{ "apiVersion": "v1", "items": [ { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "chains.tekton.dev/signed": "true", "operator-sdk/primary-resource": "ex-registry-sh-25d5dc03/snapshot-sample-25d5dc03-2mlpm", "operator-sdk/primary-resource-type": "Release.appstudio.redhat.com", "results.tekton.dev/record": "ex-registry-sh-managed-25d5dc03/results/162a14d3-d1a1-489c-a2c6-d154d76ab2f2/records/162a14d3-d1a1-489c-a2c6-d154d76ab2f2", "results.tekton.dev/result": "ex-registry-sh-managed-25d5dc03/results/162a14d3-d1a1-489c-a2c6-d154d76ab2f2", "results.tekton.dev/stored": "true", "tekton.dev/pipelines.minVersion": "0.12.1", "tekton.dev/tags": "release" }, "creationTimestamp": "2026-05-12T09:35:41Z", "finalizers": [ "results.tekton.dev/pipelinerun", "chains.tekton.dev/pipelinerun" ], "generateName": "managed-", "generation": 1, "labels": { "appstudio.openshift.io/application": "appstudio", "appstudio.openshift.io/service": "release", "appstudio.openshift.io/snapshot": "snapshot-sample-25d5dc03", "pipelines.appstudio.openshift.io/type": "managed", "release.appstudio.openshift.io/name": "snapshot-sample-25d5dc03-2mlpm", "release.appstudio.openshift.io/namespace": "ex-registry-sh-25d5dc03", "tekton.dev/pipeline": "push-to-external-registry" }, "name": "managed-9k7lx", "namespace": "ex-registry-sh-managed-25d5dc03", "resourceVersion": "13615", "uid": "162a14d3-d1a1-489c-a2c6-d154d76ab2f2" }, "spec": { "params": [ { "name": "release", "value": "ex-registry-sh-25d5dc03/snapshot-sample-25d5dc03-2mlpm" }, { "name": "releasePlan", "value": "ex-registry-sh-25d5dc03/source-releaseplan" }, { "name": "releasePlanAdmission", "value": "ex-registry-sh-managed-25d5dc03/demo" }, { "name": "releaseServiceConfig", "value": "release-service/release-service-config" }, { "name": "snapshot", "value": "ex-registry-sh-25d5dc03/snapshot-sample-25d5dc03" }, { "name": "enterpriseContractPolicy", "value": "{\"description\":\"Red Hat's enterprise requirements\",\"sources\":[{\"name\":\"Release Policies\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"],\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\"],\"config\":{\"exclude\":[\"step_image_registries\",\"tasks.required_tasks_found:prefetch-dependencies\",\"slsa_source_correlated.source_code_reference_provided\"],\"include\":[\"@slsa3\"]}}],\"publicKey\":\"k8s://ex-registry-sh-managed-25d5dc03/cosign-public-key\"}" }, { "name": "verify_ec_task_bundle", "value": "quay.io/enterprise-contract/ec-task-bundle@sha256:ddef1760e281cc7357e82cb20886032cad7df65eca8e8353f039c37d4dcb94eb" }, { "name": "verify_ec_task_git_revision", "value": "671c67269434c73faa7e3a0800b2983cf48a6f1d" }, { "name": "taskGitUrl", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "taskGitRevision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" }, { "name": "ociStorage", "value": "quay-service.quay/test-org/trusted-artifacts" } ], "pipelineRef": { "params": [ { "name": "url", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "revision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" }, { "name": "pathInRepo", "value": "pipelines/managed/push-to-external-registry/push-to-external-registry.yaml" } ], "resolver": "git" }, "taskRunTemplate": { "serviceAccountName": "release-service-account" }, "timeouts": { "pipeline": "4h0m0s", "tasks": "3h50m0s" }, "workspaces": [ { "emptyDir": { "sizeLimit": "1Gi" }, "name": "release-workspace" } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "managed-9k7lx-verify-access-to-resources", "pipelineTaskName": "verify-access-to-resources" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "managed-9k7lx-collect-data", "pipelineTaskName": "collect-data" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "managed-9k7lx-collect-task-params", "pipelineTaskName": "collect-task-params" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "managed-9k7lx-check-data-keys", "pipelineTaskName": "check-data-keys" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "managed-9k7lx-collect-signing-params", "pipelineTaskName": "collect-signing-params" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "managed-9k7lx-reduce-snapshot", "pipelineTaskName": "reduce-snapshot" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "managed-9k7lx-apply-mapping", "pipelineTaskName": "apply-mapping" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "managed-9k7lx-filter-already-released-images", "pipelineTaskName": "filter-already-released-images" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "managed-9k7lx-verify-conforma", "pipelineTaskName": "verify-conforma", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "managed-9k7lx-push-snapshot", "pipelineTaskName": "push-snapshot", "whenExpressions": [ { "input": "true", "operator": "in", "values": [ "true" ] }, { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "managed-9k7lx-collect-registry-token-secret", "pipelineTaskName": "collect-registry-token-secret" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "managed-9k7lx-make-repo-public", "pipelineTaskName": "make-repo-public", "whenExpressions": [ { "input": "quay-api-token", "operator": "notin", "values": [ "" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "managed-9k7lx-collect-tpa-params", "pipelineTaskName": "collect-tpa-params", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "managed-9k7lx-update-cr-status", "pipelineTaskName": "update-cr-status" } ], "completionTime": "2026-05-12T09:38:53Z", "conditions": [ { "lastTransitionTime": "2026-05-12T09:38:53Z", "message": "Tasks Completed: 14 (Failed: 0, Cancelled 0), Skipped: 2", "reason": "Completed", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "description": "Tekton pipeline to release Snapshots to an external registry.", "params": [ { "description": "The namespaced name (namespace/name) of the Release custom resource initiating this pipeline execution", "name": "release", "type": "string" }, { "description": "The namespaced name (namespace/name) of the releasePlan", "name": "releasePlan", "type": "string" }, { "description": "The namespaced name (namespace/name) of the releasePlanAdmission", "name": "releasePlanAdmission", "type": "string" }, { "description": "The namespaced name (namespace/name) of the releaseServiceConfig", "name": "releaseServiceConfig", "type": "string" }, { "description": "The namespaced name (namespace/name) of the snapshot", "name": "snapshot", "type": "string" }, { "description": "JSON representation of the EnterpriseContractPolicy", "name": "enterpriseContractPolicy", "type": "string" }, { "default": "pipeline_intention=release", "description": "Extra rule data to be merged into the policy specified in params.enterpriseContractPolicy. Use syntax\n\"key1=value1,key2=value2...\"\n", "name": "enterpriseContractExtraRuleData", "type": "string" }, { "description": "The git revision to be used when consuming the verify-conforma task", "name": "verify_ec_task_git_revision", "type": "string" }, { "default": "https://github.com/konflux-ci/release-service-catalog.git", "description": "The url to the git repo where the release-service-catalog tasks to be used are stored", "name": "taskGitUrl", "type": "string" }, { "description": "The revision in the taskGitUrl repo to be used", "name": "taskGitRevision", "type": "string" }, { "default": "quay.io/konflux-ci/release-service-trusted-artifacts", "description": "The OCI repository where the Trusted Artifacts are stored", "name": "ociStorage", "type": "string" }, { "default": "", "description": "oras options to pass to Trusted Artifacts calls", "name": "orasOptions", "type": "string" }, { "default": "", "description": "Flag to enable debug logging in trusted artifacts. Set to a non-empty string to enable", "name": "trustedArtifactsDebug", "type": "string" }, { "default": "/var/workdir/release", "description": "The location where data will be stored", "name": "dataDir", "type": "string" }, { "default": "fb3aaa43fb938f05c3f175a7e4c699da63c5f34b", "description": "The git revision to be used when consuming Mobster tasks for SBOM processing", "name": "mobster_tasks_git_revision", "type": "string" }, { "default": "k8s://openshift-pipelines/public-key", "description": "Path to the key used by Conforma to verify attestations signed by it", "name": "conformaPubKey", "type": "string" } ], "tasks": [ { "name": "verify-access-to-resources", "params": [ { "name": "release", "value": "ex-registry-sh-25d5dc03/snapshot-sample-25d5dc03-2mlpm" }, { "name": "releasePlan", "value": "ex-registry-sh-25d5dc03/source-releaseplan" }, { "name": "releasePlanAdmission", "value": "ex-registry-sh-managed-25d5dc03/demo" }, { "name": "releaseServiceConfig", "value": "release-service/release-service-config" }, { "name": "snapshot", "value": "ex-registry-sh-25d5dc03/snapshot-sample-25d5dc03" }, { "name": "requireInternalServices", "value": "false" } ], "taskRef": { "params": [ { "name": "url", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "revision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" }, { "name": "pathInRepo", "value": "tasks/managed/verify-access-to-resources/verify-access-to-resources.yaml" } ], "resolver": "git" } }, { "name": "collect-data", "params": [ { "name": "release", "value": "ex-registry-sh-25d5dc03/snapshot-sample-25d5dc03-2mlpm" }, { "name": "releasePlan", "value": "ex-registry-sh-25d5dc03/source-releaseplan" }, { "name": "releasePlanAdmission", "value": "ex-registry-sh-managed-25d5dc03/demo" }, { "name": "releaseServiceConfig", "value": "release-service/release-service-config" }, { "name": "snapshot", "value": "ex-registry-sh-25d5dc03/snapshot-sample-25d5dc03" }, { "name": "subdirectory", "value": "162a14d3-d1a1-489c-a2c6-d154d76ab2f2" }, { "name": "ociStorage", "value": "quay-service.quay/test-org/trusted-artifacts" }, { "name": "dataDir", "value": "/var/workdir/release" }, { "name": "trustedArtifactsDebug", "value": "" }, { "name": "taskGitUrl", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "taskGitRevision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" } ], "runAfter": [ "verify-access-to-resources" ], "taskRef": { "params": [ { "name": "url", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "revision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" }, { "name": "pathInRepo", "value": "tasks/managed/collect-data/collect-data.yaml" } ], "resolver": "git" } }, { "name": "collect-task-params", "params": [ { "name": "dataDir", "value": "/var/workdir/release" }, { "name": "dataPath", "value": "$(tasks.collect-data.results.data)" }, { "name": "keysToExtract", "value": "[\n {\"resultIndex\": 0, \"key\": \".conforma.workerCount\", \"default\": \"4\"},\n {\"resultIndex\": 1, \"key\": \".sign.cosignSecretName\", \"default\": \"secret-not-present\"}\n]\n" }, { "name": "taskGitUrl", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "taskGitRevision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" }, { "name": "ociStorage", "value": "quay-service.quay/test-org/trusted-artifacts" }, { "name": "sourceDataArtifact", "value": "$(tasks.collect-data.results.sourceDataArtifact)" }, { "name": "trustedArtifactsDebug", "value": "" } ], "runAfter": [ "collect-data" ], "taskRef": { "params": [ { "name": "url", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "revision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" }, { "name": "pathInRepo", "value": "tasks/managed/collect-task-params/collect-task-params.yaml" } ], "resolver": "git" } }, { "name": "check-data-keys", "params": [ { "name": "dataPath", "value": "$(tasks.collect-data.results.data)" }, { "name": "schema", "value": "https://github.com/seanconroy2021/release-service-catalog/raw/a9a6f822de68739548fc6b3718335cbe819dfadb/schema/dataKeys.json" }, { "name": "systems", "value": "[\n {\"systemName\": \"mapping\", \"dynamic\": false}\n]\n" }, { "name": "ociStorage", "value": "quay-service.quay/test-org/trusted-artifacts" }, { "name": "sourceDataArtifact", "value": "$(tasks.collect-data.results.sourceDataArtifact)" }, { "name": "dataDir", "value": "/var/workdir/release" }, { "name": "trustedArtifactsDebug", "value": "" }, { "name": "taskGitUrl", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "taskGitRevision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" } ], "runAfter": [ "collect-data" ], "taskRef": { "params": [ { "name": "url", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "revision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" }, { "name": "pathInRepo", "value": "tasks/managed/check-data-keys/check-data-keys.yaml" } ], "resolver": "git" } }, { "name": "collect-signing-params", "runAfter": [ "collect-data" ], "taskRef": { "params": [ { "name": "url", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "revision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" }, { "name": "pathInRepo", "value": "tasks/managed/collect-signing-params/collect-signing-params.yaml" } ], "resolver": "git" } }, { "name": "reduce-snapshot", "params": [ { "name": "SNAPSHOT", "value": "/var/workdir/release/$(tasks.collect-data.results.snapshotSpec)" }, { "name": "SINGLE_COMPONENT", "value": "$(tasks.collect-data.results.singleComponentMode)" }, { "name": "SINGLE_COMPONENT_CUSTOM_RESOURCE", "value": "snapshot/$(tasks.collect-data.results.snapshotName)" }, { "name": "SINGLE_COMPONENT_CUSTOM_RESOURCE_NS", "value": "$(tasks.collect-data.results.snapshotNamespace)" }, { "name": "SNAPSHOT_PATH", "value": "/var/workdir/release/$(tasks.collect-data.results.snapshotSpec)" }, { "name": "ociStorage", "value": "quay-service.quay/test-org/trusted-artifacts" }, { "name": "sourceDataArtifact", "value": "$(tasks.collect-data.results.sourceDataArtifact)" }, { "name": "dataDir", "value": "/var/workdir/release" }, { "name": "trustedArtifactsDebug", "value": "" }, { "name": "taskGitUrl", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "taskGitRevision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" } ], "runAfter": [ "collect-data" ], "taskRef": { "params": [ { "name": "url", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "revision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" }, { "name": "pathInRepo", "value": "tasks/managed/reduce-snapshot/reduce-snapshot.yaml" } ], "resolver": "git" } }, { "name": "apply-mapping", "params": [ { "name": "failOnEmptyResult", "value": "true" }, { "name": "dataPath", "value": "$(tasks.collect-data.results.data)" }, { "name": "snapshotPath", "value": "$(tasks.collect-data.results.snapshotSpec)" }, { "name": "ociStorage", "value": "quay-service.quay/test-org/trusted-artifacts" }, { "name": "sourceDataArtifact", "value": "$(tasks.reduce-snapshot.results.sourceDataArtifact)" }, { "name": "dataDir", "value": "/var/workdir/release" }, { "name": "trustedArtifactsDebug", "value": "" }, { "name": "taskGitUrl", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "taskGitRevision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" } ], "retries": 3, "runAfter": [ "reduce-snapshot" ], "taskRef": { "params": [ { "name": "url", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "revision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" }, { "name": "pathInRepo", "value": "tasks/managed/apply-mapping/apply-mapping.yaml" } ], "resolver": "git" } }, { "name": "filter-already-released-images", "params": [ { "name": "snapshotPath", "value": "$(tasks.collect-data.results.snapshotSpec)" }, { "name": "ociStorage", "value": "quay-service.quay/test-org/trusted-artifacts" }, { "name": "sourceDataArtifact", "value": "$(tasks.apply-mapping.results.sourceDataArtifact)" }, { "name": "dataDir", "value": "/var/workdir/release" }, { "name": "trustedArtifactsDebug", "value": "" }, { "name": "taskGitUrl", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "taskGitRevision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" } ], "runAfter": [ "apply-mapping" ], "taskRef": { "params": [ { "name": "url", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "revision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" }, { "name": "pathInRepo", "value": "tasks/managed/filter-already-released-images/filter-already-released-images.yaml" } ], "resolver": "git" } }, { "name": "verify-conforma", "params": [ { "name": "SNAPSHOT_FILENAME", "value": "$(tasks.collect-data.results.snapshotSpec)" }, { "name": "SSL_CERT_DIR", "value": "/var/run/secrets/kubernetes.io/serviceaccount" }, { "name": "POLICY_CONFIGURATION", "value": "{\"description\":\"Red Hat's enterprise requirements\",\"sources\":[{\"name\":\"Release Policies\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"],\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\"],\"config\":{\"exclude\":[\"step_image_registries\",\"tasks.required_tasks_found:prefetch-dependencies\",\"slsa_source_correlated.source_code_reference_provided\"],\"include\":[\"@slsa3\"]}}],\"publicKey\":\"k8s://ex-registry-sh-managed-25d5dc03/cosign-public-key\"}" }, { "name": "STRICT", "value": "true" }, { "name": "IGNORE_REKOR", "value": "true" }, { "name": "EXTRA_RULE_DATA", "value": "pipeline_intention=release" }, { "name": "WORKERS", "value": "$(tasks.collect-task-params.results.extractedValues[0])" }, { "name": "SOURCE_DATA_ARTIFACT", "value": "$(tasks.filter-already-released-images.results.sourceDataArtifact)" }, { "name": "TRUSTED_ARTIFACTS_DEBUG", "value": "" }, { "name": "CERTIFICATE_IDENTITY", "value": "$(tasks.collect-signing-params.results.tektonChainsIdentity)" }, { "name": "CERTIFICATE_OIDC_ISSUER", "value": "$(tasks.collect-signing-params.results.defaultOIDCIssuer)" }, { "name": "TUF_MIRROR", "value": "$(tasks.collect-signing-params.results.tufUrl)" }, { "name": "REKOR_HOST", "value": "$(tasks.collect-signing-params.results.rekorUrl)" } ], "runAfter": [ "filter-already-released-images", "collect-task-params", "collect-signing-params" ], "taskRef": { "params": [ { "name": "url", "value": "https://github.com/conforma/cli" }, { "name": "revision", "value": "671c67269434c73faa7e3a0800b2983cf48a6f1d" }, { "name": "pathInRepo", "value": "tasks/verify-conforma-konflux-ta/0.1/verify-conforma-konflux-ta.yaml" } ], "resolver": "git" }, "timeout": "4h0m0s", "when": [ { "input": "$(tasks.filter-already-released-images.results.skip_release)", "operator": "in", "values": [ "false" ] } ] }, { "name": "push-snapshot", "params": [ { "name": "snapshotPath", "value": "$(tasks.collect-data.results.snapshotSpec)" }, { "name": "dataPath", "value": "$(tasks.collect-data.results.data)" }, { "name": "resultsDirPath", "value": "$(tasks.collect-data.results.resultsDir)" }, { "name": "ociStorage", "value": "quay-service.quay/test-org/trusted-artifacts" }, { "name": "sourceDataArtifact", "value": "$(tasks.filter-already-released-images.results.sourceDataArtifact)" }, { "name": "dataDir", "value": "/var/workdir/release" }, { "name": "trustedArtifactsDebug", "value": "" }, { "name": "taskGitUrl", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "taskGitRevision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" } ], "retries": 5, "runAfter": [ "verify-conforma" ], "taskRef": { "params": [ { "name": "url", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "revision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" }, { "name": "pathInRepo", "value": "tasks/managed/push-snapshot/push-snapshot.yaml" } ], "resolver": "git" }, "when": [ { "input": "$(tasks.apply-mapping.results.mapped)", "operator": "in", "values": [ "true" ] }, { "input": "$(tasks.filter-already-released-images.results.skip_release)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sign-image-cosign-keyless", "params": [ { "name": "snapshotPath", "value": "$(tasks.collect-data.results.snapshotSpec)" }, { "name": "ociStorage", "value": "quay-service.quay/test-org/trusted-artifacts" }, { "name": "sourceDataArtifact", "value": "$(tasks.apply-mapping.results.sourceDataArtifact)" }, { "name": "dataDir", "value": "/var/workdir/release" }, { "name": "trustedArtifactsDebug", "value": "" }, { "name": "taskGitUrl", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "taskGitRevision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" }, { "name": "keylessRekorURL", "value": "$(tasks.collect-signing-params.results.rekorUrl)" }, { "name": "keylessFulcioURL", "value": "$(tasks.collect-signing-params.results.fulcioUrl)" }, { "name": "keylessOIDCIssuer", "value": "$(tasks.collect-signing-params.results.defaultOIDCIssuer)" }, { "name": "keylessTufURL", "value": "$(tasks.collect-signing-params.results.tufUrl)" } ], "runAfter": [ "collect-signing-params", "push-snapshot", "collect-task-params" ], "taskRef": { "params": [ { "name": "url", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "revision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" }, { "name": "pathInRepo", "value": "tasks/managed/sign-image-cosign-keyless/sign-image-cosign-keyless.yaml" } ], "resolver": "git" }, "timeout": "6h0m0s", "when": [ { "input": "$(tasks.collect-signing-params.results.enableKeylessSigning)", "operator": "in", "values": [ "true", "True", "TRUE" ] } ] }, { "name": "collect-registry-token-secret", "params": [ { "name": "dataPath", "value": "$(tasks.collect-data.results.data)" }, { "name": "ociStorage", "value": "quay-service.quay/test-org/trusted-artifacts" }, { "name": "sourceDataArtifact", "value": "$(tasks.collect-data.results.sourceDataArtifact)" }, { "name": "dataDir", "value": "/var/workdir/release" }, { "name": "trustedArtifactsDebug", "value": "" }, { "name": "taskGitUrl", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "taskGitRevision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" } ], "runAfter": [ "collect-data" ], "taskRef": { "params": [ { "name": "url", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "revision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" }, { "name": "pathInRepo", "value": "tasks/managed/collect-registry-token-secret/collect-registry-token-secret.yaml" } ], "resolver": "git" } }, { "name": "make-repo-public", "params": [ { "name": "dataPath", "value": "$(tasks.collect-data.results.data)" }, { "name": "snapshotPath", "value": "$(tasks.collect-data.results.snapshotSpec)" }, { "name": "registrySecret", "value": "$(tasks.collect-registry-token-secret.results.registrySecret)" }, { "name": "ociStorage", "value": "quay-service.quay/test-org/trusted-artifacts" }, { "name": "sourceDataArtifact", "value": "$(tasks.push-snapshot.results.sourceDataArtifact)" }, { "name": "dataDir", "value": "/var/workdir/release" }, { "name": "trustedArtifactsDebug", "value": "" }, { "name": "taskGitUrl", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "taskGitRevision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" } ], "retries": 5, "runAfter": [ "collect-registry-token-secret", "push-snapshot" ], "taskRef": { "params": [ { "name": "url", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "revision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" }, { "name": "pathInRepo", "value": "tasks/managed/make-repo-public/make-repo-public.yaml" } ], "resolver": "git" }, "when": [ { "input": "$(tasks.collect-registry-token-secret.results.registrySecret)", "operator": "notin", "values": [ "" ] } ] }, { "name": "collect-tpa-params", "params": [ { "name": "dataPath", "value": "$(tasks.collect-data.results.data)" }, { "name": "ociStorage", "value": "quay-service.quay/test-org/trusted-artifacts" }, { "name": "sourceDataArtifact", "value": "$(tasks.collect-data.results.sourceDataArtifact)" }, { "name": "dataDir", "value": "/var/workdir/release" }, { "name": "trustedArtifactsDebug", "value": "" }, { "name": "taskGitUrl", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "taskGitRevision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" }, { "name": "failOnMissing", "value": "false" } ], "runAfter": [ "collect-data" ], "taskRef": { "params": [ { "name": "url", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "revision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" }, { "name": "pathInRepo", "value": "tasks/managed/collect-tpa-params/collect-tpa-params.yaml" } ], "resolver": "git" }, "when": [ { "input": "$(tasks.filter-already-released-images.results.skip_release)", "operator": "in", "values": [ "false" ] } ] }, { "name": "process-component-sbom", "params": [ { "name": "resultsDirPath", "value": "$(tasks.collect-data.results.resultsDir)" }, { "name": "snapshotSpec", "value": "$(tasks.collect-data.results.snapshotSpec)" }, { "name": "releaseData", "value": "$(tasks.collect-data.results.data)" }, { "name": "retryAWSSecretName", "value": "$(tasks.collect-tpa-params.results.retryAWSSecretName)" }, { "name": "retryS3Bucket", "value": "$(tasks.collect-tpa-params.results.retryS3Bucket)" }, { "name": "atlasSecretName", "value": "$(tasks.collect-tpa-params.results.secretName)" }, { "name": "ssoTokenUrl", "value": "$(tasks.collect-tpa-params.results.ssoTokenUrl)" }, { "name": "atlasApiUrl", "value": "$(tasks.collect-tpa-params.results.atlasApiUrl)" }, { "name": "ociStorage", "value": "quay-service.quay/test-org/trusted-artifacts" }, { "name": "sourceDataArtifact", "value": "$(tasks.filter-already-released-images.results.sourceDataArtifact)" }, { "name": "dataDir", "value": "/var/workdir/release" }, { "name": "trustedArtifactsDebug", "value": "" }, { "name": "taskGitUrl", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "taskGitRevision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" }, { "name": "cosignSecretName", "value": "$(tasks.collect-task-params.results.extractedValues[1])" }, { "name": "attestationPubKey", "value": "k8s://openshift-pipelines/public-key" }, { "name": "defaultOIDCIssuer", "value": "$(tasks.collect-signing-params.results.defaultOIDCIssuer)" }, { "name": "rekorExternalUrl", "value": "$(tasks.collect-signing-params.results.rekorExternalUrl)" }, { "name": "fulcioExternalUrl", "value": "$(tasks.collect-signing-params.results.fulcioExternalUrl)" }, { "name": "tufExternalUrl", "value": "$(tasks.collect-signing-params.results.tufExternalUrl)" }, { "name": "buildIdentityRegexp", "value": "$(tasks.collect-signing-params.results.buildIdentityRegexp)" } ], "runAfter": [ "collect-data", "apply-mapping", "collect-tpa-params", "push-snapshot", "sign-image-cosign-keyless" ], "taskRef": { "params": [ { "name": "url", "value": "https://github.com/konflux-ci/mobster.git" }, { "name": "revision", "value": "fb3aaa43fb938f05c3f175a7e4c699da63c5f34b" }, { "name": "pathInRepo", "value": "tasks/augment-component-sboms-ta/0.3/augment-component-sboms-ta.yaml" } ], "resolver": "git" }, "when": [ { "input": "$(tasks.collect-tpa-params.results.atlasApiUrl)", "operator": "notin", "values": [ "" ] } ] }, { "name": "update-cr-status", "params": [ { "name": "resource", "value": "ex-registry-sh-25d5dc03/snapshot-sample-25d5dc03-2mlpm" }, { "name": "resultsDirPath", "value": "$(tasks.collect-data.results.resultsDir)" }, { "name": "ociStorage", "value": "quay-service.quay/test-org/trusted-artifacts" }, { "name": "resultArtifacts", "value": [ "$(tasks.push-snapshot.results.sourceDataArtifact)=/var/workdir/release" ] }, { "name": "dataDir", "value": "/var/workdir/release" }, { "name": "trustedArtifactsDebug", "value": "" }, { "name": "taskGitUrl", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "taskGitRevision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" } ], "runAfter": [ "push-snapshot", "process-component-sbom" ], "taskRef": { "params": [ { "name": "url", "value": "https://github.com/seanconroy2021/release-service-catalog" }, { "name": "revision", "value": "a9a6f822de68739548fc6b3718335cbe819dfadb" }, { "name": "pathInRepo", "value": "tasks/managed/update-cr-status/update-cr-status.yaml" } ], "resolver": "git" } } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" }, "refSource": { "digest": { "sha1": "a9a6f822de68739548fc6b3718335cbe819dfadb" }, "entryPoint": "pipelines/managed/push-to-external-registry/push-to-external-registry.yaml", "uri": "git+https://github.com/seanconroy2021/release-service-catalog" } }, "skippedTasks": [ { "name": "sign-image-cosign-keyless", "reason": "When Expressions evaluated to false", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "true", "True", "TRUE" ] } ] }, { "name": "process-component-sbom", "reason": "When Expressions evaluated to false", "whenExpressions": [ { "operator": "notin", "values": [ "" ] } ] } ], "startTime": "2026-05-12T09:35:41Z" } } ], "kind": "List", "metadata": { "resourceVersion": "" } }