Add rpms-signature-scan to Konflux

Signed-off-by: Dale Haiducek <19750917+dhaiducek@users.noreply.github.com>
stolostron · Oct 8, 2024 · bddce2f · bddce2f
1 parent 740721c
commit bddce2f
Show file tree

Hide file tree

Showing 2 changed files with 34 additions and 0 deletions.
diff --git a/.tekton/governance-policy-addon-controller-acm-212-pull-request.yaml b/.tekton/governance-policy-addon-controller-acm-212-pull-request.yaml
@@ -319,6 +319,23 @@ spec:
             operator: in
             values:
               - "false"
+      - name: rpms-signature-scan
+        params:
+          - name: image-digest
+            value: $(tasks.build-container.results.IMAGE_DIGEST)
+          - name: image-url
+            value: $(tasks.build-container.results.IMAGE_URL)
+        runAfter:
+          - build-container
+        taskRef:
+          params:
+            - name: name
+              value: rpms-signature-scan
+            - name: bundle
+              value: quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:7aa4d3c95e2b963e82fdda392f7cb3d61e3dab035416cf4a3a34e43cf3c9c9b8
+            - name: kind
+              value: task
+          resolver: bundles
       - name: ecosystem-cert-preflight-checks
         params:
           - name: image-url

diff --git a/.tekton/governance-policy-addon-controller-acm-212-push.yaml b/.tekton/governance-policy-addon-controller-acm-212-push.yaml
@@ -316,6 +316,23 @@ spec:
             operator: in
             values:
               - "false"
+      - name: rpms-signature-scan
+        params:
+          - name: image-digest
+            value: $(tasks.build-container.results.IMAGE_DIGEST)
+          - name: image-url
+            value: $(tasks.build-container.results.IMAGE_URL)
+        runAfter:
+          - build-container
+        taskRef:
+          params:
+            - name: name
+              value: rpms-signature-scan
+            - name: bundle
+              value: quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:7aa4d3c95e2b963e82fdda392f7cb3d61e3dab035416cf4a3a34e43cf3c9c9b8
+            - name: kind
+              value: task
+          resolver: bundles
       - name: ecosystem-cert-preflight-checks
         params:
           - name: image-url