-qe/dr-test-moshekipod-backwards-compat-dr/mathwizz-frontend:on-pr-6b22f19fac4e377450bb5c7f503f73799d9de48a" }, { "name": "IMAGE_DIGEST", "value": "sha256:177dd475f7095dc263f502aec0a2ee57e8d358fe85cdbc1d7dd772e948dadbdf" }, { "name": "CHAINS-GIT_URL", "value": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ftuapi" }, { "name": "CHAINS-GIT_COMMIT", "value": "6b22f19fac4e377450bb5c7f503f73799d9de48a" } ], "skippedTasks": [ { "name": "build-source-image", "reason": "When Expressions evaluated to false", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "true" ] } ] } ], "spanContext": { "traceparent": "00-157edb368391992a35e237bc70846396-56a4f938ddf38188-01" }, "startTime": "2026-05-05T12:35:26Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "appstudio.openshift.io/snapshot": "moshekipod-backwards-compat-dr-20260505-123519-000", "appstudio.openshift.io/snapshots": "moshekipod-backwards-compat-dr-20260505-123519-000", "build.appstudio.openshift.io/repo": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ftuapi?rev=f0270a52b6fcd0ab89275a62484c77b1216509e6", "build.appstudio.redhat.com/commit_sha": "f0270a52b6fcd0ab89275a62484c77b1216509e6", "build.appstudio.redhat.com/pull_request_number": "1", "build.appstudio.redhat.com/target_branch": "main", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "main", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74413502953", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-btbbab", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "40773614", "pipelinesascode.tekton.dev/log-url": "https://console-openshift-console.apps.rosa.kx-fe60bf3fac.sd8i.p3.openshiftapps.com/k8s/ns/dr-test-moshekipod-backwards-compat-dr/tekton.dev~v1~PipelineRun/mathwizz-history-worker-on-pull-request-7r6kd", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"main\" \u0026\u0026 ( \"history-worker/***\".pathChanged() || \".tekton/mathwizz-history-worker-pull-request.yaml\".pathChanged() )", "pipelinesascode.tekton.dev/original-prname": "mathwizz-history-worker-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "1", "pipelinesascode.tekton.dev/repo-url": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ftuapi", "pipelinesascode.tekton.dev/repository": "mathwizz-history-worker", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-qe-app[bot]", "pipelinesascode.tekton.dev/sha": "f0270a52b6fcd0ab89275a62484c77b1216509e6", "pipelinesascode.tekton.dev/sha-title": "RHTAP-Qe-App update mathwizz-history-worker", "pipelinesascode.tekton.dev/sha-url": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ftuapi/commit/f0270a52b6fcd0ab89275a62484c77b1216509e6", "pipelinesascode.tekton.dev/source-branch": "konflux-mathwizz-history-worker", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ftuapi", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "DR-MathWizz-ftuapi", "results.tekton.dev/record": "dr-test-moshekipod-backwards-compat-dr/results/86daa324-a32b-4c46-9869-d29f6e2d9951/records/86daa324-a32b-4c46-9869-d29f6e2d9951", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"DR-MathWizz-ftuapi\",\"commit\":\"f0270a52b6fcd0ab89275a62484c77b1216509e6\",\"eventType\":\"pull_request\",\"pull_request-id\":1}", "results.tekton.dev/result": "dr-test-moshekipod-backwards-compat-dr/results/86daa324-a32b-4c46-9869-d29f6e2d9951", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Sucessfully created snapshot. See annotation appstudio.openshift.io/snapshot for name\",\"status\":\"success\"}", "test.appstudio.openshift.io/pr-group": "konflux-mathwizz-history-worker", "test.appstudio.openshift.io/snapshot-creation-report": "SnapshotCreated" }, "creationTimestamp": "2026-05-05T12:35:18Z", "finalizers": [ "results.tekton.dev/pipelinerun", "chains.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "mathwizz-history-worker-on-pull-request-", "generation": 2, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.43.0", "appstudio.openshift.io/application": "moshekipod-backwards-compat-dr", "appstudio.openshift.io/component": "mathwizz-history-worker", "kueue.x-k8s.io/priority-class": "konflux-pre-merge-build", "kueue.x-k8s.io/queue-name": "pipelines-queue", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74413502953", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/original-prname": "mathwizz-history-worker-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "1", "pipelinesascode.tekton.dev/repository": "mathwizz-history-worker", "pipelinesascode.tekton.dev/sha": "f0270a52b6fcd0ab89275a62484c77b1216509e6", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "DR-MathWizz-ftuapi", "tekton.dev/pipeline": "mathwizz-history-worker-on-pull-request-7r6kd", "test.appstudio.openshift.io/pr-group-sha": "178ea6b5ef5d94a3022ad53d265c2f9b1bc2b70874f6a72251339a21796c17" }, "name": "mathwizz-history-worker-on-pull-request-7r6kd", "namespace": "dr-test-moshekipod-backwards-compat-dr", "resourceVersion": "166222", "uid": "86daa324-a32b-4c46-9869-d29f6e2d9951" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ftuapi" }, { "name": "revision", "value": "f0270a52b6fcd0ab89275a62484c77b1216509e6" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/dr-test-moshekipod-backwards-compat-dr/mathwizz-history-worker:on-pr-f0270a52b6fcd0ab89275a62484c77b1216509e6" }, { "name": "image-expires-after", "value": "6h" }, { "name": "dockerfile", "value": "Dockerfile" }, { "name": "path-context", "value": "history-worker" } ], "pipelineSpec": { "description": "This pipeline is ideal for building container images from a Containerfile while maintaining trust after pipeline customization.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Build a source image.", "name": "build-source-image", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:13d49df7dc9ae301627e45f95a236011422996152f1bea46cd60217b0f057407" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:1b209c0d93e52e418f3e6cd4b4fd915a84e4bd7f68e1cfd0d6446133540d7f43" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta:0.9@sha256:681d9f65a7f50cb260ee576ccab551e11d63c549f1e1ef3d201da3c112855bd6" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-source-image", "params": [ { "name": "BINARY_IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "BINARY_IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "source-build-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:0917cfc7772e82cb8e74743c2104f43bcf2596aceafe87eec6fce69a8cac5f06" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.build-source-image)", "operator": "in", "values": [ "true" ] } ] }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clair-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:9397d3eb9f1cbebaa15e93256e0ca9eaca148baa674be72f07f4a00df63c4609" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "ecosystem-cert-preflight-checks" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:25dcef1d9270b2e03fe6710a733171f7c7208e341fc627dac3a579088f44af34" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-snyk-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:8f3ecbeaff579e41b8278f82d7fabac27845db17a8e687ea6c510c0c9aceabbb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:9f18b216ce71a66909e7cb17d9b34526c02d73cf12884ba32d1f10614f7b9f5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:c4ef47e3b4e0508572d266fb745be7e374c29dc02580328cbe9f4d472a8aca57" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:90efa582de7770d55102b74014a765cd16a25a56f2cf644b56a788c70c4dc749" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "apply-tags", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "apply-tags" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "push-dockerfile", "params": [ { "name": "IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "push-dockerfile-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:7855471abfe87de080b914f2f3ca27c59e64f6448a7c2435e51435b764494c71" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:4ceea61b0fa81bc5da05afb26d51e06e4843378d739e4d003b062d5d04cc5e90" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "build-pipeline-mathwizz-history-worker" }, "timeouts": { "pipeline": "2h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-btbbab" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-history-worker-on-pull-request-7r6kd-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-history-worker-on-pull-request-7r6kd-clone-repository", "pipelineTaskName": "clone-repository" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-aa27e5bc69e21489ce6a70c0d4a74fd9-prefetch-dependencies", "pipelineTaskName": "prefetch-dependencies" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-history-worker-on-pull-request-7r6kd-build-container", "pipelineTaskName": "build-container" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-history-worker-on-pull-request-7r6kd-build-image-index", "pipelineTaskName": "build-image-index" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mataa27e5bc69e21489ce6a70c0d4a74fd9-deprecated-base-image-check", "pipelineTaskName": "deprecated-base-image-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-history-worker-on-pull-request-7r6kd-clair-scan", "pipelineTaskName": "clair-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-history-worker-on-pull44a36d69fa9cdbd8ed9218eea0330d28", "pipelineTaskName": "ecosystem-cert-preflight-checks", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-history-worker-on-pull-request-7r6kd-sast-snyk-check", "pipelineTaskName": "sast-snyk-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-history-worker-on-pull-request-7r6kd-clamav-scan", "pipelineTaskName": "clamav-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-history-worker-on-pull-request-7r6kd-sast-shell-check", "pipelineTaskName": "sast-shell-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-hisaa27e5bc69e21489ce6a70c0d4a74fd9-sast-unicode-check", "pipelineTaskName": "sast-unicode-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-history-worker-on-pull-request-7r6kd-apply-tags", "pipelineTaskName": "apply-tags" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-history-worker-on-pull-request-7r6kd-push-dockerfile", "pipelineTaskName": "push-dockerfile" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-hiaa27e5bc69e21489ce6a70c0d4a74fd9-rpms-signature-scan", "pipelineTaskName": "rpms-signature-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "completionTime": "2026-05-05T12:39:12Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:39:12Z", "message": "Tasks Completed: 15 (Failed: 0, Cancelled 0), Skipped: 1", "reason": "Completed", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building container images from a Containerfile while maintaining trust after pipeline customization.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Build a source image.", "name": "build-source-image", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ftuapi" }, { "name": "revision", "value": "f0270a52b6fcd0ab89275a62484c77b1216509e6" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/dr-test-moshekipod-backwards-compat-dr/mathwizz-history-worker:on-pr-f0270a52b6fcd0ab89275a62484c77b1216509e6.git" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:13d49df7dc9ae301627e45f95a236011422996152f1bea46cd60217b0f057407" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/dr-test-moshekipod-backwards-compat-dr/mathwizz-history-worker:on-pr-f0270a52b6fcd0ab89275a62484c77b1216509e6.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:1b209c0d93e52e418f3e6cd4b4fd915a84e4bd7f68e1cfd0d6446133540d7f43" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/dr-test-moshekipod-backwards-compat-dr/mathwizz-history-worker:on-pr-f0270a52b6fcd0ab89275a62484c77b1216509e6" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "history-worker" }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "6h" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta:0.9@sha256:681d9f65a7f50cb260ee576ccab551e11d63c549f1e1ef3d201da3c112855bd6" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/dr-test-moshekipod-backwards-compat-dr/mathwizz-history-worker:on-pr-f0270a52b6fcd0ab89275a62484c77b1216509e6" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-source-image", "params": [ { "name": "BINARY_IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "BINARY_IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "source-build-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:0917cfc7772e82cb8e74743c2104f43bcf2596aceafe87eec6fce69a8cac5f06" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "true" ] } ] }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clair-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:9397d3eb9f1cbebaa15e93256e0ca9eaca148baa674be72f07f4a00df63c4609" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "ecosystem-cert-preflight-checks" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:25dcef1d9270b2e03fe6710a733171f7c7208e341fc627dac3a579088f44af34" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-snyk-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:8f3ecbeaff579e41b8278f82d7fabac27845db17a8e687ea6c510c0c9aceabbb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:9f18b216ce71a66909e7cb17d9b34526c02d73cf12884ba32d1f10614f7b9f5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:c4ef47e3b4e0508572d266fb745be7e374c29dc02580328cbe9f4d472a8aca57" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:90efa582de7770d55102b74014a765cd16a25a56f2cf644b56a788c70c4dc749" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "apply-tags", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "apply-tags" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "push-dockerfile", "params": [ { "name": "IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "history-worker" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "push-dockerfile-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:7855471abfe87de080b914f2f3ca27c59e64f6448a7c2435e51435b764494c71" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:4ceea61b0fa81bc5da05afb26d51e06e4843378d739e4d003b062d5d04cc5e90" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "IMAGE_URL", "value": "quay.io/redhat-appstudio-qe/dr-test-moshekipod-backwards-compat-dr/mathwizz-history-worker:on-pr-f0270a52b6fcd0ab89275a62484c77b1216509e6" }, { "name": "IMAGE_DIGEST", "value": "sha256:63ba3d60b63f281affac2d284a885fda6bd26bf67ef0b57d16ea261c5d8641c9" }, { "name": "CHAINS-GIT_URL", "value": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ftuapi" }, { "name": "CHAINS-GIT_COMMIT", "value": "f0270a52b6fcd0ab89275a62484c77b1216509e6" } ], "skippedTasks": [ { "name": "build-source-image", "reason": "When Expressions evaluated to false", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "true" ] } ] } ], "spanContext": { "traceparent": "00-40715de8f7fb3eaf648c0f3ca22fe666-1ac844aae2cbfcc1-01" }, "startTime": "2026-05-05T12:35:19Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "appstudio.openshift.io/snapshot": "moshekipod-backwards-compat-dr-20260505-123613-000", "appstudio.openshift.io/snapshots": "moshekipod-backwards-compat-dr-20260505-123613-000", "build.appstudio.openshift.io/repo": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ftuapi?rev=372fe5811f6556b5ebebb56a92fffc6df5ba7f26", "build.appstudio.redhat.com/commit_sha": "372fe5811f6556b5ebebb56a92fffc6df5ba7f26", "build.appstudio.redhat.com/pull_request_number": "3", "build.appstudio.redhat.com/target_branch": "main", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "main", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74413582296", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-futzft", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "40773614", "pipelinesascode.tekton.dev/log-url": "https://console-openshift-console.apps.rosa.kx-fe60bf3fac.sd8i.p3.openshiftapps.com/k8s/ns/dr-test-moshekipod-backwards-compat-dr/tekton.dev~v1~PipelineRun/mathwizz-web-server-on-pull-request-vcrps", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"main\" \u0026\u0026 ( \"web-server/***\".pathChanged() || \".tekton/mathwizz-web-server-pull-request.yaml\".pathChanged() )", "pipelinesascode.tekton.dev/original-prname": "mathwizz-web-server-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "3", "pipelinesascode.tekton.dev/repo-url": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ftuapi", "pipelinesascode.tekton.dev/repository": "mathwizz-history-worker", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-qe-app[bot]", "pipelinesascode.tekton.dev/sha": "372fe5811f6556b5ebebb56a92fffc6df5ba7f26", "pipelinesascode.tekton.dev/sha-title": "RHTAP-Qe-App update mathwizz-web-server", "pipelinesascode.tekton.dev/sha-url": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ftuapi/commit/372fe5811f6556b5ebebb56a92fffc6df5ba7f26", "pipelinesascode.tekton.dev/source-branch": "konflux-mathwizz-web-server", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ftuapi", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "DR-MathWizz-ftuapi", "results.tekton.dev/record": "dr-test-moshekipod-backwards-compat-dr/results/bcaddc81-833b-44be-a4e7-bc4cf0d7230d/records/bcaddc81-833b-44be-a4e7-bc4cf0d7230d", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"DR-MathWizz-ftuapi\",\"commit\":\"372fe5811f6556b5ebebb56a92fffc6df5ba7f26\",\"eventType\":\"pull_request\",\"pull_request-id\":3}", "results.tekton.dev/result": "dr-test-moshekipod-backwards-compat-dr/results/bcaddc81-833b-44be-a4e7-bc4cf0d7230d", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Sucessfully created snapshot. See annotation appstudio.openshift.io/snapshot for name\",\"status\":\"success\"}", "test.appstudio.openshift.io/pr-group": "konflux-mathwizz-web-server", "test.appstudio.openshift.io/snapshot-creation-report": "SnapshotCreated" }, "creationTimestamp": "2026-05-05T12:35:47Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "mathwizz-web-server-on-pull-request-", "generation": 2, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.43.0", "appstudio.openshift.io/application": "moshekipod-backwards-compat-dr", "appstudio.openshift.io/component": "mathwizz-web-server", "kueue.x-k8s.io/priority-class": "konflux-pre-merge-build", "kueue.x-k8s.io/queue-name": "pipelines-queue", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74413582296", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/original-prname": "mathwizz-web-server-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "3", "pipelinesascode.tekton.dev/repository": "mathwizz-history-worker", "pipelinesascode.tekton.dev/sha": "372fe5811f6556b5ebebb56a92fffc6df5ba7f26", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "DR-MathWizz-ftuapi", "tekton.dev/pipeline": "mathwizz-web-server-on-pull-request-vcrps", "test.appstudio.openshift.io/pr-group-sha": "6382b0d2d207976a29048c8e4cb1fef47a2b7ad47dc2357e9246ec817759af" }, "name": "mathwizz-web-server-on-pull-request-vcrps", "namespace": "dr-test-moshekipod-backwards-compat-dr", "resourceVersion": "167049", "uid": "bcaddc81-833b-44be-a4e7-bc4cf0d7230d" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ftuapi" }, { "name": "revision", "value": "372fe5811f6556b5ebebb56a92fffc6df5ba7f26" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/dr-test-moshekipod-backwards-compat-dr/mathwizz-web-server:on-pr-372fe5811f6556b5ebebb56a92fffc6df5ba7f26" }, { "name": "image-expires-after", "value": "6h" }, { "name": "dockerfile", "value": "Dockerfile" }, { "name": "path-context", "value": "web-server" } ], "pipelineSpec": { "description": "This pipeline is ideal for building container images from a Containerfile while maintaining trust after pipeline customization.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Build a source image.", "name": "build-source-image", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:13d49df7dc9ae301627e45f95a236011422996152f1bea46cd60217b0f057407" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:1b209c0d93e52e418f3e6cd4b4fd915a84e4bd7f68e1cfd0d6446133540d7f43" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta:0.9@sha256:681d9f65a7f50cb260ee576ccab551e11d63c549f1e1ef3d201da3c112855bd6" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-source-image", "params": [ { "name": "BINARY_IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "BINARY_IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "source-build-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:0917cfc7772e82cb8e74743c2104f43bcf2596aceafe87eec6fce69a8cac5f06" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.build-source-image)", "operator": "in", "values": [ "true" ] } ] }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clair-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:9397d3eb9f1cbebaa15e93256e0ca9eaca148baa674be72f07f4a00df63c4609" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "ecosystem-cert-preflight-checks" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:25dcef1d9270b2e03fe6710a733171f7c7208e341fc627dac3a579088f44af34" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-snyk-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:8f3ecbeaff579e41b8278f82d7fabac27845db17a8e687ea6c510c0c9aceabbb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:9f18b216ce71a66909e7cb17d9b34526c02d73cf12884ba32d1f10614f7b9f5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:c4ef47e3b4e0508572d266fb745be7e374c29dc02580328cbe9f4d472a8aca57" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:90efa582de7770d55102b74014a765cd16a25a56f2cf644b56a788c70c4dc749" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "apply-tags", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "apply-tags" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "push-dockerfile", "params": [ { "name": "IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "push-dockerfile-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:7855471abfe87de080b914f2f3ca27c59e64f6448a7c2435e51435b764494c71" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:4ceea61b0fa81bc5da05afb26d51e06e4843378d739e4d003b062d5d04cc5e90" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "build-pipeline-mathwizz-web-server" }, "timeouts": { "pipeline": "2h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-futzft" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-vcrps-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-vcrps-clone-repository", "pipelineTaskName": "clone-repository" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-vcrps-prefetch-dependencies", "pipelineTaskName": "prefetch-dependencies" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-vcrps-build-container", "pipelineTaskName": "build-container" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-vcrps-build-image-index", "pipelineTaskName": "build-image-index" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mat9710e57e7e850cda14b6062ceb629d58-deprecated-base-image-check", "pipelineTaskName": "deprecated-base-image-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-vcrps-clair-scan", "pipelineTaskName": "clair-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-reqdba2f5e09bc1bdd6ca03acb2c1557d8a", "pipelineTaskName": "ecosystem-cert-preflight-checks", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-vcrps-sast-snyk-check", "pipelineTaskName": "sast-snyk-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-vcrps-clamav-scan", "pipelineTaskName": "clamav-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-vcrps-sast-shell-check", "pipelineTaskName": "sast-shell-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-vcrps-sast-unicode-check", "pipelineTaskName": "sast-unicode-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-vcrps-apply-tags", "pipelineTaskName": "apply-tags" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-vcrps-push-dockerfile", "pipelineTaskName": "push-dockerfile" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "mathwizz-web-server-on-pull-request-vcrps-rpms-signature-scan", "pipelineTaskName": "rpms-signature-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "completionTime": "2026-05-05T12:40:08Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:40:08Z", "message": "Tasks Completed: 15 (Failed: 0, Cancelled 0), Skipped: 1", "reason": "Completed", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building container images from a Containerfile while maintaining trust after pipeline customization.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Build a source image.", "name": "build-source-image", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ftuapi" }, { "name": "revision", "value": "372fe5811f6556b5ebebb56a92fffc6df5ba7f26" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/dr-test-moshekipod-backwards-compat-dr/mathwizz-web-server:on-pr-372fe5811f6556b5ebebb56a92fffc6df5ba7f26.git" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:13d49df7dc9ae301627e45f95a236011422996152f1bea46cd60217b0f057407" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/redhat-appstudio-qe/dr-test-moshekipod-backwards-compat-dr/mathwizz-web-server:on-pr-372fe5811f6556b5ebebb56a92fffc6df5ba7f26.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "6h" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:1b209c0d93e52e418f3e6cd4b4fd915a84e4bd7f68e1cfd0d6446133540d7f43" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/dr-test-moshekipod-backwards-compat-dr/mathwizz-web-server:on-pr-372fe5811f6556b5ebebb56a92fffc6df5ba7f26" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "web-server" }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "6h" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta:0.9@sha256:681d9f65a7f50cb260ee576ccab551e11d63c549f1e1ef3d201da3c112855bd6" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/dr-test-moshekipod-backwards-compat-dr/mathwizz-web-server:on-pr-372fe5811f6556b5ebebb56a92fffc6df5ba7f26" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-source-image", "params": [ { "name": "BINARY_IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "BINARY_IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "source-build-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:0917cfc7772e82cb8e74743c2104f43bcf2596aceafe87eec6fce69a8cac5f06" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "true" ] } ] }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clair-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:9397d3eb9f1cbebaa15e93256e0ca9eaca148baa674be72f07f4a00df63c4609" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "ecosystem-cert-preflight-checks" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:25dcef1d9270b2e03fe6710a733171f7c7208e341fc627dac3a579088f44af34" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-snyk-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:8f3ecbeaff579e41b8278f82d7fabac27845db17a8e687ea6c510c0c9aceabbb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:9f18b216ce71a66909e7cb17d9b34526c02d73cf12884ba32d1f10614f7b9f5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:c4ef47e3b4e0508572d266fb745be7e374c29dc02580328cbe9f4d472a8aca57" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:90efa582de7770d55102b74014a765cd16a25a56f2cf644b56a788c70c4dc749" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "apply-tags", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "apply-tags" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "push-dockerfile", "params": [ { "name": "IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "web-server" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "push-dockerfile-oci-ta" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:7855471abfe87de080b914f2f3ca27c59e64f6448a7c2435e51435b764494c71" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:4ceea61b0fa81bc5da05afb26d51e06e4843378d739e4d003b062d5d04cc5e90" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "IMAGE_URL", "value": "quay.io/redhat-appstudio-qe/dr-test-moshekipod-backwards-compat-dr/mathwizz-web-server:on-pr-372fe5811f6556b5ebebb56a92fffc6df5ba7f26" }, { "name": "IMAGE_DIGEST", "value": "sha256:22339e65a9fd6b067747b5f2d26fbf618167624f4b56ae92b6c76250f84a7ad1" }, { "name": "CHAINS-GIT_URL", "value": "https://github.com/redhat-appstudio-qe/DR-MathWizz-ftuapi" }, { "name": "CHAINS-GIT_COMMIT", "value": "372fe5811f6556b5ebebb56a92fffc6df5ba7f26" } ], "skippedTasks": [ { "name": "build-source-image", "reason": "When Expressions evaluated to false", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "true" ] } ] } ], "spanContext": { "traceparent": "00-626396d4e12ffc5e1e7a1dc51f5a65b6-e37b10b222e2d766-01" }, "startTime": "2026-05-05T12:36:13Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "kueue.konflux-ci.dev/requests-mintmaker": "1", "results.tekton.dev/record": "mintmaker/results/54f63eb4-be57-4cbb-b1e4-b84035c8aefa/records/54f63eb4-be57-4cbb-b1e4-b84035c8aefa", "results.tekton.dev/result": "mintmaker/results/54f63eb4-be57-4cbb-b1e4-b84035c8aefa" }, "creationTimestamp": "2026-05-05T12:00:15Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun" ], "generation": 2, "labels": { "kueue.x-k8s.io/priority-class": "konflux-dependency-update", "kueue.x-k8s.io/queue-name": "pipelines-queue", "mintmaker.appstudio.redhat.com/application": "test-app-eldn", "mintmaker.appstudio.redhat.com/branch": "base-vmfibs", "mintmaker.appstudio.redhat.com/component": "test-comp-mqfs", "mintmaker.appstudio.redhat.com/git-host": "github.com", "mintmaker.appstudio.redhat.com/git-platform": "github", "mintmaker.appstudio.redhat.com/namespace": "build-e2e-gdsz", "mintmaker.appstudio.redhat.com/repo-branch-hash": "e4e28ffd451b", "mintmaker.appstudio.redhat.com/repository": "redhat-appstudio-qe_devfile-sample-python-basic", "tekton.dev/pipeline": "renovate-05051200-3b24fa54" }, "name": "renovate-05051200-3b24fa54", "namespace": "mintmaker", "resourceVersion": "111597", "uid": "54f63eb4-be57-4cbb-b1e4-b84035c8aefa" }, "spec": { "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-3b24fa54", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-3b24fa54-e04b4c47", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-3b24fa54", "optional": false }, "name": "configmap-renovate-05051200-3b24fa54" }, { "name": "secret-renovate-05051200-3b24fa54-e04b4c47", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-3b24fa54" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "mintmaker-controller-manager" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "emptyDir": {}, "name": "shared-data" } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "renovate-05051200-3b24fa54-build", "pipelineTaskName": "build" } ], "completionTime": "2026-05-05T12:02:11Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:02:11Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 0", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-3b24fa54", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-3b24fa54-e04b4c47", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-3b24fa54", "optional": false }, "name": "configmap-renovate-05051200-3b24fa54" }, { "name": "secret-renovate-05051200-3b24fa54-e04b4c47", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-3b24fa54" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "spanContext": { "traceparent": "00-7159f846ae1e884cba997d39c48b08a7-1db610457e507346-01" }, "startTime": "2026-05-05T12:00:15Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "kueue.konflux-ci.dev/requests-mintmaker": "1", "results.tekton.dev/record": "mintmaker/results/f6de1810-e5d0-498c-8d64-79a60ae40c59/records/f6de1810-e5d0-498c-8d64-79a60ae40c59", "results.tekton.dev/result": "mintmaker/results/f6de1810-e5d0-498c-8d64-79a60ae40c59" }, "creationTimestamp": "2026-05-05T12:00:22Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun" ], "generation": 2, "labels": { "kueue.x-k8s.io/priority-class": "konflux-dependency-update", "kueue.x-k8s.io/queue-name": "pipelines-queue", "mintmaker.appstudio.redhat.com/application": "build-suite-component-update-kixx", "mintmaker.appstudio.redhat.com/branch": "multi-component-parent-base-gtah", "mintmaker.appstudio.redhat.com/component": "gl-multi-component-parent-gtah", "mintmaker.appstudio.redhat.com/git-host": "gitlab.com", "mintmaker.appstudio.redhat.com/git-platform": "gitlab", "mintmaker.appstudio.redhat.com/namespace": "build-e2e-xyii", "mintmaker.appstudio.redhat.com/repo-branch-hash": "ca920fa2a454", "mintmaker.appstudio.redhat.com/repository": "konflux-qe_build-nudge-parent-iobonh", "tekton.dev/pipeline": "renovate-05051200-45ea178b" }, "name": "renovate-05051200-45ea178b", "namespace": "mintmaker", "resourceVersion": "112292", "uid": "f6de1810-e5d0-498c-8d64-79a60ae40c59" }, "spec": { "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-45ea178b", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-45ea178b-8b3afbf7", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-45ea178b", "optional": false }, "name": "configmap-renovate-05051200-45ea178b" }, { "name": "secret-renovate-05051200-45ea178b-8b3afbf7", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-45ea178b" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "mintmaker-controller-manager" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "emptyDir": {}, "name": "shared-data" } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "renovate-05051200-45ea178b-build", "pipelineTaskName": "build" } ], "completionTime": "2026-05-05T12:03:00Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:03:00Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 0", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-45ea178b", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-45ea178b-8b3afbf7", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-45ea178b", "optional": false }, "name": "configmap-renovate-05051200-45ea178b" }, { "name": "secret-renovate-05051200-45ea178b-8b3afbf7", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-45ea178b" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "spanContext": { "traceparent": "00-b2b2b540f35efe42c9f38afce0e9a09f-85b142b86a8c96aa-01" }, "startTime": "2026-05-05T12:00:23Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "kueue.konflux-ci.dev/requests-mintmaker": "1", "results.tekton.dev/record": "mintmaker/results/ad7b2132-7d1c-4962-a966-46b340c4a2eb/records/ad7b2132-7d1c-4962-a966-46b340c4a2eb", "results.tekton.dev/result": "mintmaker/results/ad7b2132-7d1c-4962-a966-46b340c4a2eb" }, "creationTimestamp": "2026-05-05T12:00:16Z", "finalizers": [ "results.tekton.dev/pipelinerun", "chains.tekton.dev/pipelinerun" ], "generation": 2, "labels": { "kueue.x-k8s.io/priority-class": "konflux-dependency-update", "kueue.x-k8s.io/queue-name": "pipelines-queue", "mintmaker.appstudio.redhat.com/application": "build-suite-component-update-zbvc", "mintmaker.appstudio.redhat.com/branch": "multi-component-parent-base-iqog", "mintmaker.appstudio.redhat.com/component": "gh-multi-component-parent-iqog", "mintmaker.appstudio.redhat.com/git-host": "github.com", "mintmaker.appstudio.redhat.com/git-platform": "github", "mintmaker.appstudio.redhat.com/namespace": "build-e2e-klql", "mintmaker.appstudio.redhat.com/repo-branch-hash": "6354f0531313", "mintmaker.appstudio.redhat.com/repository": "redhat-appstudio-qe_build-nudge-parent-nygugf", "tekton.dev/pipeline": "renovate-05051200-49c1e9e8" }, "name": "renovate-05051200-49c1e9e8", "namespace": "mintmaker", "resourceVersion": "112455", "uid": "ad7b2132-7d1c-4962-a966-46b340c4a2eb" }, "spec": { "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-49c1e9e8", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-49c1e9e8-30c67196", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-49c1e9e8", "optional": false }, "name": "configmap-renovate-05051200-49c1e9e8" }, { "name": "secret-renovate-05051200-49c1e9e8-30c67196", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-49c1e9e8" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "mintmaker-controller-manager" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "emptyDir": {}, "name": "shared-data" } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "renovate-05051200-49c1e9e8-build", "pipelineTaskName": "build" } ], "completionTime": "2026-05-05T12:03:04Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:03:04Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 0", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-49c1e9e8", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-49c1e9e8-30c67196", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-49c1e9e8", "optional": false }, "name": "configmap-renovate-05051200-49c1e9e8" }, { "name": "secret-renovate-05051200-49c1e9e8-30c67196", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-49c1e9e8" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "spanContext": { "traceparent": "00-c5f58e3b172cec151f882e5993e0680b-f98b3deef77cf6c6-01" }, "startTime": "2026-05-05T12:00:17Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "kueue.konflux-ci.dev/requests-mintmaker": "1", "results.tekton.dev/record": "mintmaker/results/6142e514-6556-425c-a91b-2c60c066df70/records/6142e514-6556-425c-a91b-2c60c066df70", "results.tekton.dev/result": "mintmaker/results/6142e514-6556-425c-a91b-2c60c066df70" }, "creationTimestamp": "2026-05-05T12:00:18Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun" ], "generation": 2, "labels": { "kueue.x-k8s.io/priority-class": "konflux-dependency-update", "kueue.x-k8s.io/queue-name": "pipelines-queue", "mintmaker.appstudio.redhat.com/application": "build-suite-positive-mc-zzkl", "mintmaker.appstudio.redhat.com/branch": "multi-component-base-ogojzn", "mintmaker.appstudio.redhat.com/component": "go-component-xahymx", "mintmaker.appstudio.redhat.com/git-host": "github.com", "mintmaker.appstudio.redhat.com/git-platform": "github", "mintmaker.appstudio.redhat.com/namespace": "build-e2e-xsku", "mintmaker.appstudio.redhat.com/repo-branch-hash": "b131b4fa9c64", "mintmaker.appstudio.redhat.com/repository": "redhat-appstudio-qe_sample-multi-component", "tekton.dev/pipeline": "renovate-05051200-50d6db3e" }, "name": "renovate-05051200-50d6db3e", "namespace": "mintmaker", "resourceVersion": "112135", "uid": "6142e514-6556-425c-a91b-2c60c066df70" }, "spec": { "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-50d6db3e", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-50d6db3e-749cea84", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-50d6db3e", "optional": false }, "name": "configmap-renovate-05051200-50d6db3e" }, { "name": "secret-renovate-05051200-50d6db3e-749cea84", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-50d6db3e" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "mintmaker-controller-manager" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "emptyDir": {}, "name": "shared-data" } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "renovate-05051200-50d6db3e-build", "pipelineTaskName": "build" } ], "completionTime": "2026-05-05T12:02:51Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:02:51Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 0", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-50d6db3e", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-50d6db3e-749cea84", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-50d6db3e", "optional": false }, "name": "configmap-renovate-05051200-50d6db3e" }, { "name": "secret-renovate-05051200-50d6db3e-749cea84", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-50d6db3e" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "spanContext": { "traceparent": "00-7429c771f6ac79c657d4c9efa16ea1e1-8bd6287300a74996-01" }, "startTime": "2026-05-05T12:00:19Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "kueue.konflux-ci.dev/requests-mintmaker": "1", "results.tekton.dev/record": "mintmaker/results/358a97c3-67c3-4ff2-8ac6-18549bf4cf30/records/358a97c3-67c3-4ff2-8ac6-18549bf4cf30", "results.tekton.dev/result": "mintmaker/results/358a97c3-67c3-4ff2-8ac6-18549bf4cf30" }, "creationTimestamp": "2026-05-05T12:00:24Z", "finalizers": [ "results.tekton.dev/pipelinerun", "chains.tekton.dev/pipelinerun" ], "generation": 2, "labels": { "kueue.x-k8s.io/priority-class": "konflux-dependency-update", "kueue.x-k8s.io/queue-name": "pipelines-queue", "mintmaker.appstudio.redhat.com/application": "integ-app-jked", "mintmaker.appstudio.redhat.com/branch": "love-triangle-skwwyr", "mintmaker.appstudio.redhat.com/component": "konflux-test-integration-clone-ofdfle", "mintmaker.appstudio.redhat.com/git-host": "github.com", "mintmaker.appstudio.redhat.com/git-platform": "github", "mintmaker.appstudio.redhat.com/namespace": "group-esnd", "mintmaker.appstudio.redhat.com/repo-branch-hash": "1b0de5879933", "mintmaker.appstudio.redhat.com/repository": "redhat-appstudio-qe_konflux-test-integration-clone", "tekton.dev/pipeline": "renovate-05051200-56e5a0e3" }, "name": "renovate-05051200-56e5a0e3", "namespace": "mintmaker", "resourceVersion": "112355", "uid": "358a97c3-67c3-4ff2-8ac6-18549bf4cf30" }, "spec": { "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-56e5a0e3", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-56e5a0e3-6151d943", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-56e5a0e3", "optional": false }, "name": "configmap-renovate-05051200-56e5a0e3" }, { "name": "secret-renovate-05051200-56e5a0e3-6151d943", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-56e5a0e3" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "mintmaker-controller-manager" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "emptyDir": {}, "name": "shared-data" } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "renovate-05051200-56e5a0e3-build", "pipelineTaskName": "build" } ], "completionTime": "2026-05-05T12:03:02Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:03:02Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 0", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-56e5a0e3", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-56e5a0e3-6151d943", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-56e5a0e3", "optional": false }, "name": "configmap-renovate-05051200-56e5a0e3" }, { "name": "secret-renovate-05051200-56e5a0e3-6151d943", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-56e5a0e3" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "spanContext": { "traceparent": "00-35fc35026cb77f9378864055c55890bc-a60c5567c1db0d85-01" }, "startTime": "2026-05-05T12:00:24Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "kueue.konflux-ci.dev/requests-mintmaker": "1", "results.tekton.dev/record": "mintmaker/results/2df62604-6e84-493e-adcb-59e4cd755de8/records/2df62604-6e84-493e-adcb-59e4cd755de8", "results.tekton.dev/result": "mintmaker/results/2df62604-6e84-493e-adcb-59e4cd755de8" }, "creationTimestamp": "2026-05-05T12:00:16Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun" ], "generation": 2, "labels": { "kueue.x-k8s.io/priority-class": "konflux-dependency-update", "kueue.x-k8s.io/queue-name": "pipelines-queue", "mintmaker.appstudio.redhat.com/application": "build-suite-component-update-zbvc", "mintmaker.appstudio.redhat.com/branch": "multi-component-child-base-iqog", "mintmaker.appstudio.redhat.com/component": "gh-multi-component-child-iqog", "mintmaker.appstudio.redhat.com/git-host": "github.com", "mintmaker.appstudio.redhat.com/git-platform": "github", "mintmaker.appstudio.redhat.com/namespace": "build-e2e-klql", "mintmaker.appstudio.redhat.com/repo-branch-hash": "2b1077cd5847", "mintmaker.appstudio.redhat.com/repository": "redhat-appstudio-qe_build-nudge-child-nygugf", "tekton.dev/pipeline": "renovate-05051200-68843dae" }, "name": "renovate-05051200-68843dae", "namespace": "mintmaker", "resourceVersion": "111596", "uid": "2df62604-6e84-493e-adcb-59e4cd755de8" }, "spec": { "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-68843dae", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-68843dae-d4b29b0f", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-68843dae", "optional": false }, "name": "configmap-renovate-05051200-68843dae" }, { "name": "secret-renovate-05051200-68843dae-d4b29b0f", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-68843dae" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "mintmaker-controller-manager" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "emptyDir": {}, "name": "shared-data" } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "renovate-05051200-68843dae-build", "pipelineTaskName": "build" } ], "completionTime": "2026-05-05T12:02:13Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:02:13Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 0", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-68843dae", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-68843dae-d4b29b0f", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-68843dae", "optional": false }, "name": "configmap-renovate-05051200-68843dae" }, { "name": "secret-renovate-05051200-68843dae-d4b29b0f", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-68843dae" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "spanContext": { "traceparent": "00-fc2379052386035b621f7a0773d4d52c-4d6d6599b1fbc0e9-01" }, "startTime": "2026-05-05T12:00:16Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "kueue.konflux-ci.dev/requests-mintmaker": "1", "results.tekton.dev/record": "mintmaker/results/6a3853cc-5b99-4ef0-b63a-ad34165cafc6/records/6a3853cc-5b99-4ef0-b63a-ad34165cafc6", "results.tekton.dev/result": "mintmaker/results/6a3853cc-5b99-4ef0-b63a-ad34165cafc6" }, "creationTimestamp": "2026-05-05T12:00:23Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun" ], "generation": 2, "labels": { "kueue.x-k8s.io/priority-class": "konflux-dependency-update", "kueue.x-k8s.io/queue-name": "pipelines-queue", "mintmaker.appstudio.redhat.com/application": "build-suite-test-application-suyw", "mintmaker.appstudio.redhat.com/branch": "base-lytatz", "mintmaker.appstudio.redhat.com/component": "gl-test-custom-branch-kasmkh", "mintmaker.appstudio.redhat.com/git-host": "gitlab.com", "mintmaker.appstudio.redhat.com/git-platform": "gitlab", "mintmaker.appstudio.redhat.com/namespace": "build-e2e-yzla", "mintmaker.appstudio.redhat.com/repo-branch-hash": "fe6a93465965", "mintmaker.appstudio.redhat.com/repository": "konflux-qe_devfile-sample-hello-world-btikkh", "tekton.dev/pipeline": "renovate-05051200-796a1c55" }, "name": "renovate-05051200-796a1c55", "namespace": "mintmaker", "resourceVersion": "111578", "uid": "6a3853cc-5b99-4ef0-b63a-ad34165cafc6" }, "spec": { "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-796a1c55", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-796a1c55-f05582cf", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-796a1c55", "optional": false }, "name": "configmap-renovate-05051200-796a1c55" }, { "name": "secret-renovate-05051200-796a1c55-f05582cf", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-796a1c55" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "mintmaker-controller-manager" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "emptyDir": {}, "name": "shared-data" } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "renovate-05051200-796a1c55-build", "pipelineTaskName": "build" } ], "completionTime": "2026-05-05T12:02:13Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:02:13Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 0", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-796a1c55", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-796a1c55-f05582cf", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-796a1c55", "optional": false }, "name": "configmap-renovate-05051200-796a1c55" }, { "name": "secret-renovate-05051200-796a1c55-f05582cf", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-796a1c55" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "spanContext": { "traceparent": "00-ea5565961dbb76c8932a3b40ed11dace-02398671461d0c88-01" }, "startTime": "2026-05-05T12:00:23Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "kueue.konflux-ci.dev/requests-mintmaker": "1", "results.tekton.dev/record": "mintmaker/results/7b530b0c-f5a1-4482-b486-3d80286c9ebe/records/7b530b0c-f5a1-4482-b486-3d80286c9ebe", "results.tekton.dev/result": "mintmaker/results/7b530b0c-f5a1-4482-b486-3d80286c9ebe" }, "creationTimestamp": "2026-05-05T12:00:14Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun" ], "generation": 2, "labels": { "kueue.x-k8s.io/priority-class": "konflux-dependency-update", "kueue.x-k8s.io/queue-name": "pipelines-queue", "mintmaker.appstudio.redhat.com/application": "build-suite-test-application-xwbv", "mintmaker.appstudio.redhat.com/branch": "base-iwzgff", "mintmaker.appstudio.redhat.com/component": "gh-test-custom-branch-rtxqse", "mintmaker.appstudio.redhat.com/git-host": "github.com", "mintmaker.appstudio.redhat.com/git-platform": "github", "mintmaker.appstudio.redhat.com/namespace": "build-e2e-bfrb", "mintmaker.appstudio.redhat.com/repo-branch-hash": "b9fd5e9a9a8b", "mintmaker.appstudio.redhat.com/repository": "redhat-appstudio-qe_devfile-sample-hello-world-wtvejh", "tekton.dev/pipeline": "renovate-05051200-9721bad4" }, "name": "renovate-05051200-9721bad4", "namespace": "mintmaker", "resourceVersion": "112500", "uid": "7b530b0c-f5a1-4482-b486-3d80286c9ebe" }, "spec": { "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-9721bad4", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-9721bad4-2a2437d4", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-9721bad4", "optional": false }, "name": "configmap-renovate-05051200-9721bad4" }, { "name": "secret-renovate-05051200-9721bad4-2a2437d4", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-9721bad4" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "mintmaker-controller-manager" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "emptyDir": {}, "name": "shared-data" } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "renovate-05051200-9721bad4-build", "pipelineTaskName": "build" } ], "completionTime": "2026-05-05T12:03:05Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:03:05Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 0", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-9721bad4", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-9721bad4-2a2437d4", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-9721bad4", "optional": false }, "name": "configmap-renovate-05051200-9721bad4" }, { "name": "secret-renovate-05051200-9721bad4-2a2437d4", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-9721bad4" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "spanContext": { "traceparent": "00-572e86802cbb5fc3535f8552f1774035-13db4e06602ff0a6-01" }, "startTime": "2026-05-05T12:00:14Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "kueue.konflux-ci.dev/requests-mintmaker": "1", "results.tekton.dev/record": "mintmaker/results/fd23db67-75ac-45a7-a0c8-c059643a9ad2/records/fd23db67-75ac-45a7-a0c8-c059643a9ad2", "results.tekton.dev/result": "mintmaker/results/fd23db67-75ac-45a7-a0c8-c059643a9ad2" }, "creationTimestamp": "2026-05-05T12:00:23Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun" ], "generation": 2, "labels": { "kueue.x-k8s.io/priority-class": "konflux-dependency-update", "kueue.x-k8s.io/queue-name": "pipelines-queue", "mintmaker.appstudio.redhat.com/application": "integ-app-jked", "mintmaker.appstudio.redhat.com/branch": "love-triangle-skwwyr", "mintmaker.appstudio.redhat.com/component": "go-component-njvhkf", "mintmaker.appstudio.redhat.com/git-host": "github.com", "mintmaker.appstudio.redhat.com/git-platform": "github", "mintmaker.appstudio.redhat.com/namespace": "group-esnd", "mintmaker.appstudio.redhat.com/repo-branch-hash": "8e8c75992a0e", "mintmaker.appstudio.redhat.com/repository": "redhat-appstudio-qe_group-snapshot-multi-component", "tekton.dev/pipeline": "renovate-05051200-a6608485" }, "name": "renovate-05051200-a6608485", "namespace": "mintmaker", "resourceVersion": "111996", "uid": "fd23db67-75ac-45a7-a0c8-c059643a9ad2" }, "spec": { "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-a6608485", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-a6608485-d0c987da", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-a6608485", "optional": false }, "name": "configmap-renovate-05051200-a6608485" }, { "name": "secret-renovate-05051200-a6608485-d0c987da", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-a6608485" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "mintmaker-controller-manager" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "emptyDir": {}, "name": "shared-data" } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "renovate-05051200-a6608485-build", "pipelineTaskName": "build" } ], "completionTime": "2026-05-05T12:02:48Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:02:48Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 0", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-a6608485", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-a6608485-d0c987da", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-a6608485", "optional": false }, "name": "configmap-renovate-05051200-a6608485" }, { "name": "secret-renovate-05051200-a6608485-d0c987da", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-a6608485" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "spanContext": { "traceparent": "00-05d980934fa774c2224ca38a3762df3e-ca552c8e32b64a4b-01" }, "startTime": "2026-05-05T12:00:24Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "kueue.konflux-ci.dev/requests-mintmaker": "1", "results.tekton.dev/record": "mintmaker/results/f987a7d6-85ee-4d63-824b-cce79a35b3b6/records/f987a7d6-85ee-4d63-824b-cce79a35b3b6", "results.tekton.dev/result": "mintmaker/results/f987a7d6-85ee-4d63-824b-cce79a35b3b6" }, "creationTimestamp": "2026-05-05T12:00:19Z", "finalizers": [ "results.tekton.dev/pipelinerun", "chains.tekton.dev/pipelinerun" ], "generation": 2, "labels": { "kueue.x-k8s.io/priority-class": "konflux-dependency-update", "kueue.x-k8s.io/queue-name": "pipelines-queue", "mintmaker.appstudio.redhat.com/application": "build-suite-component-update-kixx", "mintmaker.appstudio.redhat.com/branch": "multi-component-child-base-gtah", "mintmaker.appstudio.redhat.com/component": "gl-multi-component-child-gtah", "mintmaker.appstudio.redhat.com/git-host": "gitlab.com", "mintmaker.appstudio.redhat.com/git-platform": "gitlab", "mintmaker.appstudio.redhat.com/namespace": "build-e2e-xyii", "mintmaker.appstudio.redhat.com/repo-branch-hash": "0dbdc0ac5ee1", "mintmaker.appstudio.redhat.com/repository": "konflux-qe_build-nudge-child-iobonh", "tekton.dev/pipeline": "renovate-05051200-e92da41b" }, "name": "renovate-05051200-e92da41b", "namespace": "mintmaker", "resourceVersion": "112137", "uid": "f987a7d6-85ee-4d63-824b-cce79a35b3b6" }, "spec": { "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-e92da41b", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-e92da41b-5d49fa73", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-e92da41b", "optional": false }, "name": "configmap-renovate-05051200-e92da41b" }, { "name": "secret-renovate-05051200-e92da41b-5d49fa73", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-e92da41b" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "mintmaker-controller-manager" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "emptyDir": {}, "name": "shared-data" } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "renovate-05051200-e92da41b-build", "pipelineTaskName": "build" } ], "completionTime": "2026-05-05T12:02:51Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:02:51Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 0", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-e92da41b", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-e92da41b-5d49fa73", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-e92da41b", "optional": false }, "name": "configmap-renovate-05051200-e92da41b" }, { "name": "secret-renovate-05051200-e92da41b-5d49fa73", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-e92da41b" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "spanContext": { "traceparent": "00-77ed141718e5590a17b729dca2296c44-bbd34ae923939038-01" }, "startTime": "2026-05-05T12:00:20Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "kueue.konflux-ci.dev/requests-mintmaker": "1", "results.tekton.dev/record": "mintmaker/results/bf6c4feb-7575-4aa8-9f7d-64ba9081001c/records/bf6c4feb-7575-4aa8-9f7d-64ba9081001c", "results.tekton.dev/result": "mintmaker/results/bf6c4feb-7575-4aa8-9f7d-64ba9081001c" }, "creationTimestamp": "2026-05-05T12:00:15Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun" ], "generation": 2, "labels": { "kueue.x-k8s.io/priority-class": "konflux-dependency-update", "kueue.x-k8s.io/queue-name": "pipelines-queue", "mintmaker.appstudio.redhat.com/application": "test-app-eldn", "mintmaker.appstudio.redhat.com/branch": "base-ngbmsz", "mintmaker.appstudio.redhat.com/component": "test-symlink-comp-wobm", "mintmaker.appstudio.redhat.com/git-host": "github.com", "mintmaker.appstudio.redhat.com/git-platform": "github", "mintmaker.appstudio.redhat.com/namespace": "build-e2e-gdsz", "mintmaker.appstudio.redhat.com/repo-branch-hash": "d65c10adde93", "mintmaker.appstudio.redhat.com/repository": "redhat-appstudio-qe_devfile-sample-python-basic", "tekton.dev/pipeline": "renovate-05051200-ea498ff8" }, "name": "renovate-05051200-ea498ff8", "namespace": "mintmaker", "resourceVersion": "112406", "uid": "bf6c4feb-7575-4aa8-9f7d-64ba9081001c" }, "spec": { "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-ea498ff8", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-ea498ff8-eee58fc9", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-ea498ff8", "optional": false }, "name": "configmap-renovate-05051200-ea498ff8" }, { "name": "secret-renovate-05051200-ea498ff8-eee58fc9", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-ea498ff8" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "mintmaker-controller-manager" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "emptyDir": {}, "name": "shared-data" } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "renovate-05051200-ea498ff8-build", "pipelineTaskName": "build" } ], "completionTime": "2026-05-05T12:03:03Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:03:03Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 0", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-ea498ff8", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-ea498ff8-eee58fc9", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-ea498ff8", "optional": false }, "name": "configmap-renovate-05051200-ea498ff8" }, { "name": "secret-renovate-05051200-ea498ff8-eee58fc9", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-ea498ff8" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "spanContext": { "traceparent": "00-28f3bb4193742e0445731d6b34c2e88e-0ad5bedd63b8adbd-01" }, "startTime": "2026-05-05T12:00:16Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "kueue.konflux-ci.dev/requests-mintmaker": "1", "results.tekton.dev/record": "mintmaker/results/56d0bcda-e254-4ad2-bc7e-b171435cf5f5/records/56d0bcda-e254-4ad2-bc7e-b171435cf5f5", "results.tekton.dev/result": "mintmaker/results/56d0bcda-e254-4ad2-bc7e-b171435cf5f5" }, "creationTimestamp": "2026-05-05T12:00:15Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun" ], "generation": 2, "labels": { "kueue.x-k8s.io/priority-class": "konflux-dependency-update", "kueue.x-k8s.io/queue-name": "pipelines-queue", "mintmaker.appstudio.redhat.com/application": "test-app-eldn", "mintmaker.appstudio.redhat.com/branch": "base-bhvejb", "mintmaker.appstudio.redhat.com/component": "test-comp-yzye", "mintmaker.appstudio.redhat.com/git-host": "github.com", "mintmaker.appstudio.redhat.com/git-platform": "github", "mintmaker.appstudio.redhat.com/namespace": "build-e2e-gdsz", "mintmaker.appstudio.redhat.com/repo-branch-hash": "10ae3361b815", "mintmaker.appstudio.redhat.com/repository": "redhat-appstudio-qe_devfile-sample-python-basic", "tekton.dev/pipeline": "renovate-05051200-ee0e8a61" }, "name": "renovate-05051200-ee0e8a61", "namespace": "mintmaker", "resourceVersion": "112407", "uid": "56d0bcda-e254-4ad2-bc7e-b171435cf5f5" }, "spec": { "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-ee0e8a61", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-ee0e8a61-4ca8573e", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-ee0e8a61", "optional": false }, "name": "configmap-renovate-05051200-ee0e8a61" }, { "name": "secret-renovate-05051200-ee0e8a61-4ca8573e", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-ee0e8a61" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "mintmaker-controller-manager" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "emptyDir": {}, "name": "shared-data" } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "renovate-05051200-ee0e8a61-build", "pipelineTaskName": "build" } ], "completionTime": "2026-05-05T12:03:03Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:03:03Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 0", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-ee0e8a61", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-ee0e8a61-4ca8573e", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-ee0e8a61", "optional": false }, "name": "configmap-renovate-05051200-ee0e8a61" }, { "name": "secret-renovate-05051200-ee0e8a61-4ca8573e", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-ee0e8a61" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "spanContext": { "traceparent": "00-c5dc8988f569e7472e2958c5eedaa780-3122c2ff32799a8f-01" }, "startTime": "2026-05-05T12:00:15Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "kueue.konflux-ci.dev/requests-mintmaker": "1", "results.tekton.dev/record": "mintmaker/results/ee0103e8-c340-4b1e-ab22-bbd323284551/records/ee0103e8-c340-4b1e-ab22-bbd323284551", "results.tekton.dev/result": "mintmaker/results/ee0103e8-c340-4b1e-ab22-bbd323284551" }, "creationTimestamp": "2026-05-05T12:00:14Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun" ], "generation": 2, "labels": { "kueue.x-k8s.io/priority-class": "konflux-dependency-update", "kueue.x-k8s.io/queue-name": "pipelines-queue", "mintmaker.appstudio.redhat.com/application": "test-app-eldn", "mintmaker.appstudio.redhat.com/branch": "base-hyayel", "mintmaker.appstudio.redhat.com/component": "test-comp-enlp", "mintmaker.appstudio.redhat.com/git-host": "github.com", "mintmaker.appstudio.redhat.com/git-platform": "github", "mintmaker.appstudio.redhat.com/namespace": "build-e2e-gdsz", "mintmaker.appstudio.redhat.com/repo-branch-hash": "2c30ac5b7964", "mintmaker.appstudio.redhat.com/repository": "redhat-appstudio-qe_devfile-sample-python-basic", "tekton.dev/pipeline": "renovate-05051200-ee678119" }, "name": "renovate-05051200-ee678119", "namespace": "mintmaker", "resourceVersion": "111990", "uid": "ee0103e8-c340-4b1e-ab22-bbd323284551" }, "spec": { "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-ee678119", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-ee678119-6d2af7bc", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-ee678119", "optional": false }, "name": "configmap-renovate-05051200-ee678119" }, { "name": "secret-renovate-05051200-ee678119-6d2af7bc", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-ee678119" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "mintmaker-controller-manager" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "emptyDir": {}, "name": "shared-data" } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "renovate-05051200-ee678119-build", "pipelineTaskName": "build" } ], "completionTime": "2026-05-05T12:02:48Z", "conditions": [ { "lastTransitionTime": "2026-05-05T12:02:48Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 0", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "tasks": [ { "name": "build", "taskSpec": { "metadata": {}, "spec": null, "steps": [ { "computeResources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "image": "quay.io/konflux-ci/mintmaker-osv-database:latest", "name": "prepare-db", "script": "echo 'Copying OSV database to the shared workspace'; cp -r /data/osv-db /workspace/shared-data", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 } }, { "computeResources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "image": "registry.access.redhat.com/ubi9", "name": "prepare-rpm-cert", "script": "[ ! -f \"/etc/renovate/secret/rpm-activationkey\" ] \u0026\u0026 echo 'RPM secret not found. Exiting.' \u0026\u0026 exit 0;echo 'Generating RPM certificate and copying it to shared workspace';KEY_NAME=$(cat /etc/renovate/secret/rpm-activationkey);ORG_ID=$(cat /etc/renovate/secret/rpm-org);subscription-manager register --activationkey=\"$KEY_NAME\" --org=\"$ORG_ID\";mkdir -p /workspace/shared-data/rpm-certs;cp /etc/pki/entitlement/*-key.pem /workspace/shared-data/rpm-certs/key.pem;cp $(find /etc/pki/entitlement -maxdepth 1 -type f -name '*.pem' ! -name '*-key.pem' -print -quit) /workspace/shared-data/rpm-certs/cert.pem", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 0 } }, { "computeResources": { "limits": { "cpu": "300m", "memory": "3584Mi" }, "requests": { "cpu": "300m", "memory": "3584Mi" } }, "env": [ { "name": "HOME", "value": "/home/renovate" }, { "name": "LOG_LEVEL", "value": "debug" }, { "name": "LOG_FORMAT", "value": "json" }, { "name": "OSV_OFFLINE_DISABLE_DOWNLOAD", "value": "true" }, { "name": "OSV_OFFLINE_ROOT_DIR", "value": "/workspace/shared-data/osv-db" }, { "name": "DNF_VAR_SSL_CLIENT_KEY", "value": "/workspace/shared-data/rpm-certs/key.pem" }, { "name": "DNF_VAR_SSL_CLIENT_CERT", "value": "/workspace/shared-data/rpm-certs/cert.pem" }, { "name": "RENOVATE_X_GITLAB_AUTO_MERGEABLE_CHECK_ATTEMPS", "value": "7" } ], "image": "quay.io/konflux-ci/mintmaker-renovate-image:latest", "name": "renovate", "script": "RENOVATE_TOKEN=$(cat /etc/renovate/secret/renovate-token) RENOVATE_CONFIG_FILE=/etc/renovate/config/config.js LOG_FILE=/workspace/shared-data/renovate-logs.json renovate || true", "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 1001120000 }, "volumeMounts": [ { "mountPath": "/etc/renovate/config", "name": "configmap-renovate-05051200-ee678119", "readOnly": true }, { "mountPath": "/etc/renovate/secret", "name": "secret-renovate-05051200-ee678119-6d2af7bc", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "configmap-trusted-ca-6ct58987ht", "readOnly": true } ] } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.js", "path": "config.js" } ], "name": "renovate-05051200-ee678119", "optional": false }, "name": "configmap-renovate-05051200-ee678119" }, { "name": "secret-renovate-05051200-ee678119-6d2af7bc", "secret": { "defaultMode": 420, "items": [ { "key": "renovate-token", "path": "renovate-token" } ], "optional": false, "secretName": "renovate-05051200-ee678119" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht", "optional": false }, "name": "configmap-trusted-ca-6ct58987ht" } ], "workspaces": [ { "name": "shared-data" } ] }, "workspaces": [ { "name": "shared-data", "workspace": "shared-data" } ] } ], "workspaces": [ { "name": "shared-data" } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "spanContext": { "traceparent": "00-6d569239f182408cb765eb2804bb965d-0c7083977baa0d62-01" }, "startTime": "2026-05-05T12:00:15Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.openshift.io/repo": "https://github.com/redhat-appstudio-qe/konflux-test-integration-status-report?rev=3705f529241264c137583e09dd8b8f200ef7bbb9", "build.appstudio.redhat.com/commit_sha": "3705f529241264c137583e09dd8b8f200ef7bbb9", "build.appstudio.redhat.com/pull_request_number": "9596", "build.appstudio.redhat.com/target_branch": "base-aanpkv", "chains.tekton.dev/signed": "true", "pipelinesascode.tekton.dev/branch": "base-aanpkv", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74405013151", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-frrdhh", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "40773614", "pipelinesascode.tekton.dev/log-url": "https://console-openshift-console.apps.rosa.kx-fe60bf3fac.sd8i.p3.openshiftapps.com/k8s/ns/stat-rep-ixqh/tekton.dev~v1~PipelineRun/test-component-pac-lbwczx-on-pull-request-xq4qc", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"base-aanpkv\"", "pipelinesascode.tekton.dev/original-prname": "test-component-pac-lbwczx-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "9596", "pipelinesascode.tekton.dev/repo-url": "https://github.com/redhat-appstudio-qe/konflux-test-integration-status-report", "pipelinesascode.tekton.dev/repository": "test-component-pac-lbwczx", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-qe-app[bot]", "pipelinesascode.tekton.dev/sha": "3705f529241264c137583e09dd8b8f200ef7bbb9", "pipelinesascode.tekton.dev/sha-title": "RHTAP-Qe-App update test-component-pac-lbwczx", "pipelinesascode.tekton.dev/sha-url": "https://github.com/redhat-appstudio-qe/konflux-test-integration-status-report/commit/3705f529241264c137583e09dd8b8f200ef7bbb9", "pipelinesascode.tekton.dev/source-branch": "konflux-test-component-pac-lbwczx", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/redhat-appstudio-qe/konflux-test-integration-status-report", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "konflux-test-integration-status-report", "results.tekton.dev/record": "stat-rep-ixqh/results/a25049af-daf7-4821-ae6e-b1431c880ef5/records/a25049af-daf7-4821-ae6e-b1431c880ef5", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"konflux-test-integration-status-report\",\"commit\":\"3705f529241264c137583e09dd8b8f200ef7bbb9\",\"eventType\":\"pull_request\",\"pull_request-id\":9596}", "results.tekton.dev/result": "stat-rep-ixqh/results/a25049af-daf7-4821-ae6e-b1431c880ef5", "test.appstudio.openshift.io/pr-group": "konflux-test-component-pac-lbwczx", "test.appstudio.openshift.io/snapshot-creation-report": "GroupSnapshotCreationFailed" }, "creationTimestamp": "2026-05-05T11:40:41Z", "finalizers": [ "results.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer", "chains.tekton.dev/pipelinerun" ], "generateName": "test-component-pac-lbwczx-on-pull-request-", "generation": 2, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.43.0", "appstudio.openshift.io/application": "integ-app-sqws", "appstudio.openshift.io/component": "test-component-pac-lbwczx", "kueue.x-k8s.io/priority-class": "konflux-pre-merge-build", "kueue.x-k8s.io/queue-name": "pipelines-queue", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74405013151", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/original-prname": "test-component-pac-lbwczx-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "9596", "pipelinesascode.tekton.dev/repository": "test-component-pac-lbwczx", "pipelinesascode.tekton.dev/sha": "3705f529241264c137583e09dd8b8f200ef7bbb9", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "redhat-appstudio-qe", "pipelinesascode.tekton.dev/url-repository": "konflux-test-integration-status-report", "pipelineservice.appstudio.io/throttled": "test-component-pac-lbwczx-on-pull-request-xq4qc-clair-scan", "tekton.dev/pipeline": "test-component-pac-lbwczx-on-pull-request-xq4qc", "test.appstudio.openshift.io/pr-group-sha": "4cd952c6c0fe3ffd7bd6c25ecb9ef2a1d161892cf8ae87a689f4aa8d204278" }, "name": "test-component-pac-lbwczx-on-pull-request-xq4qc", "namespace": "stat-rep-ixqh", "resourceVersion": "83436", "uid": "a25049af-daf7-4821-ae6e-b1431c880ef5" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/redhat-appstudio-qe/konflux-test-integration-status-report" }, { "name": "revision", "value": "3705f529241264c137583e09dd8b8f200ef7bbb9" }, { "name": "output-image", "value": "quay.io/redhat-appstudio-qe/stat-rep-ixqh/test-component-pac-lbwczx:on-pr-3705f529241264c137583e09dd8b8f200ef7bbb9" }, { "name": "image-expires-after", "value": "6h" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building container images from a Containerfile while reducing network traffic.\n\n_Uses `buildah` to create a container image. It also optionally creates a source image and runs some build-time tests. EC will flag a violation for [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) if any tasks are added to the pipeline.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Build a source image.", "name": "build-source-image", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone:0.1@sha256:7db7ad9653dccc771407cb0294487cf4be9064fa782ffad7e983db1a8ba57e21" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "output", "workspace": "workspace" }, { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies:0.3@sha256:44eb23c2c9a6d7dc471efd28bf835035add9853c065e110312c5feefe87cfc8c" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "source", "workspace": "workspace" }, { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-min:0.9" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "source", "workspace": "workspace" } ] }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-source-image", "params": [ { "name": "BINARY_IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "BINARY_IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "source-build" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-source-build:0.3@sha256:df999473b440066ce856e36d80afd06b6ed3b575e07b6ac3efe79a25addc2045" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.build-source-image)", "operator": "in", "values": [ "true" ] } ], "workspaces": [ { "name": "workspace", "workspace": "workspace" } ] }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clair-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:9397d3eb9f1cbebaa15e93256e0ca9eaca148baa674be72f07f4a00df63c4609" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "ecosystem-cert-preflight-checks" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:25dcef1d9270b2e03fe6710a733171f7c7208e341fc627dac3a579088f44af34" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-snyk-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check:0.4@sha256:566753ca880764361b11f2c67d8e62dda94f829b11cb48e4716f27568216a481" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ], "workspaces": [ { "name": "workspace", "workspace": "workspace" } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:9f18b216ce71a66909e7cb17d9b34526c02d73cf12884ba32d1f10614f7b9f5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check:0.1@sha256:2cd09c97b9f0fae9c7bcd26d956f77221fb7137ee8b2ef17e7351b5e6f1eb89e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ], "workspaces": [ { "name": "workspace", "workspace": "workspace" } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "$(params.sast-target-dirs)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check:0.4@sha256:c162d9d0cd1e4c64dfc340577ba8e6bf55ebd1bb859fe3157217de9b4473c640" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ], "workspaces": [ { "name": "workspace", "workspace": "workspace" } ] }, { "name": "apply-tags", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "apply-tags" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "push-dockerfile", "params": [ { "name": "IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "push-dockerfile" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-push-dockerfile:0.3@sha256:359199272c9a403275162a6741d098d7987334232630b59093d781c743fa99e7" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "workspace", "workspace": "workspace" } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:8f7f445df165eb6498cfd5f36a043670f8275fdd739f08a4accf69868dfaa821" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "workspace" }, { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "podTemplate": { "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ] }, "serviceAccountName": "build-pipeline-test-component-pac-lbwczx" }, "timeouts": { "pipeline": "2h0m0s" }, "workspaces": [ { "name": "workspace", "volumeClaimTemplate": { "metadata": {}, "spec": { "accessModes": [ "ReadWriteOnce" ], "resources": { "requests": { "storage": "1Gi" } } }, "status": {} } }, { "name": "git-auth", "secret": { "secretName": "pac-gitauth-frrdhh" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "test-component-pac-lbwczx-on-pull-request-xq4qc-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "test-componenta71c1e24762a41771464ff56b7772bec-clone-repository", "pipelineTaskName": "clone-repository" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "test-compa71c1e24762a41771464ff56b7772bec-prefetch-dependencies", "pipelineTaskName": "prefetch-dependencies" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "test-component-pac-lbwczx-on-pull-request-xq4qc-build-container", "pipelineTaskName": "build-container" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "test-componena71c1e24762a41771464ff56b7772bec-build-image-index", "pipelineTaskName": "build-image-index" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tesa71c1e24762a41771464ff56b7772bec-deprecated-base-image-check", "pipelineTaskName": "deprecated-base-image-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "test-component-pac-lbwczx-on-pull-request-xq4qc-clair-scan", "pipelineTaskName": "clair-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "test-component-pac-lbwczx-on-pub144c804f64cd0b02d790d0bb27042d3", "pipelineTaskName": "ecosystem-cert-preflight-checks", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "test-component-pac-lbwczx-on-pull-request-xq4qc-sast-snyk-check", "pipelineTaskName": "sast-snyk-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "test-component-pac-lbwczx-on-pull-request-xq4qc-clamav-scan", "pipelineTaskName": "clamav-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "test-componenta71c1e24762a41771464ff56b7772bec-sast-shell-check", "pipelineTaskName": "sast-shell-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "test-componea71c1e24762a41771464ff56b7772bec-sast-unicode-check", "pipelineTaskName": "sast-unicode-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "test-component-pac-lbwczx-on-pull-request-xq4qc-apply-tags", "pipelineTaskName": "apply-tags" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "test-component-pac-lbwczx-on-pull-request-xq4qc-push-dockerfile", "pipelineTaskName": "push-dockerfile" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "test-compona71c1e24762a41771464ff56b7772bec-rpms-signature-scan", "pipelineTaskName": "rpms-signature-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "completionTime": "2026-05-05T11:49:06Z", "conditions": [ { "lastTransitionTime": "2026-05-05T11:49:06Z", "message": "Tasks Completed: 15 (Failed: 1, Cancelled 0), Skipped: 1", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building container images from a Containerfile while reducing network traffic.\n\n_Uses `buildah` to create a container image. It also optionally creates a source image and runs some build-time tests. EC will flag a violation for [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) if any tasks are added to the pipeline.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Build a source image.", "name": "build-source-image", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": ".", "description": "Target directories in component's source code to scan with SAST tools. Multiple values should be separated with commas.", "name": "sast-target-dirs", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:90f0e8e134c4bb919956bb095d62365907adeea4fbeb4cebbf5f3f94286bf967" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/redhat-appstudio-qe/konflux-test-integration-status-report" }, { "name": "revision", "value": "3705f529241264c137583e09dd8b8f200ef7bbb9" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone:0.1@sha256:7db7ad9653dccc771407cb0294487cf4be9064fa782ffad7e983db1a8ba57e21" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "output", "workspace": "workspace" }, { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies:0.3@sha256:44eb23c2c9a6d7dc471efd28bf835035add9853c065e110312c5feefe87cfc8c" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "source", "workspace": "workspace" }, { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/stat-rep-ixqh/test-component-pac-lbwczx:on-pr-3705f529241264c137583e09dd8b8f200ef7bbb9" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "6h" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-min:0.9" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "source", "workspace": "workspace" } ] }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/redhat-appstudio-qe/stat-rep-ixqh/test-component-pac-lbwczx:on-pr-3705f529241264c137583e09dd8b8f200ef7bbb9" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-source-image", "params": [ { "name": "BINARY_IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "BINARY_IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "source-build" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-source-build:0.3@sha256:df999473b440066ce856e36d80afd06b6ed3b575e07b6ac3efe79a25addc2045" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "true" ] } ], "workspaces": [ { "name": "workspace", "workspace": "workspace" } ] }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clair-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clair-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:9397d3eb9f1cbebaa15e93256e0ca9eaca148baa674be72f07f4a00df63c4609" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "ecosystem-cert-preflight-checks", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "ecosystem-cert-preflight-checks" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:25dcef1d9270b2e03fe6710a733171f7c7208e341fc627dac3a579088f44af34" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-snyk-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-snyk-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check:0.4@sha256:566753ca880764361b11f2c67d8e62dda94f829b11cb48e4716f27568216a481" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ], "workspaces": [ { "name": "workspace", "workspace": "workspace" } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:9f18b216ce71a66909e7cb17d9b34526c02d73cf12884ba32d1f10614f7b9f5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check:0.1@sha256:2cd09c97b9f0fae9c7bcd26d956f77221fb7137ee8b2ef17e7351b5e6f1eb89e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ], "workspaces": [ { "name": "workspace", "workspace": "workspace" } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "TARGET_DIRS", "value": "." } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check:0.4@sha256:c162d9d0cd1e4c64dfc340577ba8e6bf55ebd1bb859fe3157217de9b4473c640" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ], "workspaces": [ { "name": "workspace", "workspace": "workspace" } ] }, { "name": "apply-tags", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "apply-tags" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "push-dockerfile", "params": [ { "name": "IMAGE", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "push-dockerfile" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-push-dockerfile:0.3@sha256:359199272c9a403275162a6741d098d7987334232630b59093d781c743fa99e7" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "workspace", "workspace": "workspace" } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:8f7f445df165eb6498cfd5f36a043670f8275fdd739f08a4accf69868dfaa821" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "workspace" }, { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "alpha", "enableParamEnum": true, "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "IMAGE_URL", "value": "quay.io/redhat-appstudio-qe/stat-rep-ixqh/test-component-pac-lbwczx:on-pr-3705f529241264c137583e09dd8b8f200ef7bbb9" }, { "name": "IMAGE_DIGEST", "value": "sha256:911ded5aa36dad2bb4c2f424c5c99d52c9f5282157c1dd8d6138c67a8b8d7087" }, { "name": "CHAINS-GIT_URL", "value": "https://github.com/redhat-appstudio-qe/konflux-test-integration-status-report" }, { "name": "CHAINS-GIT_COMMIT", "value": "3705f529241264c137583e09dd8b8f200ef7bbb9" } ], "skippedTasks": [ { "name": "build-source-image", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "true" ] } ] } ], "spanContext": { "traceparent": "00-6dc72f0b524fdd52409e7bfd09377731-3826e182f22db579-01" }, "startTime": "2026-05-05T11:40:42Z" } } ], "kind": "List", "metadata": { "resourceVersion": "" } }