{ "apiVersion": "v1", "items": [ { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.openshift.io/repo": "https://github.com/rhads-tsf-qe/testrepo?rev=41193736d88ff78f7e02b3ab323157460ddd3c83", "build.appstudio.redhat.com/commit_sha": "41193736d88ff78f7e02b3ab323157460ddd3c83", "build.appstudio.redhat.com/target_branch": "base-ygmwmo", "pac.test.appstudio.openshift.io/branch": "base-ygmwmo", "pac.test.appstudio.openshift.io/cancel-in-progress": "false", "pac.test.appstudio.openshift.io/check-run-id": "74307506918", "pac.test.appstudio.openshift.io/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pac.test.appstudio.openshift.io/event-type": "push", "pac.test.appstudio.openshift.io/git-auth-secret": "pac-gitauth-yawhyy", "pac.test.appstudio.openshift.io/git-provider": "github", "pac.test.appstudio.openshift.io/installation-id": "112348674", "pac.test.appstudio.openshift.io/log-url": "https://konflux-ui-konflux-ui.apps.rosa.kx-18892726ba.5e3o.p3.openshiftapps.com/ns/default-tenant/pipelinerun/my-integration-test-rjvu-dpcq6", "pac.test.appstudio.openshift.io/max-keep-runs": "3", "pac.test.appstudio.openshift.io/on-cel-expression": "event == \"push\" \u0026\u0026 target_branch == \"base-ygmwmo\"", "pac.test.appstudio.openshift.io/original-prname": "tsf-comp-xr3aq-on-push", "pac.test.appstudio.openshift.io/repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pac.test.appstudio.openshift.io/repository": "tsf-comp-xr3aq", "pac.test.appstudio.openshift.io/scm-reporting-plr-started": "true", "pac.test.appstudio.openshift.io/sender": "rhtap-ci-tests-bot", "pac.test.appstudio.openshift.io/sha": "41193736d88ff78f7e02b3ab323157460ddd3c83", "pac.test.appstudio.openshift.io/sha-title": "Merge pull request #297 from rhads-tsf-qe/konflux-tsf-comp-xr3aq", "pac.test.appstudio.openshift.io/sha-url": "https://github.com/rhads-tsf-qe/testrepo/commit/41193736d88ff78f7e02b3ab323157460ddd3c83", "pac.test.appstudio.openshift.io/source-branch": "refs/heads/base-ygmwmo", "pac.test.appstudio.openshift.io/source-repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pac.test.appstudio.openshift.io/state": "started", "pac.test.appstudio.openshift.io/url-org": "rhads-tsf-qe", "pac.test.appstudio.openshift.io/url-repository": "testrepo", "results.tekton.dev/record": "default-tenant/results/96c8eb12-81fc-4cbb-8d74-6997506169bb/records/96c8eb12-81fc-4cbb-8d74-6997506169bb", "results.tekton.dev/result": "default-tenant/results/96c8eb12-81fc-4cbb-8d74-6997506169bb", "results.tekton.dev/stored": "false", "test.appstudio.openshift.io/added-to-global-candidate-list": "{\"result\":true,\"reason\":\"Success\",\"lastupdatedtime\":\"2026-05-04T21:21:34Z\"}", "test.appstudio.openshift.io/integration-workflow": "push", "test.appstudio.openshift.io/pipelinerunstarttime": "1777929084000", "test.appstudio.openshift.io/source-repo-url": "https://github.com/rhads-tsf-qe/testrepo", "test.appstudio.openshift.io/status": "[{\"scenario\":\"my-integration-test-rjvu\",\"status\":\"Pending\",\"lastUpdateTime\":\"2026-05-04T21:21:34.423507028Z\",\"details\":\"Pending\"}]" }, "creationTimestamp": "2026-05-04T21:21:34Z", "finalizers": [ "test.appstudio.openshift.io/pipelinerun", "results.tekton.dev/pipelinerun", "chains.tekton.dev/pipelinerun" ], "generateName": "my-integration-test-rjvu-", "generation": 1, "labels": { "appstudio.openshift.io/application": "tsf-app", "appstudio.openshift.io/component": "tsf-comp-xr3aq", "appstudio.openshift.io/snapshot": "tsf-app-20260504-211124-000", "build.appstudio.redhat.com/pipeline": "enterprise-contract", "pac.test.appstudio.openshift.io/cancel-in-progress": "false", "pac.test.appstudio.openshift.io/check-run-id": "74307506918", "pac.test.appstudio.openshift.io/event-type": "push", "pac.test.appstudio.openshift.io/original-prname": "tsf-comp-xr3aq-on-push", "pac.test.appstudio.openshift.io/repository": "tsf-comp-xr3aq", "pac.test.appstudio.openshift.io/sha": "41193736d88ff78f7e02b3ab323157460ddd3c83", "pac.test.appstudio.openshift.io/state": "started", "pac.test.appstudio.openshift.io/url-org": "rhads-tsf-qe", "pac.test.appstudio.openshift.io/url-repository": "testrepo", "pipelines.appstudio.openshift.io/type": "test", "tekton.dev/pipeline": "enterprise-contract", "test.appstudio.openshift.io/optional": "false", "test.appstudio.openshift.io/pipelinerunfinishtime": "1777929691", "test.appstudio.openshift.io/scenario": "my-integration-test-rjvu", "test.appstudio.openshift.io/type": "component" }, "name": "my-integration-test-rjvu-dpcq6", "namespace": "default-tenant", "ownerReferences": [ { "apiVersion": "appstudio.redhat.com/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "Snapshot", "name": "tsf-app-20260504-211124-000", "uid": "0bb4fc92-028f-4fa9-b126-0bb9f97543aa" } ], "resourceVersion": "49560", "uid": "96c8eb12-81fc-4cbb-8d74-6997506169bb" }, "spec": { "params": [ { "name": "SNAPSHOT", "value": "{\"application\":\"tsf-app\",\"componentGroup\":\"\",\"components\":[{\"name\":\"tsf-comp-xr3aq\",\"version\":\"\",\"containerImage\":\"quay.io/rhtap_qe/default-tenant/tsf-comp-xr3aq@sha256:86a6c031a7d0b89f0974f88364966c81ba0a8965860f132760a9e1a0908951a8\",\"source\":{\"git\":{\"url\":\"https://github.com/rhads-tsf-qe/testrepo\",\"revision\":\"41193736d88ff78f7e02b3ab323157460ddd3c83\"}}}],\"artifacts\":{}}" } ], "pipelineRef": { "params": [ { "name": "url", "value": "https://github.com/konflux-ci/build-definitions" }, { "name": "revision", "value": "main" }, { "name": "pathInRepo", "value": "pipelines/enterprise-contract.yaml" } ], "resolver": "git" }, "taskRunTemplate": { "serviceAccountName": "konflux-integration-runner" }, "timeouts": { "pipeline": "1h0m0s" } }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "my-integration-test-rjvu-dpcq6-collect-keyless-params", "pipelineTaskName": "collect-keyless-params" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "my-integration-test-rjvu-dpcq6-verify", "pipelineTaskName": "verify" } ], "conditions": [ { "lastTransitionTime": "2026-05-04T21:21:51Z", "message": "Tasks Completed: 1 (Failed: 0, Cancelled 0), Incomplete: 1, Skipped: 0", "reason": "Running", "status": "Unknown", "type": "Succeeded" } ], "pipelineSpec": { "params": [ { "description": "Spec section of an ApplicationSnapshot resource. Not all fields of the\nresource are required. A minimal example:\n {\n \"components\": [\n {\n \"containerImage\": \"quay.io/example/repo:latest\"\n }\n ]\n }\nEach \"containerImage\" in the \"components\" array is validated.\n", "name": "SNAPSHOT", "type": "string" }, { "default": "enterprise-contract-service/default", "description": "Name of the policy configuration (EnterpriseContractConfiguration\nobject) to use. `namespace/name` or `name` syntax supported. If\nnamespace is omitted the namespace where the task runs is used.\n", "name": "POLICY_CONFIGURATION", "type": "string" }, { "default": "", "description": "Path to a directory containing SSL certs to be used when communicating\nwith external services. This is useful when using the integrated registry\nand a local instance of Rekor on a development cluster which may use\ncertificates issued by a not-commonly trusted root CA. In such cases,\n\"/var/run/secrets/kubernetes.io/serviceaccount\" is a good value. Multiple\npaths can be provided by using the \":\" separator.\n", "name": "SSL_CERT_DIR", "type": "string" }, { "default": "k8s://openshift-pipelines/public-key", "description": "Public key used to verify signatures. Must be a valid k8s cosign\nreference, e.g. k8s://my-space/my-secret where my-secret contains\nthe expected cosign.pub attribute.\n", "name": "PUBLIC_KEY", "type": "string" }, { "default": "1", "description": "Number of parallel workers to use for policy evaluation.", "name": "WORKERS", "type": "string" }, { "default": "trusted-ca", "description": "The name of the ConfigMap to read CA bundle data from.", "name": "CA_TRUST_CONFIGMAP_NAME", "type": "string" }, { "default": "ca-bundle.crt", "description": "The name of the key in the ConfigMap that contains the CA bundle data.", "name": "CA_TRUST_CONFIG_MAP_KEY", "type": "string" }, { "default": "", "description": "Merge additional Rego variables into the policy data. Use syntax \"key=value,key2=value2...\"", "name": "EXTRA_RULE_DATA", "type": "string" }, { "default": "false", "description": "Reduce the Snapshot to only the component whose build caused the Snapshot to be created", "name": "SINGLE_COMPONENT", "type": "string" }, { "default": "pr/$(context.pipelineRun.name)", "description": "PipelineRun ID", "name": "SINGLE_COMPONENT_CUSTOM_RESOURCE", "type": "string" }, { "default": "true", "description": "A boolean flag that determines whether the result of the test will mark the TaskRun as passing or not.\nSwap to false to make the IntegrationTestScenario informative.\n\nSetting to false is useful on specific conditions but will always mark the integration test as successful and\nhumans will tend to ignore the test results if they failed. Use with caution.\n", "name": "STRICT", "type": "string" } ], "results": [ { "description": "", "name": "TEST_OUTPUT", "value": "$(tasks.verify.results.TEST_OUTPUT)" } ], "tasks": [ { "name": "collect-keyless-params", "taskRef": { "params": [ { "name": "bundle", "value": "quay.io/conforma/tekton-task:konflux" }, { "name": "name", "value": "collect-keyless-params" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "verify", "params": [ { "name": "POLICY_CONFIGURATION", "value": "enterprise-contract-service/default" }, { "name": "IMAGES", "value": "{\"application\":\"tsf-app\",\"componentGroup\":\"\",\"components\":[{\"name\":\"tsf-comp-xr3aq\",\"version\":\"\",\"containerImage\":\"quay.io/rhtap_qe/default-tenant/tsf-comp-xr3aq@sha256:86a6c031a7d0b89f0974f88364966c81ba0a8965860f132760a9e1a0908951a8\",\"source\":{\"git\":{\"url\":\"https://github.com/rhads-tsf-qe/testrepo\",\"revision\":\"41193736d88ff78f7e02b3ab323157460ddd3c83\"}}}],\"artifacts\":{}}" }, { "name": "SSL_CERT_DIR", "value": "" }, { "name": "STRICT", "value": "true" }, { "name": "PUBLIC_KEY", "value": "k8s://openshift-pipelines/public-key" }, { "name": "IGNORE_REKOR", "value": "true" }, { "name": "CERTIFICATE_OIDC_ISSUER", "value": "$(tasks.collect-keyless-params.results.defaultOIDCIssuer)" }, { "name": "CERTIFICATE_IDENTITY", "value": "$(tasks.collect-keyless-params.results.tektonChainsIdentity)" }, { "name": "TUF_MIRROR", "value": "$(tasks.collect-keyless-params.results.tufUrl)" }, { "name": "REKOR_HOST", "value": "$(tasks.collect-keyless-params.results.rekorUrl)" }, { "name": "WORKERS", "value": "1" }, { "name": "CA_TRUST_CONFIGMAP_NAME", "value": "trusted-ca" }, { "name": "CA_TRUST_CONFIG_MAP_KEY", "value": "ca-bundle.crt" }, { "name": "EXTRA_RULE_DATA", "value": "" }, { "name": "SINGLE_COMPONENT", "value": "false" }, { "name": "SINGLE_COMPONENT_CUSTOM_RESOURCE", "value": "pr/my-integration-test-rjvu-dpcq6" } ], "runAfter": [ "collect-keyless-params" ], "taskRef": { "params": [ { "name": "bundle", "value": "quay.io/conforma/tekton-task:konflux" }, { "name": "name", "value": "verify-enterprise-contract" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "timeout": "4h0m0s" } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" }, "refSource": { "digest": { "sha1": "890952c6ab97e0c3a6bd927909925db542650398" }, "entryPoint": "pipelines/enterprise-contract.yaml", "uri": "git+https://github.com/konflux-ci/build-definitions" } }, "startTime": "2026-05-04T21:21:34Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.openshift.io/repo": "https://github.com/rhads-tsf-qe/testrepo?rev=1c3c00c3d7bbb6b3f7648131b9e5a30fc1235983", "build.appstudio.redhat.com/commit_sha": "1c3c00c3d7bbb6b3f7648131b9e5a30fc1235983", "build.appstudio.redhat.com/pull_request_number": "302", "build.appstudio.redhat.com/target_branch": "base-fchtjt", "chains.tekton.dev/signed": "true", "chains.tekton.dev/transparency": "http://rekor-server.tsf-tas.svc.cluster.local/api/v1/log/entries?logIndex=22", "pipelinesascode.tekton.dev/branch": "base-fchtjt", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74307848904", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-xevbxn", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "112348674", "pipelinesascode.tekton.dev/log-url": "https://konflux-ui-konflux-ui.apps.rosa.kx-18892726ba.5e3o.p3.openshiftapps.com/ns/default-tenant/pipelinerun/tsf-comp-1lz9j-on-pull-request-qdkpv", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"base-fchtjt\"", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-1lz9j-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "302", "pipelinesascode.tekton.dev/repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhads-tsf-ci[bot]", "pipelinesascode.tekton.dev/sha": "1c3c00c3d7bbb6b3f7648131b9e5a30fc1235983", "pipelinesascode.tekton.dev/sha-title": "RHADS-TSF-CI update tsf-comp-1lz9j", "pipelinesascode.tekton.dev/sha-url": "https://github.com/rhads-tsf-qe/testrepo/commit/1c3c00c3d7bbb6b3f7648131b9e5a30fc1235983", "pipelinesascode.tekton.dev/source-branch": "konflux-tsf-comp-1lz9j", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "results.tekton.dev/record": "default-tenant/results/39f46637-1e05-4698-b113-ce39e16ed2b2/records/39f46637-1e05-4698-b113-ce39e16ed2b2", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"testrepo\",\"commit\":\"1c3c00c3d7bbb6b3f7648131b9e5a30fc1235983\",\"eventType\":\"pull_request\",\"pull_request-id\":302}", "results.tekton.dev/result": "default-tenant/results/39f46637-1e05-4698-b113-ce39e16ed2b2", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Failed to create snapshot. Error: Component.appstudio.redhat.com \\\"tsf-comp-1lz9j\\\" not found\",\"status\":\"failed\"}" }, "creationTimestamp": "2026-05-04T21:13:39Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer", "results.tekton.dev/pipelinerun" ], "generateName": "tsf-comp-1lz9j-on-pull-request-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.37.7", "appstudio.openshift.io/application": "tsf-app", "appstudio.openshift.io/component": "tsf-comp-1lz9j", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74307848904", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-1lz9j-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "302", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/sha": "1c3c00c3d7bbb6b3f7648131b9e5a30fc1235983", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "tekton.dev/pipeline": "tsf-comp-1lz9j-on-pull-request-qdkpv" }, "name": "tsf-comp-1lz9j-on-pull-request-qdkpv", "namespace": "default-tenant", "resourceVersion": "44413", "uid": "39f46637-1e05-4698-b113-ce39e16ed2b2" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "1c3c00c3d7bbb6b3f7648131b9e5a30fc1235983" }, { "name": "output-image", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-1lz9j:on-pr-1c3c00c3d7bbb6b3f7648131b9e5a30fc1235983" }, { "name": "image-expires-after", "value": "5d" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-tsf-comp-1lz9j" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-xevbxn" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-1lz9j-on-pull-request-qdkpv-init", "pipelineTaskName": "init" } ], "completionTime": "2026-05-04T21:13:50Z", "conditions": [ { "lastTransitionTime": "2026-05-04T21:13:50Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 10", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "1c3c00c3d7bbb6b3f7648131b9e5a30fc1235983" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-1lz9j:on-pr-1c3c00c3d7bbb6b3f7648131b9e5a30fc1235983.git" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-1lz9j:on-pr-1c3c00c3d7bbb6b3f7648131b9e5a30fc1235983.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-1lz9j:on-pr-1c3c00c3d7bbb6b3f7648131b9e5a30fc1235983" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "5d" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-1lz9j:on-pr-1c3c00c3d7bbb6b3f7648131b9e5a30fc1235983" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "skippedTasks": [ { "name": "clone-repository", "reason": "PipelineRun was stopping" }, { "name": "prefetch-dependencies", "reason": "PipelineRun was stopping" }, { "name": "build-container", "reason": "PipelineRun was stopping" }, { "name": "build-image-index", "reason": "PipelineRun was stopping" }, { "name": "deprecated-base-image-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "startTime": "2026-05-04T21:13:39Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.openshift.io/repo": "https://github.com/rhads-tsf-qe/testrepo?rev=83461b75ad70279661f8ac127dc0afee96ba6d58", "build.appstudio.redhat.com/commit_sha": "83461b75ad70279661f8ac127dc0afee96ba6d58", "build.appstudio.redhat.com/target_branch": "base-fchtjt", "chains.tekton.dev/signed": "true", "chains.tekton.dev/transparency": "http://rekor-server.tsf-tas.svc.cluster.local/api/v1/log/entries?logIndex=26", "pipelinesascode.tekton.dev/branch": "base-fchtjt", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "74307878713", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-yobiye", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "112348674", "pipelinesascode.tekton.dev/log-url": "https://konflux-ui-konflux-ui.apps.rosa.kx-18892726ba.5e3o.p3.openshiftapps.com/ns/default-tenant/pipelinerun/tsf-comp-1lz9j-on-push-58ff5", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"push\" \u0026\u0026 target_branch == \"base-fchtjt\"", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-1lz9j-on-push", "pipelinesascode.tekton.dev/repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-ci-tests-bot", "pipelinesascode.tekton.dev/sha": "83461b75ad70279661f8ac127dc0afee96ba6d58", "pipelinesascode.tekton.dev/sha-title": "Merge pull request #302 from rhads-tsf-qe/konflux-tsf-comp-1lz9j", "pipelinesascode.tekton.dev/sha-url": "https://github.com/rhads-tsf-qe/testrepo/commit/83461b75ad70279661f8ac127dc0afee96ba6d58", "pipelinesascode.tekton.dev/source-branch": "refs/heads/base-fchtjt", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "results.tekton.dev/record": "default-tenant/results/18c4da09-c970-4cbe-aed6-5045217b2985/records/18c4da09-c970-4cbe-aed6-5045217b2985", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"testrepo\",\"commit\":\"83461b75ad70279661f8ac127dc0afee96ba6d58\",\"eventType\":\"push\"}", "results.tekton.dev/result": "default-tenant/results/18c4da09-c970-4cbe-aed6-5045217b2985", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Failed to create snapshot. Error: Component.appstudio.redhat.com \\\"tsf-comp-1lz9j\\\" not found\",\"status\":\"failed\"}" }, "creationTimestamp": "2026-05-04T21:13:51Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer", "results.tekton.dev/pipelinerun" ], "generateName": "tsf-comp-1lz9j-on-push-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.37.7", "appstudio.openshift.io/application": "tsf-app", "appstudio.openshift.io/component": "tsf-comp-1lz9j", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "74307878713", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-1lz9j-on-push", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/sha": "83461b75ad70279661f8ac127dc0afee96ba6d58", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "tekton.dev/pipeline": "tsf-comp-1lz9j-on-push-58ff5" }, "name": "tsf-comp-1lz9j-on-push-58ff5", "namespace": "default-tenant", "resourceVersion": "44654", "uid": "18c4da09-c970-4cbe-aed6-5045217b2985" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "83461b75ad70279661f8ac127dc0afee96ba6d58" }, { "name": "output-image", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-1lz9j:83461b75ad70279661f8ac127dc0afee96ba6d58" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-tsf-comp-1lz9j" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-yobiye" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-1lz9j-on-push-58ff5-init", "pipelineTaskName": "init" } ], "completionTime": "2026-05-04T21:14:02Z", "conditions": [ { "lastTransitionTime": "2026-05-04T21:14:02Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 10", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "83461b75ad70279661f8ac127dc0afee96ba6d58" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-1lz9j:83461b75ad70279661f8ac127dc0afee96ba6d58.git" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-1lz9j:83461b75ad70279661f8ac127dc0afee96ba6d58.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-1lz9j:83461b75ad70279661f8ac127dc0afee96ba6d58" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-1lz9j:83461b75ad70279661f8ac127dc0afee96ba6d58" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "skippedTasks": [ { "name": "clone-repository", "reason": "PipelineRun was stopping" }, { "name": "prefetch-dependencies", "reason": "PipelineRun was stopping" }, { "name": "build-container", "reason": "PipelineRun was stopping" }, { "name": "build-image-index", "reason": "PipelineRun was stopping" }, { "name": "deprecated-base-image-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "startTime": "2026-05-04T21:13:51Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.openshift.io/repo": "https://github.com/rhads-tsf-qe/testrepo?rev=009cd85fcc4f7015c0e78172c429ee47b025cbd1", "build.appstudio.redhat.com/commit_sha": "009cd85fcc4f7015c0e78172c429ee47b025cbd1", "build.appstudio.redhat.com/pull_request_number": "304", "build.appstudio.redhat.com/target_branch": "base-odqbip", "chains.tekton.dev/signed": "true", "chains.tekton.dev/transparency": "http://rekor-server.tsf-tas.svc.cluster.local/api/v1/log/entries?logIndex=28", "pipelinesascode.tekton.dev/branch": "base-odqbip", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74308128652", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-muldtw", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "112348674", "pipelinesascode.tekton.dev/log-url": "https://konflux-ui-konflux-ui.apps.rosa.kx-18892726ba.5e3o.p3.openshiftapps.com/ns/default-tenant/pipelinerun/tsf-comp-5p9ht-on-pull-request-mxxkl", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"base-odqbip\"", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-5p9ht-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "304", "pipelinesascode.tekton.dev/repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhads-tsf-ci[bot]", "pipelinesascode.tekton.dev/sha": "009cd85fcc4f7015c0e78172c429ee47b025cbd1", "pipelinesascode.tekton.dev/sha-title": "RHADS-TSF-CI update tsf-comp-5p9ht", "pipelinesascode.tekton.dev/sha-url": "https://github.com/rhads-tsf-qe/testrepo/commit/009cd85fcc4f7015c0e78172c429ee47b025cbd1", "pipelinesascode.tekton.dev/source-branch": "konflux-tsf-comp-5p9ht", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "results.tekton.dev/record": "default-tenant/results/a1e6b53c-1ecc-464a-b2a4-a4e79a9fed1a/records/a1e6b53c-1ecc-464a-b2a4-a4e79a9fed1a", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"testrepo\",\"commit\":\"009cd85fcc4f7015c0e78172c429ee47b025cbd1\",\"eventType\":\"pull_request\",\"pull_request-id\":304}", "results.tekton.dev/result": "default-tenant/results/a1e6b53c-1ecc-464a-b2a4-a4e79a9fed1a", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Failed to create snapshot. Error: Component.appstudio.redhat.com \\\"tsf-comp-5p9ht\\\" not found\",\"status\":\"failed\"}" }, "creationTimestamp": "2026-05-04T21:15:31Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "tsf-comp-5p9ht-on-pull-request-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.37.7", "appstudio.openshift.io/application": "tsf-app", "appstudio.openshift.io/component": "tsf-comp-5p9ht", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74308128652", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-5p9ht-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "304", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/sha": "009cd85fcc4f7015c0e78172c429ee47b025cbd1", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "tekton.dev/pipeline": "tsf-comp-5p9ht-on-pull-request-mxxkl" }, "name": "tsf-comp-5p9ht-on-pull-request-mxxkl", "namespace": "default-tenant", "resourceVersion": "45511", "uid": "a1e6b53c-1ecc-464a-b2a4-a4e79a9fed1a" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "009cd85fcc4f7015c0e78172c429ee47b025cbd1" }, { "name": "output-image", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-5p9ht:on-pr-009cd85fcc4f7015c0e78172c429ee47b025cbd1" }, { "name": "image-expires-after", "value": "5d" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-tsf-comp-5p9ht" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-muldtw" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-5p9ht-on-pull-request-mxxkl-init", "pipelineTaskName": "init" } ], "completionTime": "2026-05-04T21:15:37Z", "conditions": [ { "lastTransitionTime": "2026-05-04T21:15:37Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 10", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "009cd85fcc4f7015c0e78172c429ee47b025cbd1" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-5p9ht:on-pr-009cd85fcc4f7015c0e78172c429ee47b025cbd1.git" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-5p9ht:on-pr-009cd85fcc4f7015c0e78172c429ee47b025cbd1.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-5p9ht:on-pr-009cd85fcc4f7015c0e78172c429ee47b025cbd1" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "5d" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-5p9ht:on-pr-009cd85fcc4f7015c0e78172c429ee47b025cbd1" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "skippedTasks": [ { "name": "clone-repository", "reason": "PipelineRun was stopping" }, { "name": "prefetch-dependencies", "reason": "PipelineRun was stopping" }, { "name": "build-container", "reason": "PipelineRun was stopping" }, { "name": "build-image-index", "reason": "PipelineRun was stopping" }, { "name": "deprecated-base-image-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "startTime": "2026-05-04T21:15:31Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.openshift.io/repo": "https://github.com/rhads-tsf-qe/testrepo?rev=6ad19af3f706d9bd714fcd8fab42ba77400c9a73", "build.appstudio.redhat.com/commit_sha": "6ad19af3f706d9bd714fcd8fab42ba77400c9a73", "build.appstudio.redhat.com/target_branch": "base-odqbip", "chains.tekton.dev/signed": "true", "chains.tekton.dev/transparency": "http://rekor-server.tsf-tas.svc.cluster.local/api/v1/log/entries?logIndex=30", "pipelinesascode.tekton.dev/branch": "base-odqbip", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "74308160085", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-mzvqvm", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "112348674", "pipelinesascode.tekton.dev/log-url": "https://konflux-ui-konflux-ui.apps.rosa.kx-18892726ba.5e3o.p3.openshiftapps.com/ns/default-tenant/pipelinerun/tsf-comp-5p9ht-on-push-tkbjm", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"push\" \u0026\u0026 target_branch == \"base-odqbip\"", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-5p9ht-on-push", "pipelinesascode.tekton.dev/repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-ci-tests-bot", "pipelinesascode.tekton.dev/sha": "6ad19af3f706d9bd714fcd8fab42ba77400c9a73", "pipelinesascode.tekton.dev/sha-title": "Merge pull request #304 from rhads-tsf-qe/konflux-tsf-comp-5p9ht", "pipelinesascode.tekton.dev/sha-url": "https://github.com/rhads-tsf-qe/testrepo/commit/6ad19af3f706d9bd714fcd8fab42ba77400c9a73", "pipelinesascode.tekton.dev/source-branch": "refs/heads/base-odqbip", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "results.tekton.dev/record": "default-tenant/results/6cb5a438-45d0-47c2-a519-2f85dff914ca/records/6cb5a438-45d0-47c2-a519-2f85dff914ca", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"testrepo\",\"commit\":\"6ad19af3f706d9bd714fcd8fab42ba77400c9a73\",\"eventType\":\"push\"}", "results.tekton.dev/result": "default-tenant/results/6cb5a438-45d0-47c2-a519-2f85dff914ca", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Failed to create snapshot. Error: Component.appstudio.redhat.com \\\"tsf-comp-5p9ht\\\" not found\",\"status\":\"failed\"}" }, "creationTimestamp": "2026-05-04T21:15:44Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "tsf-comp-5p9ht-on-push-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.37.7", "appstudio.openshift.io/application": "tsf-app", "appstudio.openshift.io/component": "tsf-comp-5p9ht", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "74308160085", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-5p9ht-on-push", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/sha": "6ad19af3f706d9bd714fcd8fab42ba77400c9a73", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "tekton.dev/pipeline": "tsf-comp-5p9ht-on-push-tkbjm" }, "name": "tsf-comp-5p9ht-on-push-tkbjm", "namespace": "default-tenant", "resourceVersion": "45723", "uid": "6cb5a438-45d0-47c2-a519-2f85dff914ca" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "6ad19af3f706d9bd714fcd8fab42ba77400c9a73" }, { "name": "output-image", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-5p9ht:6ad19af3f706d9bd714fcd8fab42ba77400c9a73" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-tsf-comp-5p9ht" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-mzvqvm" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-5p9ht-on-push-tkbjm-init", "pipelineTaskName": "init" } ], "completionTime": "2026-05-04T21:15:50Z", "conditions": [ { "lastTransitionTime": "2026-05-04T21:15:50Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 10", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "6ad19af3f706d9bd714fcd8fab42ba77400c9a73" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-5p9ht:6ad19af3f706d9bd714fcd8fab42ba77400c9a73.git" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-5p9ht:6ad19af3f706d9bd714fcd8fab42ba77400c9a73.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-5p9ht:6ad19af3f706d9bd714fcd8fab42ba77400c9a73" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-5p9ht:6ad19af3f706d9bd714fcd8fab42ba77400c9a73" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "skippedTasks": [ { "name": "clone-repository", "reason": "PipelineRun was stopping" }, { "name": "prefetch-dependencies", "reason": "PipelineRun was stopping" }, { "name": "build-container", "reason": "PipelineRun was stopping" }, { "name": "build-image-index", "reason": "PipelineRun was stopping" }, { "name": "deprecated-base-image-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "startTime": "2026-05-04T21:15:44Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.openshift.io/repo": "https://github.com/rhads-tsf-qe/testrepo?rev=9a23f4431365794dac91340591bd97bf1f0fe78f", "build.appstudio.redhat.com/commit_sha": "9a23f4431365794dac91340591bd97bf1f0fe78f", "build.appstudio.redhat.com/pull_request_number": "298", "build.appstudio.redhat.com/target_branch": "base-jlrdkx", "chains.tekton.dev/signed": "true", "chains.tekton.dev/transparency": "http://rekor-server.tsf-tas.svc.cluster.local/api/v1/log/entries?logIndex=2", "pipelinesascode.tekton.dev/branch": "base-jlrdkx", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74307552451", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-enidyq", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "112348674", "pipelinesascode.tekton.dev/log-url": "https://konflux-ui-konflux-ui.apps.rosa.kx-18892726ba.5e3o.p3.openshiftapps.com/ns/default-tenant/pipelinerun/tsf-comp-nmbyi-on-pull-request-5gv79", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"base-jlrdkx\"", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-nmbyi-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "298", "pipelinesascode.tekton.dev/repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhads-tsf-ci[bot]", "pipelinesascode.tekton.dev/sha": "9a23f4431365794dac91340591bd97bf1f0fe78f", "pipelinesascode.tekton.dev/sha-title": "RHADS-TSF-CI update tsf-comp-nmbyi", "pipelinesascode.tekton.dev/sha-url": "https://github.com/rhads-tsf-qe/testrepo/commit/9a23f4431365794dac91340591bd97bf1f0fe78f", "pipelinesascode.tekton.dev/source-branch": "konflux-tsf-comp-nmbyi", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "results.tekton.dev/record": "default-tenant/results/e1bea5f1-cd64-4732-90f9-13d15f8ae320/records/e1bea5f1-cd64-4732-90f9-13d15f8ae320", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"testrepo\",\"commit\":\"9a23f4431365794dac91340591bd97bf1f0fe78f\",\"eventType\":\"pull_request\",\"pull_request-id\":298}", "results.tekton.dev/result": "default-tenant/results/e1bea5f1-cd64-4732-90f9-13d15f8ae320", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Failed to create snapshot. Error: Component.appstudio.redhat.com \\\"tsf-comp-nmbyi\\\" not found\",\"status\":\"failed\"}" }, "creationTimestamp": "2026-05-04T21:11:41Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "tsf-comp-nmbyi-on-pull-request-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.37.7", "appstudio.openshift.io/application": "tsf-app", "appstudio.openshift.io/component": "tsf-comp-nmbyi", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74307552451", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-nmbyi-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "298", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/sha": "9a23f4431365794dac91340591bd97bf1f0fe78f", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "tekton.dev/pipeline": "tsf-comp-nmbyi-on-pull-request-5gv79" }, "name": "tsf-comp-nmbyi-on-pull-request-5gv79", "namespace": "default-tenant", "resourceVersion": "42156", "uid": "e1bea5f1-cd64-4732-90f9-13d15f8ae320" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "9a23f4431365794dac91340591bd97bf1f0fe78f" }, { "name": "output-image", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-nmbyi:on-pr-9a23f4431365794dac91340591bd97bf1f0fe78f" }, { "name": "image-expires-after", "value": "5d" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-tsf-comp-nmbyi" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-enidyq" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-nmbyi-on-pull-request-5gv79-init", "pipelineTaskName": "init" } ], "completionTime": "2026-05-04T21:11:51Z", "conditions": [ { "lastTransitionTime": "2026-05-04T21:11:51Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 10", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "9a23f4431365794dac91340591bd97bf1f0fe78f" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-nmbyi:on-pr-9a23f4431365794dac91340591bd97bf1f0fe78f.git" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-nmbyi:on-pr-9a23f4431365794dac91340591bd97bf1f0fe78f.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-nmbyi:on-pr-9a23f4431365794dac91340591bd97bf1f0fe78f" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "5d" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-nmbyi:on-pr-9a23f4431365794dac91340591bd97bf1f0fe78f" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "skippedTasks": [ { "name": "clone-repository", "reason": "PipelineRun was stopping" }, { "name": "prefetch-dependencies", "reason": "PipelineRun was stopping" }, { "name": "build-container", "reason": "PipelineRun was stopping" }, { "name": "build-image-index", "reason": "PipelineRun was stopping" }, { "name": "deprecated-base-image-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "startTime": "2026-05-04T21:11:41Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.openshift.io/repo": "https://github.com/rhads-tsf-qe/testrepo?rev=014e0e934b03f153094d9ba2c62e330b802cfae2", "build.appstudio.redhat.com/commit_sha": "014e0e934b03f153094d9ba2c62e330b802cfae2", "build.appstudio.redhat.com/target_branch": "base-jlrdkx", "chains.tekton.dev/signed": "true", "chains.tekton.dev/transparency": "http://rekor-server.tsf-tas.svc.cluster.local/api/v1/log/entries?logIndex=5", "pipelinesascode.tekton.dev/branch": "base-jlrdkx", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "74307593005", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-lepxil", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "112348674", "pipelinesascode.tekton.dev/log-url": "https://konflux-ui-konflux-ui.apps.rosa.kx-18892726ba.5e3o.p3.openshiftapps.com/ns/default-tenant/pipelinerun/tsf-comp-nmbyi-on-push-rpxpg", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"push\" \u0026\u0026 target_branch == \"base-jlrdkx\"", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-nmbyi-on-push", "pipelinesascode.tekton.dev/pull-request": "298", "pipelinesascode.tekton.dev/repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-ci-tests-bot", "pipelinesascode.tekton.dev/sha": "014e0e934b03f153094d9ba2c62e330b802cfae2", "pipelinesascode.tekton.dev/sha-title": "Merge pull request #298 from rhads-tsf-qe/konflux-tsf-comp-nmbyi", "pipelinesascode.tekton.dev/sha-url": "https://github.com/rhads-tsf-qe/testrepo/commit/014e0e934b03f153094d9ba2c62e330b802cfae2", "pipelinesascode.tekton.dev/source-branch": "refs/heads/base-jlrdkx", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "results.tekton.dev/record": "default-tenant/results/3cd8b4bc-1495-4c2b-b18b-cf90cd7c4284/records/3cd8b4bc-1495-4c2b-b18b-cf90cd7c4284", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"testrepo\",\"commit\":\"014e0e934b03f153094d9ba2c62e330b802cfae2\",\"eventType\":\"push\",\"pull_request-id\":298}", "results.tekton.dev/result": "default-tenant/results/3cd8b4bc-1495-4c2b-b18b-cf90cd7c4284", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Failed to create snapshot. Error: Component.appstudio.redhat.com \\\"tsf-comp-nmbyi\\\" not found\",\"status\":\"failed\"}" }, "creationTimestamp": "2026-05-04T21:11:56Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "tsf-comp-nmbyi-on-push-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.37.7", "appstudio.openshift.io/application": "tsf-app", "appstudio.openshift.io/component": "tsf-comp-nmbyi", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "74307593005", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-nmbyi-on-push", "pipelinesascode.tekton.dev/pull-request": "298", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/sha": "014e0e934b03f153094d9ba2c62e330b802cfae2", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "tekton.dev/pipeline": "tsf-comp-nmbyi-on-push-rpxpg" }, "name": "tsf-comp-nmbyi-on-push-rpxpg", "namespace": "default-tenant", "resourceVersion": "42425", "uid": "3cd8b4bc-1495-4c2b-b18b-cf90cd7c4284" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "014e0e934b03f153094d9ba2c62e330b802cfae2" }, { "name": "output-image", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-nmbyi:014e0e934b03f153094d9ba2c62e330b802cfae2" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-tsf-comp-nmbyi" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-lepxil" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-nmbyi-on-push-rpxpg-init", "pipelineTaskName": "init" } ], "completionTime": "2026-05-04T21:12:07Z", "conditions": [ { "lastTransitionTime": "2026-05-04T21:12:07Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 10", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "014e0e934b03f153094d9ba2c62e330b802cfae2" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-nmbyi:014e0e934b03f153094d9ba2c62e330b802cfae2.git" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-nmbyi:014e0e934b03f153094d9ba2c62e330b802cfae2.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-nmbyi:014e0e934b03f153094d9ba2c62e330b802cfae2" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-nmbyi:014e0e934b03f153094d9ba2c62e330b802cfae2" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "skippedTasks": [ { "name": "clone-repository", "reason": "PipelineRun was stopping" }, { "name": "prefetch-dependencies", "reason": "PipelineRun was stopping" }, { "name": "build-container", "reason": "PipelineRun was stopping" }, { "name": "build-image-index", "reason": "PipelineRun was stopping" }, { "name": "deprecated-base-image-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "startTime": "2026-05-04T21:11:57Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.openshift.io/repo": "https://github.com/rhads-tsf-qe/testrepo?rev=33d4e46fa8dd55a9fc252630b46a56b87ecb864a", "build.appstudio.redhat.com/commit_sha": "33d4e46fa8dd55a9fc252630b46a56b87ecb864a", "build.appstudio.redhat.com/pull_request_number": "299", "build.appstudio.redhat.com/target_branch": "base-dzyfpk", "chains.tekton.dev/signed": "true", "chains.tekton.dev/transparency": "http://rekor-server.tsf-tas.svc.cluster.local/api/v1/log/entries?logIndex=7", "pipelinesascode.tekton.dev/branch": "base-dzyfpk", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74307642517", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-fsewfb", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "112348674", "pipelinesascode.tekton.dev/log-url": "https://konflux-ui-konflux-ui.apps.rosa.kx-18892726ba.5e3o.p3.openshiftapps.com/ns/default-tenant/pipelinerun/tsf-comp-oqu9x-on-pull-request-hzh85", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"base-dzyfpk\"", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-oqu9x-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "299", "pipelinesascode.tekton.dev/repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhads-tsf-ci[bot]", "pipelinesascode.tekton.dev/sha": "33d4e46fa8dd55a9fc252630b46a56b87ecb864a", "pipelinesascode.tekton.dev/sha-title": "RHADS-TSF-CI update tsf-comp-oqu9x", "pipelinesascode.tekton.dev/sha-url": "https://github.com/rhads-tsf-qe/testrepo/commit/33d4e46fa8dd55a9fc252630b46a56b87ecb864a", "pipelinesascode.tekton.dev/source-branch": "konflux-tsf-comp-oqu9x", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "results.tekton.dev/record": "default-tenant/results/d03740e2-121b-4247-8339-3a2b7c1fb2dd/records/d03740e2-121b-4247-8339-3a2b7c1fb2dd", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"testrepo\",\"commit\":\"33d4e46fa8dd55a9fc252630b46a56b87ecb864a\",\"eventType\":\"pull_request\",\"pull_request-id\":299}", "results.tekton.dev/result": "default-tenant/results/d03740e2-121b-4247-8339-3a2b7c1fb2dd", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Failed to create snapshot. Error: Component.appstudio.redhat.com \\\"tsf-comp-oqu9x\\\" not found\",\"status\":\"failed\"}" }, "creationTimestamp": "2026-05-04T21:12:16Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "tsf-comp-oqu9x-on-pull-request-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.37.7", "appstudio.openshift.io/application": "tsf-app", "appstudio.openshift.io/component": "tsf-comp-oqu9x", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74307642517", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-oqu9x-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "299", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/sha": "33d4e46fa8dd55a9fc252630b46a56b87ecb864a", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "tekton.dev/pipeline": "tsf-comp-oqu9x-on-pull-request-hzh85" }, "name": "tsf-comp-oqu9x-on-pull-request-hzh85", "namespace": "default-tenant", "resourceVersion": "42689", "uid": "d03740e2-121b-4247-8339-3a2b7c1fb2dd" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "33d4e46fa8dd55a9fc252630b46a56b87ecb864a" }, { "name": "output-image", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-oqu9x:on-pr-33d4e46fa8dd55a9fc252630b46a56b87ecb864a" }, { "name": "image-expires-after", "value": "5d" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-tsf-comp-oqu9x" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-fsewfb" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-oqu9x-on-pull-request-hzh85-init", "pipelineTaskName": "init" } ], "completionTime": "2026-05-04T21:12:23Z", "conditions": [ { "lastTransitionTime": "2026-05-04T21:12:23Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 10", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "33d4e46fa8dd55a9fc252630b46a56b87ecb864a" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-oqu9x:on-pr-33d4e46fa8dd55a9fc252630b46a56b87ecb864a.git" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-oqu9x:on-pr-33d4e46fa8dd55a9fc252630b46a56b87ecb864a.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-oqu9x:on-pr-33d4e46fa8dd55a9fc252630b46a56b87ecb864a" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "5d" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-oqu9x:on-pr-33d4e46fa8dd55a9fc252630b46a56b87ecb864a" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "skippedTasks": [ { "name": "clone-repository", "reason": "PipelineRun was stopping" }, { "name": "prefetch-dependencies", "reason": "PipelineRun was stopping" }, { "name": "build-container", "reason": "PipelineRun was stopping" }, { "name": "build-image-index", "reason": "PipelineRun was stopping" }, { "name": "deprecated-base-image-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "startTime": "2026-05-04T21:12:16Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.openshift.io/repo": "https://github.com/rhads-tsf-qe/testrepo?rev=42f5d10e363a5582848c46ffe3b3ad8f0c7e60a7", "build.appstudio.redhat.com/commit_sha": "42f5d10e363a5582848c46ffe3b3ad8f0c7e60a7", "build.appstudio.redhat.com/target_branch": "base-dzyfpk", "chains.tekton.dev/signed": "true", "chains.tekton.dev/transparency": "http://rekor-server.tsf-tas.svc.cluster.local/api/v1/log/entries?logIndex=9", "pipelinesascode.tekton.dev/branch": "base-dzyfpk", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "74307678506", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-vtrbnv", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "112348674", "pipelinesascode.tekton.dev/log-url": "https://konflux-ui-konflux-ui.apps.rosa.kx-18892726ba.5e3o.p3.openshiftapps.com/ns/default-tenant/pipelinerun/tsf-comp-oqu9x-on-push-d764j", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"push\" \u0026\u0026 target_branch == \"base-dzyfpk\"", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-oqu9x-on-push", "pipelinesascode.tekton.dev/repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-ci-tests-bot", "pipelinesascode.tekton.dev/sha": "42f5d10e363a5582848c46ffe3b3ad8f0c7e60a7", "pipelinesascode.tekton.dev/sha-title": "Merge pull request #299 from rhads-tsf-qe/konflux-tsf-comp-oqu9x", "pipelinesascode.tekton.dev/sha-url": "https://github.com/rhads-tsf-qe/testrepo/commit/42f5d10e363a5582848c46ffe3b3ad8f0c7e60a7", "pipelinesascode.tekton.dev/source-branch": "refs/heads/base-dzyfpk", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "results.tekton.dev/record": "default-tenant/results/067ac281-90f1-441d-bc4f-e71edaf659a6/records/067ac281-90f1-441d-bc4f-e71edaf659a6", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"testrepo\",\"commit\":\"42f5d10e363a5582848c46ffe3b3ad8f0c7e60a7\",\"eventType\":\"push\"}", "results.tekton.dev/result": "default-tenant/results/067ac281-90f1-441d-bc4f-e71edaf659a6", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Failed to create snapshot. Error: Component.appstudio.redhat.com \\\"tsf-comp-oqu9x\\\" not found\",\"status\":\"failed\"}" }, "creationTimestamp": "2026-05-04T21:12:30Z", "finalizers": [ "results.tekton.dev/pipelinerun", "chains.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "tsf-comp-oqu9x-on-push-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.37.7", "appstudio.openshift.io/application": "tsf-app", "appstudio.openshift.io/component": "tsf-comp-oqu9x", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "74307678506", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-oqu9x-on-push", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/sha": "42f5d10e363a5582848c46ffe3b3ad8f0c7e60a7", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "tekton.dev/pipeline": "tsf-comp-oqu9x-on-push-d764j" }, "name": "tsf-comp-oqu9x-on-push-d764j", "namespace": "default-tenant", "resourceVersion": "42890", "uid": "067ac281-90f1-441d-bc4f-e71edaf659a6" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "42f5d10e363a5582848c46ffe3b3ad8f0c7e60a7" }, { "name": "output-image", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-oqu9x:42f5d10e363a5582848c46ffe3b3ad8f0c7e60a7" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-tsf-comp-oqu9x" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-vtrbnv" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-oqu9x-on-push-d764j-init", "pipelineTaskName": "init" } ], "completionTime": "2026-05-04T21:12:36Z", "conditions": [ { "lastTransitionTime": "2026-05-04T21:12:36Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 10", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "42f5d10e363a5582848c46ffe3b3ad8f0c7e60a7" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-oqu9x:42f5d10e363a5582848c46ffe3b3ad8f0c7e60a7.git" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-oqu9x:42f5d10e363a5582848c46ffe3b3ad8f0c7e60a7.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-oqu9x:42f5d10e363a5582848c46ffe3b3ad8f0c7e60a7" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-oqu9x:42f5d10e363a5582848c46ffe3b3ad8f0c7e60a7" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "skippedTasks": [ { "name": "clone-repository", "reason": "PipelineRun was stopping" }, { "name": "prefetch-dependencies", "reason": "PipelineRun was stopping" }, { "name": "build-container", "reason": "PipelineRun was stopping" }, { "name": "build-image-index", "reason": "PipelineRun was stopping" }, { "name": "deprecated-base-image-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "startTime": "2026-05-04T21:12:30Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.openshift.io/repo": "https://github.com/rhads-tsf-qe/testrepo?rev=12f62716e99712c3ab6ec26a253352b4df5dfe32", "build.appstudio.redhat.com/commit_sha": "12f62716e99712c3ab6ec26a253352b4df5dfe32", "build.appstudio.redhat.com/pull_request_number": "303", "build.appstudio.redhat.com/target_branch": "base-kycpow", "chains.tekton.dev/signed": "true", "chains.tekton.dev/transparency": "http://rekor-server.tsf-tas.svc.cluster.local/api/v1/log/entries?logIndex=20", "pipelinesascode.tekton.dev/branch": "base-kycpow", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74307842132", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-rtukrz", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "112348674", "pipelinesascode.tekton.dev/log-url": "https://konflux-ui-konflux-ui.apps.rosa.kx-18892726ba.5e3o.p3.openshiftapps.com/ns/default-tenant/pipelinerun/tsf-comp-sevtz-on-pull-request-hwx2j", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"base-kycpow\"", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-sevtz-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "303", "pipelinesascode.tekton.dev/repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhads-tsf-ci[bot]", "pipelinesascode.tekton.dev/sha": "12f62716e99712c3ab6ec26a253352b4df5dfe32", "pipelinesascode.tekton.dev/sha-title": "RHADS-TSF-CI update tsf-comp-sevtz", "pipelinesascode.tekton.dev/sha-url": "https://github.com/rhads-tsf-qe/testrepo/commit/12f62716e99712c3ab6ec26a253352b4df5dfe32", "pipelinesascode.tekton.dev/source-branch": "konflux-tsf-comp-sevtz", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "results.tekton.dev/record": "default-tenant/results/448a1af6-6ec2-49dc-9048-d6f1e2031411/records/448a1af6-6ec2-49dc-9048-d6f1e2031411", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"testrepo\",\"commit\":\"12f62716e99712c3ab6ec26a253352b4df5dfe32\",\"eventType\":\"pull_request\",\"pull_request-id\":303}", "results.tekton.dev/result": "default-tenant/results/448a1af6-6ec2-49dc-9048-d6f1e2031411", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Failed to create snapshot. Error: Component.appstudio.redhat.com \\\"tsf-comp-sevtz\\\" not found\",\"status\":\"failed\"}" }, "creationTimestamp": "2026-05-04T21:13:37Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "tsf-comp-sevtz-on-pull-request-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.37.7", "appstudio.openshift.io/application": "tsf-app", "appstudio.openshift.io/component": "tsf-comp-sevtz", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74307842132", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-sevtz-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "303", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/sha": "12f62716e99712c3ab6ec26a253352b4df5dfe32", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "tekton.dev/pipeline": "tsf-comp-sevtz-on-pull-request-hwx2j" }, "name": "tsf-comp-sevtz-on-pull-request-hwx2j", "namespace": "default-tenant", "resourceVersion": "44445", "uid": "448a1af6-6ec2-49dc-9048-d6f1e2031411" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "12f62716e99712c3ab6ec26a253352b4df5dfe32" }, { "name": "output-image", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-sevtz:on-pr-12f62716e99712c3ab6ec26a253352b4df5dfe32" }, { "name": "image-expires-after", "value": "5d" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-tsf-comp-sevtz" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-rtukrz" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-sevtz-on-pull-request-hwx2j-init", "pipelineTaskName": "init" } ], "completionTime": "2026-05-04T21:13:47Z", "conditions": [ { "lastTransitionTime": "2026-05-04T21:13:47Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 10", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "12f62716e99712c3ab6ec26a253352b4df5dfe32" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-sevtz:on-pr-12f62716e99712c3ab6ec26a253352b4df5dfe32.git" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-sevtz:on-pr-12f62716e99712c3ab6ec26a253352b4df5dfe32.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-sevtz:on-pr-12f62716e99712c3ab6ec26a253352b4df5dfe32" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "5d" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-sevtz:on-pr-12f62716e99712c3ab6ec26a253352b4df5dfe32" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "skippedTasks": [ { "name": "clone-repository", "reason": "PipelineRun was stopping" }, { "name": "prefetch-dependencies", "reason": "PipelineRun was stopping" }, { "name": "build-container", "reason": "PipelineRun was stopping" }, { "name": "build-image-index", "reason": "PipelineRun was stopping" }, { "name": "deprecated-base-image-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "startTime": "2026-05-04T21:13:37Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.openshift.io/repo": "https://github.com/rhads-tsf-qe/testrepo?rev=76be138374a7ae87563d59fcbb6b6acd1870d33f", "build.appstudio.redhat.com/commit_sha": "76be138374a7ae87563d59fcbb6b6acd1870d33f", "build.appstudio.redhat.com/target_branch": "base-kycpow", "chains.tekton.dev/signed": "true", "chains.tekton.dev/transparency": "http://rekor-server.tsf-tas.svc.cluster.local/api/v1/log/entries?logIndex=25", "pipelinesascode.tekton.dev/branch": "base-kycpow", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "74307878042", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-ibircb", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "112348674", "pipelinesascode.tekton.dev/log-url": "https://konflux-ui-konflux-ui.apps.rosa.kx-18892726ba.5e3o.p3.openshiftapps.com/ns/default-tenant/pipelinerun/tsf-comp-sevtz-on-push-69jgj", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"push\" \u0026\u0026 target_branch == \"base-kycpow\"", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-sevtz-on-push", "pipelinesascode.tekton.dev/pull-request": "303", "pipelinesascode.tekton.dev/repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-ci-tests-bot", "pipelinesascode.tekton.dev/sha": "76be138374a7ae87563d59fcbb6b6acd1870d33f", "pipelinesascode.tekton.dev/sha-title": "Merge pull request #303 from rhads-tsf-qe/konflux-tsf-comp-sevtz", "pipelinesascode.tekton.dev/sha-url": "https://github.com/rhads-tsf-qe/testrepo/commit/76be138374a7ae87563d59fcbb6b6acd1870d33f", "pipelinesascode.tekton.dev/source-branch": "refs/heads/base-kycpow", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "results.tekton.dev/record": "default-tenant/results/778830e2-5325-4182-aa65-e351803763a2/records/778830e2-5325-4182-aa65-e351803763a2", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"testrepo\",\"commit\":\"76be138374a7ae87563d59fcbb6b6acd1870d33f\",\"eventType\":\"push\",\"pull_request-id\":303}", "results.tekton.dev/result": "default-tenant/results/778830e2-5325-4182-aa65-e351803763a2", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Failed to create snapshot. Error: Component.appstudio.redhat.com \\\"tsf-comp-sevtz\\\" not found\",\"status\":\"failed\"}" }, "creationTimestamp": "2026-05-04T21:13:51Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer", "results.tekton.dev/pipelinerun" ], "generateName": "tsf-comp-sevtz-on-push-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.37.7", "appstudio.openshift.io/application": "tsf-app", "appstudio.openshift.io/component": "tsf-comp-sevtz", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "74307878042", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-sevtz-on-push", "pipelinesascode.tekton.dev/pull-request": "303", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/sha": "76be138374a7ae87563d59fcbb6b6acd1870d33f", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "tekton.dev/pipeline": "tsf-comp-sevtz-on-push-69jgj" }, "name": "tsf-comp-sevtz-on-push-69jgj", "namespace": "default-tenant", "resourceVersion": "44639", "uid": "778830e2-5325-4182-aa65-e351803763a2" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "76be138374a7ae87563d59fcbb6b6acd1870d33f" }, { "name": "output-image", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-sevtz:76be138374a7ae87563d59fcbb6b6acd1870d33f" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-tsf-comp-sevtz" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-ibircb" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-sevtz-on-push-69jgj-init", "pipelineTaskName": "init" } ], "completionTime": "2026-05-04T21:14:02Z", "conditions": [ { "lastTransitionTime": "2026-05-04T21:14:02Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 10", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "76be138374a7ae87563d59fcbb6b6acd1870d33f" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-sevtz:76be138374a7ae87563d59fcbb6b6acd1870d33f.git" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-sevtz:76be138374a7ae87563d59fcbb6b6acd1870d33f.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-sevtz:76be138374a7ae87563d59fcbb6b6acd1870d33f" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-sevtz:76be138374a7ae87563d59fcbb6b6acd1870d33f" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "skippedTasks": [ { "name": "clone-repository", "reason": "PipelineRun was stopping" }, { "name": "prefetch-dependencies", "reason": "PipelineRun was stopping" }, { "name": "build-container", "reason": "PipelineRun was stopping" }, { "name": "build-image-index", "reason": "PipelineRun was stopping" }, { "name": "deprecated-base-image-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "startTime": "2026-05-04T21:13:51Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.openshift.io/repo": "https://github.com/rhads-tsf-qe/testrepo?rev=f714892f7fa1e48b8608774c1d58958356cd1d7d", "build.appstudio.redhat.com/commit_sha": "f714892f7fa1e48b8608774c1d58958356cd1d7d", "build.appstudio.redhat.com/pull_request_number": "301", "build.appstudio.redhat.com/target_branch": "base-pnnzti", "chains.tekton.dev/signed": "true", "chains.tekton.dev/transparency": "http://rekor-server.tsf-tas.svc.cluster.local/api/v1/log/entries?logIndex=16", "pipelinesascode.tekton.dev/branch": "base-pnnzti", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74307804319", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-cbzqvj", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "112348674", "pipelinesascode.tekton.dev/log-url": "https://konflux-ui-konflux-ui.apps.rosa.kx-18892726ba.5e3o.p3.openshiftapps.com/ns/default-tenant/pipelinerun/tsf-comp-udo23-on-pull-request-h89rm", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"base-pnnzti\"", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-udo23-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "301", "pipelinesascode.tekton.dev/repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhads-tsf-ci[bot]", "pipelinesascode.tekton.dev/sha": "f714892f7fa1e48b8608774c1d58958356cd1d7d", "pipelinesascode.tekton.dev/sha-title": "RHADS-TSF-CI update tsf-comp-udo23", "pipelinesascode.tekton.dev/sha-url": "https://github.com/rhads-tsf-qe/testrepo/commit/f714892f7fa1e48b8608774c1d58958356cd1d7d", "pipelinesascode.tekton.dev/source-branch": "konflux-tsf-comp-udo23", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "results.tekton.dev/record": "default-tenant/results/bcb73031-71f3-4199-974e-a276520b93b7/records/bcb73031-71f3-4199-974e-a276520b93b7", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"testrepo\",\"commit\":\"f714892f7fa1e48b8608774c1d58958356cd1d7d\",\"eventType\":\"pull_request\",\"pull_request-id\":301}", "results.tekton.dev/result": "default-tenant/results/bcb73031-71f3-4199-974e-a276520b93b7", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Failed to create snapshot. Error: Component.appstudio.redhat.com \\\"tsf-comp-udo23\\\" not found\",\"status\":\"failed\"}" }, "creationTimestamp": "2026-05-04T21:13:20Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "tsf-comp-udo23-on-pull-request-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.37.7", "appstudio.openshift.io/application": "tsf-app", "appstudio.openshift.io/component": "tsf-comp-udo23", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74307804319", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-udo23-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "301", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/sha": "f714892f7fa1e48b8608774c1d58958356cd1d7d", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "tekton.dev/pipeline": "tsf-comp-udo23-on-pull-request-h89rm" }, "name": "tsf-comp-udo23-on-pull-request-h89rm", "namespace": "default-tenant", "resourceVersion": "43808", "uid": "bcb73031-71f3-4199-974e-a276520b93b7" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "f714892f7fa1e48b8608774c1d58958356cd1d7d" }, { "name": "output-image", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-udo23:on-pr-f714892f7fa1e48b8608774c1d58958356cd1d7d" }, { "name": "image-expires-after", "value": "5d" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-tsf-comp-udo23" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-cbzqvj" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-udo23-on-pull-request-h89rm-init", "pipelineTaskName": "init" } ], "completionTime": "2026-05-04T21:13:27Z", "conditions": [ { "lastTransitionTime": "2026-05-04T21:13:27Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 10", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "f714892f7fa1e48b8608774c1d58958356cd1d7d" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-udo23:on-pr-f714892f7fa1e48b8608774c1d58958356cd1d7d.git" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-udo23:on-pr-f714892f7fa1e48b8608774c1d58958356cd1d7d.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-udo23:on-pr-f714892f7fa1e48b8608774c1d58958356cd1d7d" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "5d" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-udo23:on-pr-f714892f7fa1e48b8608774c1d58958356cd1d7d" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "skippedTasks": [ { "name": "clone-repository", "reason": "PipelineRun was stopping" }, { "name": "prefetch-dependencies", "reason": "PipelineRun was stopping" }, { "name": "build-container", "reason": "PipelineRun was stopping" }, { "name": "build-image-index", "reason": "PipelineRun was stopping" }, { "name": "deprecated-base-image-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "startTime": "2026-05-04T21:13:21Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.openshift.io/repo": "https://github.com/rhads-tsf-qe/testrepo?rev=0196dc302141a43c8b4016cc64b4ac43a7dc53f2", "build.appstudio.redhat.com/commit_sha": "0196dc302141a43c8b4016cc64b4ac43a7dc53f2", "build.appstudio.redhat.com/target_branch": "base-pnnzti", "chains.tekton.dev/signed": "true", "chains.tekton.dev/transparency": "http://rekor-server.tsf-tas.svc.cluster.local/api/v1/log/entries?logIndex=18", "pipelinesascode.tekton.dev/branch": "base-pnnzti", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "74307828289", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-wxxasp", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "112348674", "pipelinesascode.tekton.dev/log-url": "https://konflux-ui-konflux-ui.apps.rosa.kx-18892726ba.5e3o.p3.openshiftapps.com/ns/default-tenant/pipelinerun/tsf-comp-udo23-on-push-dxhpk", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"push\" \u0026\u0026 target_branch == \"base-pnnzti\"", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-udo23-on-push", "pipelinesascode.tekton.dev/repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-ci-tests-bot", "pipelinesascode.tekton.dev/sha": "0196dc302141a43c8b4016cc64b4ac43a7dc53f2", "pipelinesascode.tekton.dev/sha-title": "Merge pull request #301 from rhads-tsf-qe/konflux-tsf-comp-udo23", "pipelinesascode.tekton.dev/sha-url": "https://github.com/rhads-tsf-qe/testrepo/commit/0196dc302141a43c8b4016cc64b4ac43a7dc53f2", "pipelinesascode.tekton.dev/source-branch": "refs/heads/base-pnnzti", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "results.tekton.dev/record": "default-tenant/results/71d5a16d-e6fe-4a4e-a688-34cb1e7955d1/records/71d5a16d-e6fe-4a4e-a688-34cb1e7955d1", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"testrepo\",\"commit\":\"0196dc302141a43c8b4016cc64b4ac43a7dc53f2\",\"eventType\":\"push\"}", "results.tekton.dev/result": "default-tenant/results/71d5a16d-e6fe-4a4e-a688-34cb1e7955d1", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Failed to create snapshot. Error: Component.appstudio.redhat.com \\\"tsf-comp-udo23\\\" not found\",\"status\":\"failed\"}" }, "creationTimestamp": "2026-05-04T21:13:31Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "tsf-comp-udo23-on-push-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.37.7", "appstudio.openshift.io/application": "tsf-app", "appstudio.openshift.io/component": "tsf-comp-udo23", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "74307828289", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-udo23-on-push", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/sha": "0196dc302141a43c8b4016cc64b4ac43a7dc53f2", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "tekton.dev/pipeline": "tsf-comp-udo23-on-push-dxhpk" }, "name": "tsf-comp-udo23-on-push-dxhpk", "namespace": "default-tenant", "resourceVersion": "44095", "uid": "71d5a16d-e6fe-4a4e-a688-34cb1e7955d1" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "0196dc302141a43c8b4016cc64b4ac43a7dc53f2" }, { "name": "output-image", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-udo23:0196dc302141a43c8b4016cc64b4ac43a7dc53f2" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-tsf-comp-udo23" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-wxxasp" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-udo23-on-push-dxhpk-init", "pipelineTaskName": "init" } ], "completionTime": "2026-05-04T21:13:38Z", "conditions": [ { "lastTransitionTime": "2026-05-04T21:13:38Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 10", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "0196dc302141a43c8b4016cc64b4ac43a7dc53f2" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-udo23:0196dc302141a43c8b4016cc64b4ac43a7dc53f2.git" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-udo23:0196dc302141a43c8b4016cc64b4ac43a7dc53f2.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-udo23:0196dc302141a43c8b4016cc64b4ac43a7dc53f2" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-udo23:0196dc302141a43c8b4016cc64b4ac43a7dc53f2" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "skippedTasks": [ { "name": "clone-repository", "reason": "PipelineRun was stopping" }, { "name": "prefetch-dependencies", "reason": "PipelineRun was stopping" }, { "name": "build-container", "reason": "PipelineRun was stopping" }, { "name": "build-image-index", "reason": "PipelineRun was stopping" }, { "name": "deprecated-base-image-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "startTime": "2026-05-04T21:13:31Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.openshift.io/repo": "https://github.com/rhads-tsf-qe/testrepo?rev=03c4a5030cf63871b26413d53e292f4a41db8a03", "build.appstudio.redhat.com/commit_sha": "03c4a5030cf63871b26413d53e292f4a41db8a03", "build.appstudio.redhat.com/pull_request_number": "300", "build.appstudio.redhat.com/target_branch": "base-mtpmyn", "chains.tekton.dev/signed": "true", "chains.tekton.dev/transparency": "http://rekor-server.tsf-tas.svc.cluster.local/api/v1/log/entries?logIndex=11", "pipelinesascode.tekton.dev/branch": "base-mtpmyn", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74307737743", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-jbjnao", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "112348674", "pipelinesascode.tekton.dev/log-url": "https://konflux-ui-konflux-ui.apps.rosa.kx-18892726ba.5e3o.p3.openshiftapps.com/ns/default-tenant/pipelinerun/tsf-comp-vno8o-on-pull-request-bvkpg", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"pull_request\" \u0026\u0026 target_branch == \"base-mtpmyn\"", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-vno8o-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "300", "pipelinesascode.tekton.dev/repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhads-tsf-ci[bot]", "pipelinesascode.tekton.dev/sha": "03c4a5030cf63871b26413d53e292f4a41db8a03", "pipelinesascode.tekton.dev/sha-title": "RHADS-TSF-CI update tsf-comp-vno8o", "pipelinesascode.tekton.dev/sha-url": "https://github.com/rhads-tsf-qe/testrepo/commit/03c4a5030cf63871b26413d53e292f4a41db8a03", "pipelinesascode.tekton.dev/source-branch": "konflux-tsf-comp-vno8o", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "results.tekton.dev/record": "default-tenant/results/d3da977f-62e2-4347-b59f-56b5744736dd/records/d3da977f-62e2-4347-b59f-56b5744736dd", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"testrepo\",\"commit\":\"03c4a5030cf63871b26413d53e292f4a41db8a03\",\"eventType\":\"pull_request\",\"pull_request-id\":300}", "results.tekton.dev/result": "default-tenant/results/d3da977f-62e2-4347-b59f-56b5744736dd", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Failed to create snapshot. Error: Component.appstudio.redhat.com \\\"tsf-comp-vno8o\\\" not found\",\"status\":\"failed\"}" }, "creationTimestamp": "2026-05-04T21:12:53Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "tsf-comp-vno8o-on-pull-request-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.37.7", "appstudio.openshift.io/application": "tsf-app", "appstudio.openshift.io/component": "tsf-comp-vno8o", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "true", "pipelinesascode.tekton.dev/check-run-id": "74307737743", "pipelinesascode.tekton.dev/event-type": "pull_request", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-vno8o-on-pull-request", "pipelinesascode.tekton.dev/pull-request": "300", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/sha": "03c4a5030cf63871b26413d53e292f4a41db8a03", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "tekton.dev/pipeline": "tsf-comp-vno8o-on-pull-request-bvkpg" }, "name": "tsf-comp-vno8o-on-pull-request-bvkpg", "namespace": "default-tenant", "resourceVersion": "43240", "uid": "d3da977f-62e2-4347-b59f-56b5744736dd" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "03c4a5030cf63871b26413d53e292f4a41db8a03" }, { "name": "output-image", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-vno8o:on-pr-03c4a5030cf63871b26413d53e292f4a41db8a03" }, { "name": "image-expires-after", "value": "5d" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-tsf-comp-vno8o" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-jbjnao" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-vno8o-on-pull-request-bvkpg-init", "pipelineTaskName": "init" } ], "completionTime": "2026-05-04T21:13:00Z", "conditions": [ { "lastTransitionTime": "2026-05-04T21:13:00Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 10", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "03c4a5030cf63871b26413d53e292f4a41db8a03" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-vno8o:on-pr-03c4a5030cf63871b26413d53e292f4a41db8a03.git" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-vno8o:on-pr-03c4a5030cf63871b26413d53e292f4a41db8a03.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "5d" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-vno8o:on-pr-03c4a5030cf63871b26413d53e292f4a41db8a03" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "5d" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-vno8o:on-pr-03c4a5030cf63871b26413d53e292f4a41db8a03" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "skippedTasks": [ { "name": "clone-repository", "reason": "PipelineRun was stopping" }, { "name": "prefetch-dependencies", "reason": "PipelineRun was stopping" }, { "name": "build-container", "reason": "PipelineRun was stopping" }, { "name": "build-image-index", "reason": "PipelineRun was stopping" }, { "name": "deprecated-base-image-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "startTime": "2026-05-04T21:12:53Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "build.appstudio.openshift.io/repo": "https://github.com/rhads-tsf-qe/testrepo?rev=9e2d5045dc404faea7391c29d49764739a6c2b8f", "build.appstudio.redhat.com/commit_sha": "9e2d5045dc404faea7391c29d49764739a6c2b8f", "build.appstudio.redhat.com/target_branch": "base-mtpmyn", "chains.tekton.dev/signed": "true", "chains.tekton.dev/transparency": "http://rekor-server.tsf-tas.svc.cluster.local/api/v1/log/entries?logIndex=14", "pipelinesascode.tekton.dev/branch": "base-mtpmyn", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "74307766765", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-sfgkay", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "112348674", "pipelinesascode.tekton.dev/log-url": "https://konflux-ui-konflux-ui.apps.rosa.kx-18892726ba.5e3o.p3.openshiftapps.com/ns/default-tenant/pipelinerun/tsf-comp-vno8o-on-push-ctlmf", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"push\" \u0026\u0026 target_branch == \"base-mtpmyn\"", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-vno8o-on-push", "pipelinesascode.tekton.dev/repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-ci-tests-bot", "pipelinesascode.tekton.dev/sha": "9e2d5045dc404faea7391c29d49764739a6c2b8f", "pipelinesascode.tekton.dev/sha-title": "Merge pull request #300 from rhads-tsf-qe/konflux-tsf-comp-vno8o", "pipelinesascode.tekton.dev/sha-url": "https://github.com/rhads-tsf-qe/testrepo/commit/9e2d5045dc404faea7391c29d49764739a6c2b8f", "pipelinesascode.tekton.dev/source-branch": "refs/heads/base-mtpmyn", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "results.tekton.dev/record": "default-tenant/results/ee055ca3-68ec-45cf-b2a0-a79d5423cee9/records/ee055ca3-68ec-45cf-b2a0-a79d5423cee9", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"testrepo\",\"commit\":\"9e2d5045dc404faea7391c29d49764739a6c2b8f\",\"eventType\":\"push\"}", "results.tekton.dev/result": "default-tenant/results/ee055ca3-68ec-45cf-b2a0-a79d5423cee9", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Failed to create snapshot. Error: Component.appstudio.redhat.com \\\"tsf-comp-vno8o\\\" not found\",\"status\":\"failed\"}" }, "creationTimestamp": "2026-05-04T21:13:05Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "tsf-comp-vno8o-on-push-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.37.7", "appstudio.openshift.io/application": "tsf-app", "appstudio.openshift.io/component": "tsf-comp-vno8o", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "74307766765", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-vno8o-on-push", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/sha": "9e2d5045dc404faea7391c29d49764739a6c2b8f", "pipelinesascode.tekton.dev/state": "completed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "tekton.dev/pipeline": "tsf-comp-vno8o-on-push-ctlmf" }, "name": "tsf-comp-vno8o-on-push-ctlmf", "namespace": "default-tenant", "resourceVersion": "43651", "uid": "ee055ca3-68ec-45cf-b2a0-a79d5423cee9" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "9e2d5045dc404faea7391c29d49764739a6c2b8f" }, { "name": "output-image", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-vno8o:9e2d5045dc404faea7391c29d49764739a6c2b8f" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-tsf-comp-vno8o" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-sfgkay" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-vno8o-on-push-ctlmf-init", "pipelineTaskName": "init" } ], "completionTime": "2026-05-04T21:13:15Z", "conditions": [ { "lastTransitionTime": "2026-05-04T21:13:15Z", "message": "Tasks Completed: 1 (Failed: 1, Cancelled 0), Skipped: 10", "reason": "Failed", "status": "False", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "9e2d5045dc404faea7391c29d49764739a6c2b8f" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-vno8o:9e2d5045dc404faea7391c29d49764739a6c2b8f.git" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-vno8o:9e2d5045dc404faea7391c29d49764739a6c2b8f.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-vno8o:9e2d5045dc404faea7391c29d49764739a6c2b8f" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-vno8o:9e2d5045dc404faea7391c29d49764739a6c2b8f" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "skippedTasks": [ { "name": "clone-repository", "reason": "PipelineRun was stopping" }, { "name": "prefetch-dependencies", "reason": "PipelineRun was stopping" }, { "name": "build-container", "reason": "PipelineRun was stopping" }, { "name": "build-image-index", "reason": "PipelineRun was stopping" }, { "name": "deprecated-base-image-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "reason": "PipelineRun was stopping", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "startTime": "2026-05-04T21:13:06Z" } }, { "apiVersion": "tekton.dev/v1", "kind": "PipelineRun", "metadata": { "annotations": { "appstudio.openshift.io/snapshot": "tsf-app-20260504-211124-000", "appstudio.openshift.io/snapshots": "tsf-app-20260504-211124-000", "build.appstudio.openshift.io/repo": "https://github.com/rhads-tsf-qe/testrepo?rev=41193736d88ff78f7e02b3ab323157460ddd3c83", "build.appstudio.redhat.com/commit_sha": "41193736d88ff78f7e02b3ab323157460ddd3c83", "build.appstudio.redhat.com/target_branch": "base-ygmwmo", "chains.tekton.dev/signed": "true", "chains.tekton.dev/transparency": "http://rekor-server.tsf-tas.svc.cluster.local/api/v1/log/entries?logIndex=44", "pipelinesascode.tekton.dev/branch": "base-ygmwmo", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "74307506918", "pipelinesascode.tekton.dev/controller-info": "{\"name\":\"default\",\"configmap\":\"pipelines-as-code\",\"secret\":\"pipelines-as-code-secret\", \"gRepo\": \"pipelines-as-code\"}", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/git-auth-secret": "pac-gitauth-yawhyy", "pipelinesascode.tekton.dev/git-provider": "github", "pipelinesascode.tekton.dev/installation-id": "112348674", "pipelinesascode.tekton.dev/log-url": "https://konflux-ui-konflux-ui.apps.rosa.kx-18892726ba.5e3o.p3.openshiftapps.com/ns/default-tenant/pipelinerun/tsf-comp-xr3aq-on-push-2cqhw", "pipelinesascode.tekton.dev/max-keep-runs": "3", "pipelinesascode.tekton.dev/on-cel-expression": "event == \"push\" \u0026\u0026 target_branch == \"base-ygmwmo\"", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-xr3aq-on-push", "pipelinesascode.tekton.dev/repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/scm-reporting-plr-started": "true", "pipelinesascode.tekton.dev/sender": "rhtap-ci-tests-bot", "pipelinesascode.tekton.dev/sha": "41193736d88ff78f7e02b3ab323157460ddd3c83", "pipelinesascode.tekton.dev/sha-title": "Merge pull request #297 from rhads-tsf-qe/konflux-tsf-comp-xr3aq", "pipelinesascode.tekton.dev/sha-url": "https://github.com/rhads-tsf-qe/testrepo/commit/41193736d88ff78f7e02b3ab323157460ddd3c83", "pipelinesascode.tekton.dev/source-branch": "refs/heads/base-ygmwmo", "pipelinesascode.tekton.dev/source-repo-url": "https://github.com/rhads-tsf-qe/testrepo", "pipelinesascode.tekton.dev/state": "failed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "results.tekton.dev/record": "default-tenant/results/69b0695c-4390-4ab6-8830-de2e2938dc99/records/69b0695c-4390-4ab6-8830-de2e2938dc99", "results.tekton.dev/recordSummaryAnnotations": "{\"repo\":\"testrepo\",\"commit\":\"41193736d88ff78f7e02b3ab323157460ddd3c83\",\"eventType\":\"push\"}", "results.tekton.dev/result": "default-tenant/results/69b0695c-4390-4ab6-8830-de2e2938dc99", "results.tekton.dev/stored": "true", "test.appstudio.openshift.io/added-to-global-candidate-list": "{\"result\":true,\"reason\":\"Success\",\"lastupdatedtime\":\"2026-05-04T21:21:34Z\"}", "test.appstudio.openshift.io/create-snapshot-status": "{\"message\":\"Sucessfully created snapshot. See annotation appstudio.openshift.io/snapshot for name\",\"status\":\"success\"}" }, "creationTimestamp": "2026-05-04T21:11:24Z", "finalizers": [ "chains.tekton.dev/pipelinerun", "results.tekton.dev/pipelinerun", "pipelinesascode.tekton.dev/finalizer" ], "generateName": "tsf-comp-xr3aq-on-push-", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "pipelinesascode.tekton.dev", "app.kubernetes.io/version": "v0.37.7", "appstudio.openshift.io/application": "tsf-app", "appstudio.openshift.io/component": "tsf-comp-xr3aq", "pipelines.appstudio.openshift.io/type": "build", "pipelinesascode.tekton.dev/cancel-in-progress": "false", "pipelinesascode.tekton.dev/check-run-id": "74307506918", "pipelinesascode.tekton.dev/event-type": "push", "pipelinesascode.tekton.dev/original-prname": "tsf-comp-xr3aq-on-push", "pipelinesascode.tekton.dev/repository": "tsf-comp-xr3aq", "pipelinesascode.tekton.dev/sha": "41193736d88ff78f7e02b3ab323157460ddd3c83", "pipelinesascode.tekton.dev/state": "failed", "pipelinesascode.tekton.dev/url-org": "rhads-tsf-qe", "pipelinesascode.tekton.dev/url-repository": "testrepo", "tekton.dev/pipeline": "tsf-comp-xr3aq-on-push-2cqhw" }, "name": "tsf-comp-xr3aq-on-push-2cqhw", "namespace": "default-tenant", "resourceVersion": "49442", "uid": "69b0695c-4390-4ab6-8830-de2e2938dc99" }, "spec": { "params": [ { "name": "git-url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "41193736d88ff78f7e02b3ab323157460ddd3c83" }, { "name": "output-image", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-xr3aq:41193736d88ff78f7e02b3ab323157460ddd3c83" }, { "name": "dockerfile", "value": "Dockerfile" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "$(params.enable-cache-proxy)" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "$(params.git-url)" }, { "name": "revision", "value": "$(params.revision)" }, { "name": "ociStorage", "value": "$(params.output-image).git" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "$(params.prefetch-input)" }, { "name": "enable-package-registry-proxy", "value": "$(params.enable-package-registry-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "$(params.output-image).prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "$(params.image-expires-after)" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "DOCKERFILE", "value": "$(params.dockerfile)" }, { "name": "CONTEXT", "value": "$(params.path-context)" }, { "name": "HERMETIC", "value": "$(params.hermetic)" }, { "name": "PREFETCH_INPUT", "value": "$(params.prefetch-input)" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "$(params.image-expires-after)" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [ "$(params.build-args[*])" ] }, { "name": "BUILD_ARGS_FILE", "value": "$(params.build-args-file)" }, { "name": "PRIVILEGED_NESTED", "value": "$(params.privileged-nested)" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "$(params.output-image)" }, { "name": "ALWAYS_BUILD_INDEX", "value": "$(params.build-image-index)" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "$(params.buildah-format)" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "$(params.skip-checks)", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "taskRunTemplate": { "serviceAccountName": "build-pipeline-tsf-comp-xr3aq" }, "timeouts": { "pipeline": "1h0m0s" }, "workspaces": [ { "name": "git-auth", "secret": { "secretName": "pac-gitauth-yawhyy" } } ] }, "status": { "childReferences": [ { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-xr3aq-on-push-2cqhw-init", "pipelineTaskName": "init" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-xr3aq-on-push-2cqhw-clone-repository", "pipelineTaskName": "clone-repository" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-xr3aq-on-push-2cqhw-prefetch-dependencies", "pipelineTaskName": "prefetch-dependencies" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-xr3aq-on-push-2cqhw-build-container", "pipelineTaskName": "build-container" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-xr3aq-on-push-2cqhw-build-image-index", "pipelineTaskName": "build-image-index" }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-xr3aq-on-push-2cqhw-deprecated-base-image-check", "pipelineTaskName": "deprecated-base-image-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-xr3aq-on-push-2cqhw-clamav-scan", "pipelineTaskName": "clamav-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-xr3aq-on-push-2cqhw-sast-shell-check", "pipelineTaskName": "sast-shell-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-xr3aq-on-push-2cqhw-sast-unicode-check", "pipelineTaskName": "sast-unicode-check", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-xr3aq-on-push-2cqhw-rpms-signature-scan", "pipelineTaskName": "rpms-signature-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "apiVersion": "tekton.dev/v1", "kind": "TaskRun", "name": "tsf-comp-xr3aq-on-push-2cqhw-tpa-scan", "pipelineTaskName": "tpa-scan", "whenExpressions": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "completionTime": "2026-05-04T21:21:31Z", "conditions": [ { "lastTransitionTime": "2026-05-04T21:21:31Z", "message": "Tasks Completed: 11 (Failed: 0, Cancelled 0), Skipped: 0", "reason": "Succeeded", "status": "True", "type": "Succeeded" } ], "pipelineSpec": { "description": "This pipeline is ideal for building demo container images from a Containerfile while maintaining trust after pipeline customization.\n\nThis version of pipeline has minimal resource requests set, it's good for demonstrating and testing.\n\n_Uses `buildah` to create a container image leveraging [trusted artifacts](https://konflux-ci.dev/architecture/ADR/0036-trusted-artifacts.html). It also optionally creates a source image and runs some build-time tests. Information is shared between tasks using OCI artifacts instead of PVCs. EC will pass the [`trusted_task.trusted`](https://conforma.dev/docs/policy/packages/release_trusted_task.html#trusted_task__trusted) policy as long as all data used to build the artifact is generated from trusted tasks.\nThis pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-oci-ta?tab=tags)_\n", "params": [ { "description": "Source Repository URL", "name": "git-url", "type": "string" }, { "default": "", "description": "Revision of the Source Repository", "name": "revision", "type": "string" }, { "description": "Fully Qualified Output Image", "name": "output-image", "type": "string" }, { "default": ".", "description": "Path to the source code of an application's component from where to build image.", "name": "path-context", "type": "string" }, { "default": "Dockerfile", "description": "Path to the Dockerfile inside the context specified by parameter path-context", "name": "dockerfile", "type": "string" }, { "default": "false", "description": "Skip checks against built image", "name": "skip-checks", "type": "string" }, { "default": "false", "description": "Execute the build with network isolation", "name": "hermetic", "type": "string" }, { "default": "", "description": "Build dependencies to be prefetched", "name": "prefetch-input", "type": "string" }, { "default": "", "description": "Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.", "name": "image-expires-after", "type": "string" }, { "default": "false", "description": "Add built image into an OCI image index", "name": "build-image-index", "type": "string" }, { "default": "docker", "description": "The format for the resulting image's mediaType. Valid values are oci or docker.", "name": "buildah-format", "type": "string" }, { "default": "false", "description": "Enable cache proxy configuration", "name": "enable-cache-proxy", "type": "string" }, { "default": "true", "description": "Use the package registry proxy when prefetching dependencies", "name": "enable-package-registry-proxy", "type": "string" }, { "default": [], "description": "Array of --build-arg values (\"arg=value\" strings) for buildah", "name": "build-args", "type": "array" }, { "default": "", "description": "Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file", "name": "build-args-file", "type": "string" }, { "default": "false", "description": "Whether to enable privileged mode, should be used only with remote VMs", "name": "privileged-nested", "type": "string" } ], "results": [ { "description": "", "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "description": "", "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "description": "", "name": "CHAINS-GIT_URL", "value": "$(tasks.clone-repository.results.url)" }, { "description": "", "name": "CHAINS-GIT_COMMIT", "value": "$(tasks.clone-repository.results.commit)" } ], "tasks": [ { "name": "init", "params": [ { "name": "enable-cache-proxy", "value": "false" } ], "taskRef": { "params": [ { "name": "name", "value": "init" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "clone-repository", "params": [ { "name": "url", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "revision", "value": "41193736d88ff78f7e02b3ab323157460ddd3c83" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-xr3aq:41193736d88ff78f7e02b3ab323157460ddd3c83.git" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "init" ], "taskRef": { "params": [ { "name": "name", "value": "git-clone-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta-min:0.1@sha256:ad1487d03967da7e9e032ba47b094ebf7e46c8e6f5d47faa9f8c15e1617fb208" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "basic-auth", "workspace": "git-auth" } ] }, { "name": "prefetch-dependencies", "params": [ { "name": "input", "value": "" }, { "name": "enable-package-registry-proxy", "value": "true" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.clone-repository.results.SOURCE_ARTIFACT)" }, { "name": "ociStorage", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-xr3aq:41193736d88ff78f7e02b3ab323157460ddd3c83.prefetch" }, { "name": "ociArtifactExpiresAfter", "value": "" } ], "runAfter": [ "clone-repository" ], "taskRef": { "params": [ { "name": "name", "value": "prefetch-dependencies-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta-min:0.3@sha256:20fd86e70acd641e37c28847f1e3ea28629149358a8591460c02cf0cc7e13e22" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "workspaces": [ { "name": "git-basic-auth", "workspace": "git-auth" }, { "name": "netrc", "workspace": "netrc" } ] }, { "name": "build-container", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-xr3aq:41193736d88ff78f7e02b3ab323157460ddd3c83" }, { "name": "DOCKERFILE", "value": "Dockerfile" }, { "name": "CONTEXT", "value": "." }, { "name": "HERMETIC", "value": "false" }, { "name": "PREFETCH_INPUT", "value": "" }, { "name": "IMAGE_EXPIRES_AFTER", "value": "" }, { "name": "COMMIT_SHA", "value": "$(tasks.clone-repository.results.commit)" }, { "name": "BUILD_ARGS", "value": [] }, { "name": "BUILD_ARGS_FILE", "value": "" }, { "name": "PRIVILEGED_NESTED", "value": "false" }, { "name": "SOURCE_URL", "value": "$(tasks.clone-repository.results.url)" }, { "name": "BUILDAH_FORMAT", "value": "docker" }, { "name": "HTTP_PROXY", "value": "$(tasks.init.results.http-proxy)" }, { "name": "NO_PROXY", "value": "$(tasks.init.results.no-proxy)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "prefetch-dependencies" ], "taskRef": { "params": [ { "name": "name", "value": "buildah-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta-min:0.9@sha256:43f0592e75657718c0a1ddbc0033132014d6b24e9f2391a0ce14187ec13e12ca" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "build-image-index", "params": [ { "name": "IMAGE", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-xr3aq:41193736d88ff78f7e02b3ab323157460ddd3c83" }, { "name": "ALWAYS_BUILD_INDEX", "value": "false" }, { "name": "IMAGES", "value": [ "$(tasks.build-container.results.IMAGE_URL)@$(tasks.build-container.results.IMAGE_DIGEST)" ] }, { "name": "BUILDAH_FORMAT", "value": "docker" } ], "runAfter": [ "build-container" ], "taskRef": { "params": [ { "name": "name", "value": "build-image-index-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-build-image-index-min:0.3@sha256:fbb362f21e559606f8941cde6a2c0507c8af6cfc8bee88ffc38032e8e80b4b7e" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" } }, { "name": "deprecated-base-image-check", "params": [ { "name": "IMAGE_URL", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "IMAGE_DIGEST", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "deprecated-image-check" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3457a4ca93f8d55f14ebd407532b1223c689eacc34f0abb3003db4111667bdae" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "clamav-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "clamav-scan-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-clamav-scan-min:0.3@sha256:589e34f73d310aa993c9761d8b78265a904a121028bda2809d8a2d0500454bd8" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-shell-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-shell-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta-min:0.1@sha256:fa19753f59288a397aab2ddb9459f35f0ec1b89f43c36e944a3958db72becb5a" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "sast-unicode-check", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "SOURCE_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)" }, { "name": "CACHI2_ARTIFACT", "value": "$(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "sast-unicode-check-oci-ta-min" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta-min:0.4@sha256:624d9ed6d461b59a16d8c1578276626c02fa6d56e0ee4bcd752f7859055f21ab" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "rpms-signature-scan", "params": [ { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" }, { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "rpms-signature-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] }, { "name": "tpa-scan", "params": [ { "name": "image-digest", "value": "$(tasks.build-image-index.results.IMAGE_DIGEST)" }, { "name": "image-url", "value": "$(tasks.build-image-index.results.IMAGE_URL)" } ], "runAfter": [ "build-image-index" ], "taskRef": { "params": [ { "name": "name", "value": "tpa-scan" }, { "name": "bundle", "value": "quay.io/konflux-ci/tekton-catalog/task-tpa-scan:0.1@sha256:68b6e188f742da92af9c40a794fd021a65d49b419d1e36096277b2d9ebbe1afc" }, { "name": "kind", "value": "task" } ], "resolver": "bundles" }, "when": [ { "input": "false", "operator": "in", "values": [ "false" ] } ] } ], "workspaces": [ { "name": "git-auth", "optional": true }, { "name": "netrc", "optional": true } ] }, "provenance": { "featureFlags": { "awaitSidecarReadiness": true, "coschedule": "workspaces", "enableAPIFields": "beta", "enableProvenanceInStatus": true, "enforceNonfalsifiability": "none", "maxResultSize": 4096, "resultExtractionMethod": "termination-message", "runningInEnvWithInjectedSidecars": true, "verificationNoMatchPolicy": "ignore" } }, "results": [ { "name": "IMAGE_URL", "value": "quay.io/rhtap_qe/default-tenant/tsf-comp-xr3aq:41193736d88ff78f7e02b3ab323157460ddd3c83" }, { "name": "IMAGE_DIGEST", "value": "sha256:86a6c031a7d0b89f0974f88364966c81ba0a8965860f132760a9e1a0908951a8" }, { "name": "CHAINS-GIT_URL", "value": "https://github.com/rhads-tsf-qe/testrepo" }, { "name": "CHAINS-GIT_COMMIT", "value": "41193736d88ff78f7e02b3ab323157460ddd3c83" } ], "startTime": "2026-05-04T21:11:24Z" } } ], "kind": "List", "metadata": { "resourceVersion": "" } }