.tekton: add required task rpms-signature-scan

Signed-off-by: Vincent Demeester <[email protected]>
openshift-pipelines · Nov 20, 2024 · b463feb · b463feb
1 parent 890dcc7
commit b463feb
Show file tree

Hide file tree

Showing 2 changed files with 46 additions and 1 deletion.
diff --git a/.tekton/docker-build-ta.yaml b/.tekton/docker-build-ta.yaml
@@ -10,7 +10,7 @@ spec:
     This pipeline is pushed as a Tekton bundle to [quay.io](https://quay.io/repository/konflux-ci/tekton-catalog/pipeline-docker-build-multi-platform-oci-ta?tab=tags)_
   params:
   - default:
-    - linux/arm64
+    - linux-m2xlarge/arm64
     - linux/ppc64le
     - linux/s390x
     - linux/x86_64
@@ -305,6 +305,28 @@ spec:
       operator: in
       values:
       - "false"
+  - name: rpms-signature-scan
+    params:
+      - name: image-url
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      - name: image-digest
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+    runAfter:
+      - build-image-index
+    taskRef:
+      params:
+        - name: name
+          value: rpms-signature-scan
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:0c9667fba291af05997397a32e5e938ccaa46e93a2e14bad228e64a6427c5545
+        - name: kind
+          value: task
+      resolver: bundles
+    when:
+      - input: $(params.skip-checks)
+        operator: in
+        values:
+          - "false"      
   - name: clair-scan
     params:
     - name: image-digest

diff --git a/.tekton/docker-build.yaml b/.tekton/docker-build.yaml
@@ -1,3 +1,4 @@
+---
 apiVersion: tekton.dev/v1
 kind: Pipeline
 metadata:
@@ -239,6 +240,28 @@ spec:
       operator: in
       values:
       - "false"
+  - name: rpms-signature-scan
+    params:
+      - name: image-url
+        value: $(tasks.build-container.results.IMAGE_URL)
+      - name: image-digest
+        value: $(tasks.build-container.results.IMAGE_DIGEST)
+    runAfter:
+      - build-container
+    taskRef:
+      params:
+        - name: name
+          value: rpms-signature-scan
+        - name: bundle
+          value: quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:e6a5aa04e8b5e3b13313d14e4f70b68add0db3dbdd2757222c5465f8134fe517
+        - name: kind
+          value: task
+      resolver: bundles
+    when:
+      - input: $(params.skip-checks)
+        operator: in
+        values:
+          - "false"
   - name: clair-scan
     params:
     - name: image-digest