Skip to content

Commit

Permalink
chore(RHTAPWATCH-717): update image reference in tekton-tools
Browse files Browse the repository at this point in the history
update image reference in tekton-tools

Signed-off-by: Avi Biton <[email protected]>
  • Loading branch information
avi-biton committed Feb 5, 2024
1 parent 3fb4a4a commit ff9f278
Show file tree
Hide file tree
Showing 2 changed files with 349 additions and 80 deletions.
105 changes: 25 additions & 80 deletions .tekton/tools-pull-request.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,7 @@ metadata:
pipelinesascode.tekton.dev/max-keep-runs: "3"
pipelinesascode.tekton.dev/on-cel-expression: event == "pull_request" && target_branch
== "main"
pipelinesascode.tekton.dev/task: tasks/create-pull-request.yaml
creationTimestamp: null
labels:
appstudio.openshift.io/application: tools
Expand All @@ -30,6 +31,8 @@ spec:
value: .
- name: revision
value: '{{revision}}'
- name: pr-url
value: '{{body.head_commit.url}}'
pipelineSpec:
finally:
- name: show-sbom
Expand Down Expand Up @@ -291,92 +294,34 @@ spec:
operator: in
values:
- "false"
- name: clair-scan
params:
- name: image-digest
value: $(tasks.build-container.results.IMAGE_DIGEST)
- name: image-url
value: $(tasks.build-container.results.IMAGE_URL)
runAfter:
- build-container
taskRef:
params:
- name: name
value: clair-scan
- name: bundle
value: quay.io/redhat-appstudio-tekton-catalog/task-clair-scan:0.1@sha256:63b42c0fc23d05e26776a0e7c4f0ab00750096ebfe1eed9a7ba96f8b27713fbf
- name: kind
value: task
resolver: bundles
when:
- input: $(params.skip-checks)
operator: in
values:
- "false"
- name: sast-snyk-check
- name: update-image-ref
runAfter:
- clone-repository
taskRef:
params:
- name: name
value: sast-snyk-check
- name: bundle
value: quay.io/redhat-appstudio-tekton-catalog/task-sast-snyk-check:0.1@sha256:47515cb119225bba55c593876610bd890f8efcbb66bb57fb0c0881ddd47ce558
- name: kind
value: task
resolver: bundles
when:
- input: $(params.skip-checks)
operator: in
values:
- "false"
workspaces:
- name: workspace
- name: artifacts
workspace: workspace
- name: clamav-scan
params:
- name: image-digest
value: $(tasks.build-container.results.IMAGE_DIGEST)
- name: image-url
value: $(tasks.build-container.results.IMAGE_URL)
runAfter:
- build-container
taskRef:
params:
- name: name
value: clamav-scan
- name: bundle
value: quay.io/redhat-appstudio-tekton-catalog/task-clamav-scan:0.1@sha256:353fa2cda9855217cfcec3303973b666a10f384795630cf0eb13b874c24b0f7a
- name: kind
value: task
resolver: bundles
when:
- input: $(params.skip-checks)
operator: in
values:
- "false"
- name: sbom-json-check
name: create-pull-request
kind: Task
params:
- name: IMAGE_URL
value: $(tasks.build-container.results.IMAGE_URL)
- name: IMAGE_DIGEST
value: $(tasks.build-container.results.IMAGE_DIGEST)
runAfter:
- build-container
taskRef:
params:
- name: name
value: sbom-json-check
- name: bundle
value: quay.io/redhat-appstudio-tekton-catalog/task-sbom-json-check:0.1@sha256:bf49861b3bbee2129e8d1b5966fc2a7c3f259d96a5fcef5674d05c9cb21ab540
- name: kind
value: task
resolver: bundles
when:
- input: $(params.skip-checks)
operator: in
values:
- "false"
- name: ORIGIN_REPO
value: $(params.git-url)
- name: REVISION
value: $(params.revision)
- name: ARTIFACTS_PATH
value: /workspace/artifacts/source
- name: TARGET_GH_REPO
value: redhat-appstudio/tekton-tools
- name: PR_URL
value: $(params.pr-url)
- name: image
value: $(params.output-image)
- name: SCRIPT
value: |
set -ex
# grep -rl quay.io/redhat-user-workloads/rhtap-o11y-tenant/tools/tools:.* . | xargs sed -i [email protected]/redhat-user-workloads/rhtap-o11y-tenant/tools/tools:.*@quay.io/redhat-user-workloads/rhtap-o11y-tenant/tools/tools:123@gm
pwd
ls -laR
workspaces:
- name: workspace
- name: git-auth
Expand Down
Loading

0 comments on commit ff9f278

Please sign in to comment.