CNTRLPLANE-2568: Update Konflux Tekton tasks to latest versions - #7551
Conversation
|
@jparrill: This pull request references CNTRLPLANE-2568 which is a valid jira issue. Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the task to target the "4.22.0" version, but no target version was set. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
openshift-ci-robot
added
the
jira/valid-reference
|
@jparrill: This pull request references CNTRLPLANE-2568 which is a valid jira issue. Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the task to target the "4.22.0" version, but no target version was set. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
@jparrill: This pull request references CNTRLPLANE-2568 which is a valid jira issue. Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the task to target the "4.22.0" version, but no target version was set. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
WalkthroughUpdated Tekton task bundle image references across four .tekton YAMLs: multiple bundle SHA256 digests were replaced and one Changes
Estimated code review effort🎯 2 (Simple) | ⏱️ ~10 minutes Comment |
|
/auto-cc |
|
@jparrill: This pull request references CNTRLPLANE-2568 which is a valid jira issue. Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the task to target the "4.22.0" version, but no target version was set. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
openshift-ci
Bot
added
the
approved
|
/hold |
openshift-ci
Bot
added
the
do-not-merge/hold
|
/hold cancel |
openshift-ci
Bot
removed
the
do-not-merge/hold
fc7014e to
c36063a
Compare
openshift-merge-robot
added
the
needs-rebase
c36063a to
d4d7e4a
Compare
openshift-merge-robot
removed
the
needs-rebase
d4d7e4a to
9acd3f1
Compare
|
/area ci-tooling |
openshift-ci
Bot
added
area/ci-tooling
9acd3f1 to
cf1fd35
Compare
|
Caution There are some errors in your PipelineRun template.
|
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 4
🤖 Fix all issues with AI agents
In @.tekton/hypershift-gomaxprocs-webhook-pull-request.yaml:
- Around line 358-360: The env entry named "bundle" has an extra space after
"sha256:" in its value which breaks YAML parsing; edit the "bundle" env value
(the string assigned to the value key) to remove the space so the digest
immediately follows "sha256:" (i.e., change "@sha256: 654b..." to
"@sha256:654b...") ensuring the value becomes a single continuous token.
In @.tekton/hypershift-gomaxprocs-webhook-push.yaml:
- Around line 355-357: The YAML value for the environment variable `bundle`
contains an extra space after `sha256:` which breaks parsing; update the `value`
string for the `bundle` entry (the line with "name: bundle" / `value:
quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256: 654b989d...`) to
remove the space immediately after `sha256:` so the digest is contiguous with
`sha256:` (i.e., `...@sha256:<digest>`).
In @.tekton/hypershift-operator-main-tag.yaml:
- Around line 367-369: The YAML value for the env var named "bundle" contains an
invalid space after "sha256:" in the string
"quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:
654b989d7cdc03d082e56f216a29de04847215ee379a8d9ca315e453ad2b15c2"; remove the
extra space so the digest immediately follows the colon (i.e.,
"…@sha256:654b989...") to produce a valid YAML scalar for the bundle value.
In @.tekton/pipelines/common-operator-build.yaml:
- Around line 259-261: The bundle image value has an invalid space after
"sha256:" causing YAML parsing errors; update the value under the mapping with
"name: bundle" (the bundle value for the
quay.io/konflux-ci/tekton-catalog/task-clair-scan entry) to remove the space so
the digest is immediately after "sha256:" (e.g., change "sha256: 654b..." to
"sha256:654b...") ensuring the YAML string is a valid digest.
| - name: bundle | ||
| value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:a7cc183967f89c4ac100d04ab8f81e54733beee60a0528208107c9a22d3c43af | ||
| value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256: 654b989d7cdc03d082e56f216a29de04847215ee379a8d9ca315e453ad2b15c2 | ||
| - name: kind |
There was a problem hiding this comment.
Fix YAML syntax error: remove extra space after sha256:.
The space between sha256: and the digest value creates an invalid YAML mapping context, causing a parse error. This will break pipeline execution.
🐛 Proposed fix
- name: bundle
- value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256: 654b989d7cdc03d082e56f216a29de04847215ee379a8d9ca315e453ad2b15c2
+ value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:654b989d7cdc03d082e56f216a29de04847215ee379a8d9ca315e453ad2b15c2📝 Committable suggestion
‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.
| - name: bundle | |
| value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:a7cc183967f89c4ac100d04ab8f81e54733beee60a0528208107c9a22d3c43af | |
| value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256: 654b989d7cdc03d082e56f216a29de04847215ee379a8d9ca315e453ad2b15c2 | |
| - name: kind | |
| - name: bundle | |
| value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:654b989d7cdc03d082e56f216a29de04847215ee379a8d9ca315e453ad2b15c2 | |
| - name: kind |
🧰 Tools
🪛 YAMLlint (1.38.0)
[error] 368-368: syntax error: mapping values are not allowed here
(syntax)
🤖 Prompt for AI Agents
In @.tekton/hypershift-operator-main-tag.yaml around lines 367 - 369, The YAML
value for the env var named "bundle" contains an invalid space after "sha256:"
in the string "quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:
654b989d7cdc03d082e56f216a29de04847215ee379a8d9ca315e453ad2b15c2"; remove the
extra space so the digest immediately follows the colon (i.e.,
"…@sha256:654b989...") to produce a valid YAML scalar for the bundle value.
| - name: bundle | ||
| value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:ee558db6af779ab162163ec88f288a5c1b2d5f70c3361f3690a474866e3bdc74 | ||
| value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256: 654b989d7cdc03d082e56f216a29de04847215ee379a8d9ca315e453ad2b15c2 | ||
| - name: kind |
There was a problem hiding this comment.
Fix YAML syntax error: remove extra space after sha256:.
Same issue as in other files. The space between sha256: and the digest creates invalid YAML.
🐛 Proposed fix
- name: bundle
- value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256: 654b989d7cdc03d082e56f216a29de04847215ee379a8d9ca315e453ad2b15c2
+ value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:654b989d7cdc03d082e56f216a29de04847215ee379a8d9ca315e453ad2b15c2📝 Committable suggestion
‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.
| - name: bundle | |
| value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:ee558db6af779ab162163ec88f288a5c1b2d5f70c3361f3690a474866e3bdc74 | |
| value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256: 654b989d7cdc03d082e56f216a29de04847215ee379a8d9ca315e453ad2b15c2 | |
| - name: kind | |
| - name: bundle | |
| value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:654b989d7cdc03d082e56f216a29de04847215ee379a8d9ca315e453ad2b15c2 | |
| - name: kind |
🧰 Tools
🪛 YAMLlint (1.38.0)
[error] 260-260: syntax error: mapping values are not allowed here
(syntax)
🤖 Prompt for AI Agents
In @.tekton/pipelines/common-operator-build.yaml around lines 259 - 261, The
bundle image value has an invalid space after "sha256:" causing YAML parsing
errors; update the value under the mapping with "name: bundle" (the bundle value
for the quay.io/konflux-ci/tekton-catalog/task-clair-scan entry) to remove the
space so the digest is immediately after "sha256:" (e.g., change "sha256:
654b..." to "sha256:654b...") ensuring the YAML string is a valid digest.
Updates to Konflux Tekton task versions were resolved by accepting upstream changes which included newer task digest values than those initially identified in the enterprise contract verification log. The following tasks were updated with newer upstream digests: - prefetch-dependencies-oci-ta: 0.2@8eac535f... - ecosystem-cert-preflight-checks: 0.2@04f75593... - clamav-scan: 0.3@f3d2d179... - rpms-signature-scan: 0.2@20eb21c6... Additional tasks were also updated upstream: - buildah-remote-oci-ta: 0.7@fe66734c... - deprecated-image-check: 0.5@808fe09b... - sast-snyk-check-oci-ta: 0.4@0eca130f... - coverity-availability-check: 0.2@36400873... - sast-shell-check-oci-ta: 0.1@d44336d7... - sast-unicode-check-oci-ta: 0.3@e5a8d3e8... - apply-tags: 0.2@c89cd10b... Co-Authored-By: Claude Sonnet 4 <noreply@anthropic.com> Signed-off-by: Juan Manuel Parrilla Madrid <jparrill@redhat.com>
cf1fd35 to
93a01fe
Compare
|
@jparrill: all tests passed! Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
|
/lgtm |
openshift-ci-robot
added
the
verified
|
@bryan-cox: This PR has been marked as verified by DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: bryan-cox, jparrill The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
4 participants
Summary
Task Updates
The following tasks were updated with newer upstream digests:
Additional upstream task updates included:
Fixes
Test plan
🤖 Generated with Claude Code