Update ec

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
quay.io/enterprise-contract/ec-cli	tekton-step-image	digest	3bed976 -> 3d9c4a6
quay.io/enterprise-contract/ec-cli		digest	3bed976 -> 3d9c4a6
quay.io/enterprise-contract/ec-task-bundle	tekton-bundle	digest	bf6f20b -> dafce7e

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[zregvart]

CI seems to be failing because of:

Tasks contains params in script section (https://tekton.dev/docs/pipelines/tasks/#substituting-in-script-blocks)
task/acs-deploy-check/0.1/acs-deploy-check.yaml

[lcarva]

Fixing yaml issue here: #852

[zregvart]

It's either a timing thing in e2e tests or Quay outage. e2e tests fail with:

  failed to get cosign result for image quay.io/redhat-user-workloads/build-templates-e2e/test-app-848/devfile-sample-python-basic-820e:build-44ded-1709639292@sha256:f9e5b96033301df46a941b0de87951f7fefda0779381304b62c005970d45f5ae: failed to find cosign results for image quay.io/redhat-user-workloads/build-templates-e2e/test-app-848/devfile-sample-python-basic-820e:build-44ded-1709639292@sha256:f9e5b96033301df46a941b0de87951f7fefda0779381304b62c005970d45f5ae: error when getting attestation tag: cannot get manifest digest from quay.io/redhat-user-workloads/build-templates-e2e/test-app-848/devfile-sample-python-basic-820e:sha256-f9e5b96033301df46a941b0de87951f7fefda0779381304b62c005970d45f5ae.att image. response body: {"tags": [], "page": 1, "has_additional": false}

Attestation tag is present on Quay now.

The timeout is 5min, perhaps that is not enough.

[chmeliik]

It's either a timing thing in e2e tests or Quay outage. e2e tests fail with:

  failed to get cosign result for image quay.io/redhat-user-workloads/build-templates-e2e/test-app-848/devfile-sample-python-basic-820e:build-44ded-1709639292@sha256:f9e5b96033301df46a941b0de87951f7fefda0779381304b62c005970d45f5ae: failed to find cosign results for image quay.io/redhat-user-workloads/build-templates-e2e/test-app-848/devfile-sample-python-basic-820e:build-44ded-1709639292@sha256:f9e5b96033301df46a941b0de87951f7fefda0779381304b62c005970d45f5ae: error when getting attestation tag: cannot get manifest digest from quay.io/redhat-user-workloads/build-templates-e2e/test-app-848/devfile-sample-python-basic-820e:sha256-f9e5b96033301df46a941b0de87951f7fefda0779381304b62c005970d45f5ae.att image. response body: {"tags": [], "page": 1, "has_additional": false}

Attestation tag is present on Quay now.

The timeout is 5min, perhaps that is not enough.

Saw the same in #832 (comment) and #827 (comment) (Lui and I thought it was Chains being slow)

[zregvart]

Looks like the attestation image was uploaded ~13min after the PipelineRun finished

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud