diff --git a/task/apply-tags/0.1/apply-tags.yaml b/task/apply-tags/0.1/apply-tags.yaml index d5a82bf15c..93bd62ecfb 100644 --- a/task/apply-tags/0.1/apply-tags.yaml +++ b/task/apply-tags/0.1/apply-tags.yaml @@ -34,7 +34,7 @@ spec: readOnly: true steps: - name: apply-additional-tags-from-parameter - image: registry.access.redhat.com/ubi9/skopeo:9.4-12@sha256:61871ab37e9b1291e3547f36ba692a4dc59c22e9e045a5b4d5bf9a55155ab779 + image: registry.access.redhat.com/ubi9/skopeo:9.4-14.1725850207@sha256:f9b752b8724294202e98afe6c2e0aa8a1b460c5f79a437280fde858356294851 args: - $(params.ADDITIONAL_TAGS[*]) env: @@ -54,7 +54,7 @@ spec: fi - name: apply-additional-tags-from-image-label - image: registry.access.redhat.com/ubi9/skopeo:9.4-12@sha256:61871ab37e9b1291e3547f36ba692a4dc59c22e9e045a5b4d5bf9a55155ab779 + image: registry.access.redhat.com/ubi9/skopeo:9.4-14.1725850207@sha256:f9b752b8724294202e98afe6c2e0aa8a1b460c5f79a437280fde858356294851 env: - name: IMAGE value: $(params.IMAGE) diff --git a/task/buildah-oci-ta/0.1/buildah-oci-ta.yaml b/task/buildah-oci-ta/0.1/buildah-oci-ta.yaml index 7563bab725..cd494c1925 100644 --- a/task/buildah-oci-ta/0.1/buildah-oci-ta.yaml +++ b/task/buildah-oci-ta/0.1/buildah-oci-ta.yaml @@ -455,7 +455,7 @@ spec: securityContext: runAsUser: 0 - name: merge-syft-sboms - image: registry.access.redhat.com/ubi9/python-39:1-192.1722518946@sha256:0176b477075984d5a502253f951d2502f0763c551275f9585ac515b9f241d73d + image: registry.access.redhat.com/ubi9/python-39:1-197.1725907694@sha256:278ae38e8f28ccba3cb7cd542f684d739a84f771e418fc8018d07a522205b05c workingDir: /var/workdir script: | #!/bin/python3 @@ -502,7 +502,7 @@ spec: securityContext: runAsUser: 0 - name: create-purl-sbom - image: registry.access.redhat.com/ubi9/python-39:1-192.1722518946@sha256:0176b477075984d5a502253f951d2502f0763c551275f9585ac515b9f241d73d + image: registry.access.redhat.com/ubi9/python-39:1-197.1725907694@sha256:278ae38e8f28ccba3cb7cd542f684d739a84f771e418fc8018d07a522205b05c workingDir: /var/workdir script: | #!/bin/python3 diff --git a/task/buildah-remote-oci-ta/0.1/buildah-remote-oci-ta.yaml b/task/buildah-remote-oci-ta/0.1/buildah-remote-oci-ta.yaml index 3ae20e205e..196e001337 100644 --- a/task/buildah-remote-oci-ta/0.1/buildah-remote-oci-ta.yaml +++ b/task/buildah-remote-oci-ta/0.1/buildah-remote-oci-ta.yaml @@ -542,7 +542,7 @@ spec: - mountPath: /shared name: shared - computeResources: {} - image: registry.access.redhat.com/ubi9/python-39:1-192.1722518946@sha256:0176b477075984d5a502253f951d2502f0763c551275f9585ac515b9f241d73d + image: registry.access.redhat.com/ubi9/python-39:1-197.1725907694@sha256:278ae38e8f28ccba3cb7cd542f684d739a84f771e418fc8018d07a522205b05c name: merge-syft-sboms script: | #!/bin/python3 @@ -591,7 +591,7 @@ spec: runAsUser: 0 workingDir: /var/workdir - computeResources: {} - image: registry.access.redhat.com/ubi9/python-39:1-192.1722518946@sha256:0176b477075984d5a502253f951d2502f0763c551275f9585ac515b9f241d73d + image: registry.access.redhat.com/ubi9/python-39:1-197.1725907694@sha256:278ae38e8f28ccba3cb7cd542f684d739a84f771e418fc8018d07a522205b05c name: create-purl-sbom script: | #!/bin/python3 diff --git a/task/buildah-remote/0.1/buildah-remote.yaml b/task/buildah-remote/0.1/buildah-remote.yaml index 58f45f4c9e..6e83d7f70b 100644 --- a/task/buildah-remote/0.1/buildah-remote.yaml +++ b/task/buildah-remote/0.1/buildah-remote.yaml @@ -535,7 +535,7 @@ spec: - mountPath: /shared name: shared - computeResources: {} - image: registry.access.redhat.com/ubi9/python-39:1-192.1722518946@sha256:0176b477075984d5a502253f951d2502f0763c551275f9585ac515b9f241d73d + image: registry.access.redhat.com/ubi9/python-39:1-197.1725907694@sha256:278ae38e8f28ccba3cb7cd542f684d739a84f771e418fc8018d07a522205b05c name: merge-syft-sboms script: | #!/bin/python3 @@ -584,7 +584,7 @@ spec: runAsUser: 0 workingDir: $(workspaces.source.path) - computeResources: {} - image: registry.access.redhat.com/ubi9/python-39:1-192.1722518946@sha256:0176b477075984d5a502253f951d2502f0763c551275f9585ac515b9f241d73d + image: registry.access.redhat.com/ubi9/python-39:1-197.1725907694@sha256:278ae38e8f28ccba3cb7cd542f684d739a84f771e418fc8018d07a522205b05c name: create-purl-sbom script: | #!/bin/python3 diff --git a/task/buildah-rhtap/0.1/buildah-rhtap.yaml b/task/buildah-rhtap/0.1/buildah-rhtap.yaml index 218bbca0d9..45e125d9e3 100644 --- a/task/buildah-rhtap/0.1/buildah-rhtap.yaml +++ b/task/buildah-rhtap/0.1/buildah-rhtap.yaml @@ -65,7 +65,7 @@ spec: value: $(params.BUILD_ARGS_FILE) steps: - name: build - image: registry.access.redhat.com/ubi9/buildah@sha256:29402688af2b394a8400d946751520dbaea64759bbce2ef6928dc58ede6020e6 + image: registry.access.redhat.com/ubi9/buildah@sha256:773e26db602bc0309fd524f121373875d056d554c9e5c68ca1775793afd3509e args: - $(params.BUILD_ARGS[*]) script: | @@ -137,7 +137,7 @@ spec: name: tmpfiles - name: merge-sboms - image: registry.access.redhat.com/ubi8/python-311@sha256:6cc79822da3610cb30e5fa1f5afebe2b36c69db3f03841638139a54b3c307e42 + image: registry.access.redhat.com/ubi8/python-311@sha256:d8fadd2fb3752e207ce546ffb0610fe8cb1bd04d3fbf671db4dfda661e650f61 env: - name: RESULT_PATH value: $(results.SBOM_BLOB_URL.path) diff --git a/task/buildah/0.1/buildah.yaml b/task/buildah/0.1/buildah.yaml index fbc9fb9fcc..32797b4091 100644 --- a/task/buildah/0.1/buildah.yaml +++ b/task/buildah/0.1/buildah.yaml @@ -414,7 +414,7 @@ spec: runAsUser: 0 - name: merge-syft-sboms - image: registry.access.redhat.com/ubi9/python-39:1-192.1722518946@sha256:0176b477075984d5a502253f951d2502f0763c551275f9585ac515b9f241d73d + image: registry.access.redhat.com/ubi9/python-39:1-197.1725907694@sha256:278ae38e8f28ccba3cb7cd542f684d739a84f771e418fc8018d07a522205b05c script: | #!/bin/python3 import json @@ -463,7 +463,7 @@ spec: runAsUser: 0 - name: create-purl-sbom - image: registry.access.redhat.com/ubi9/python-39:1-192.1722518946@sha256:0176b477075984d5a502253f951d2502f0763c551275f9585ac515b9f241d73d + image: registry.access.redhat.com/ubi9/python-39:1-197.1725907694@sha256:278ae38e8f28ccba3cb7cd542f684d739a84f771e418fc8018d07a522205b05c script: | #!/bin/python3 import json diff --git a/task/init/0.2/init.yaml b/task/init/0.2/init.yaml index eebdf1a17c..155c2b55d8 100644 --- a/task/init/0.2/init.yaml +++ b/task/init/0.2/init.yaml @@ -25,7 +25,7 @@ spec: steps: - name: init - image: registry.access.redhat.com/ubi9/skopeo:9.4-12@sha256:61871ab37e9b1291e3547f36ba692a4dc59c22e9e045a5b4d5bf9a55155ab779 + image: registry.access.redhat.com/ubi9/skopeo:9.4-14.1725850207@sha256:f9b752b8724294202e98afe6c2e0aa8a1b460c5f79a437280fde858356294851 env: - name: IMAGE_URL value: $(params.image-url) diff --git a/task/prefetch-dependencies-oci-ta/0.1/prefetch-dependencies-oci-ta.yaml b/task/prefetch-dependencies-oci-ta/0.1/prefetch-dependencies-oci-ta.yaml index 9d18e3d461..da3272dc1d 100644 --- a/task/prefetch-dependencies-oci-ta/0.1/prefetch-dependencies-oci-ta.yaml +++ b/task/prefetch-dependencies-oci-ta/0.1/prefetch-dependencies-oci-ta.yaml @@ -114,7 +114,7 @@ spec: name: workdir steps: - name: skip-ta - image: registry.access.redhat.com/ubi9/ubi-minimal:9.4-1194@sha256:73f7dcacb460dad137a58f24668470a5a2e47378838a0190eef0ab532c6e8998 + image: registry.access.redhat.com/ubi9/ubi-minimal:9.4-1227.1725849298@sha256:efadc50470c32141c257341694c6312234c0700e0407ed2a60c8b5c26b6af6fc env: - name: INPUT value: $(params.input) diff --git a/task/s2i-java/0.1/s2i-java.yaml b/task/s2i-java/0.1/s2i-java.yaml index 707cc86472..a9d0c4a598 100644 --- a/task/s2i-java/0.1/s2i-java.yaml +++ b/task/s2i-java/0.1/s2i-java.yaml @@ -136,7 +136,7 @@ spec: # delete symlinks - they may point outside the container rootfs, messing with SBOM scanners find $(cat /workspace/container_path) -xtype l -delete echo $container > /workspace/container_name - image: registry.access.redhat.com/ubi9/buildah:9.4-12@sha256:29402688af2b394a8400d946751520dbaea64759bbce2ef6928dc58ede6020e6 + image: registry.access.redhat.com/ubi9/buildah:9.4-14.1725850210@sha256:773e26db602bc0309fd524f121373875d056d554c9e5c68ca1775793afd3509e name: build env: - name: COMMIT_SHA @@ -186,7 +186,7 @@ spec: name: varlibcontainers securityContext: runAsUser: 0 - - image: registry.access.redhat.com/ubi9/python-39:1-192.1722518946@sha256:0176b477075984d5a502253f951d2502f0763c551275f9585ac515b9f241d73d + - image: registry.access.redhat.com/ubi9/python-39:1-197.1725907694@sha256:278ae38e8f28ccba3cb7cd542f684d739a84f771e418fc8018d07a522205b05c # per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting # the cluster will set imagePullPolicy to IfNotPresent name: merge-sboms @@ -232,7 +232,7 @@ spec: securityContext: runAsUser: 0 - - image: registry.access.redhat.com/ubi9/buildah:9.4-12@sha256:29402688af2b394a8400d946751520dbaea64759bbce2ef6928dc58ede6020e6 + - image: registry.access.redhat.com/ubi9/buildah:9.4-14.1725850210@sha256:773e26db602bc0309fd524f121373875d056d554c9e5c68ca1775793afd3509e # default above is image digest specific name: inject-sbom-and-push computeResources: {} diff --git a/task/s2i-nodejs/0.1/s2i-nodejs.yaml b/task/s2i-nodejs/0.1/s2i-nodejs.yaml index a44f2e9bfa..5c8298d997 100644 --- a/task/s2i-nodejs/0.1/s2i-nodejs.yaml +++ b/task/s2i-nodejs/0.1/s2i-nodejs.yaml @@ -120,7 +120,7 @@ spec: # delete symlinks - they may point outside the container rootfs, messing with SBOM scanners find $(cat /workspace/container_path) -xtype l -delete echo $container > /workspace/container_name - image: registry.access.redhat.com/ubi9/buildah:9.4-12@sha256:29402688af2b394a8400d946751520dbaea64759bbce2ef6928dc58ede6020e6 + image: registry.access.redhat.com/ubi9/buildah:9.4-14.1725850210@sha256:773e26db602bc0309fd524f121373875d056d554c9e5c68ca1775793afd3509e name: build env: - name: COMMIT_SHA @@ -155,7 +155,7 @@ spec: volumeMounts: - mountPath: /var/lib/containers name: varlibcontainers - - image: registry.access.redhat.com/ubi9/python-39:1-192.1722518946@sha256:0176b477075984d5a502253f951d2502f0763c551275f9585ac515b9f241d73d + - image: registry.access.redhat.com/ubi9/python-39:1-197.1725907694@sha256:278ae38e8f28ccba3cb7cd542f684d739a84f771e418fc8018d07a522205b05c # per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting # the cluster will set imagePullPolicy to IfNotPresent name: merge-sboms @@ -201,7 +201,7 @@ spec: securityContext: runAsUser: 0 - - image: registry.access.redhat.com/ubi9/buildah:9.4-12@sha256:29402688af2b394a8400d946751520dbaea64759bbce2ef6928dc58ede6020e6 + - image: registry.access.redhat.com/ubi9/buildah:9.4-14.1725850210@sha256:773e26db602bc0309fd524f121373875d056d554c9e5c68ca1775793afd3509e name: inject-sbom-and-push computeResources: {} script: | diff --git a/task/summary/0.1/summary.yaml b/task/summary/0.1/summary.yaml index d229d25699..ab26635290 100644 --- a/task/summary/0.1/summary.yaml +++ b/task/summary/0.1/summary.yaml @@ -23,7 +23,7 @@ spec: default: Succeeded steps: - name: appstudio-summary - image: registry.access.redhat.com/ubi9/ubi-minimal:9.4-1194@sha256:73f7dcacb460dad137a58f24668470a5a2e47378838a0190eef0ab532c6e8998 + image: registry.access.redhat.com/ubi9/ubi-minimal:9.4-1227.1725849298@sha256:efadc50470c32141c257341694c6312234c0700e0407ed2a60c8b5c26b6af6fc # per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting # the cluster will set imagePullPolicy to IfNotPresent env: diff --git a/task/update-infra-deployments/0.1/update-infra-deployments.yaml b/task/update-infra-deployments/0.1/update-infra-deployments.yaml index 52c915aa97..98a7d2e84e 100644 --- a/task/update-infra-deployments/0.1/update-infra-deployments.yaml +++ b/task/update-infra-deployments/0.1/update-infra-deployments.yaml @@ -109,7 +109,7 @@ spec: # Based on https://github.com/tektoncd/catalog/tree/main/task/github-app-token/0.2/ - name: create-mr - image: registry.access.redhat.com/ubi9/python-39:1-192.1722518946@sha256:0176b477075984d5a502253f951d2502f0763c551275f9585ac515b9f241d73d + image: registry.access.redhat.com/ubi9/python-39:1-197.1725907694@sha256:278ae38e8f28ccba3cb7cd542f684d739a84f771e418fc8018d07a522205b05c # per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting # the cluster will set imagePullPolicy to IfNotPresent volumeMounts: