TEAMNADO-7820 adding rpms signature scan to tekton pipeline (#206)

adding rpms signature scan to pull request and push yamls
RedHatInsights · Oct 22, 2024 · d39d73a · d39d73a
1 parent 1439010
commit d39d73a
Show file tree

Hide file tree

Showing 2 changed files with 42 additions and 0 deletions.
diff --git a/.tekton/subscription-inventory-ui-pull-request.yaml b/.tekton/subscription-inventory-ui-pull-request.yaml
@@ -488,6 +488,27 @@ spec:
         workspaces:
           - name: workspace
             workspace: workspace
+      - name: rpms-signature-scan
+        when:
+        - input: $(params.skip-checks)
+          operator: in
+          values: ["false"]
+        runAfter:
+          - build-container
+        taskRef:
+          resolver: bundles
+          params:
+          - name: name
+            value: rpms-signature-scan
+          - name: bundle
+            value: quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:7aa4d3c95e2b963e82fdda392f7cb3d61e3dab035416cf4a3a34e43cf3c9c9b8
+          - name: kind
+            value: task
+        params:
+        - name: image-url
+          value: $(tasks.build-container.results.IMAGE_URL)
+        - name: image-digest
+          value: $(tasks.build-container.results.IMAGE_DIGEST)
     workspaces:
       - name: workspace
       - name: git-auth

diff --git a/.tekton/subscription-inventory-ui-push.yaml b/.tekton/subscription-inventory-ui-push.yaml
@@ -485,6 +485,27 @@ spec:
         workspaces:
           - name: workspace
             workspace: workspace
+      - name: rpms-signature-scan
+        when:
+        - input: $(params.skip-checks)
+          operator: in
+          values: ["false"]
+        runAfter:
+          - build-container
+        taskRef:
+          resolver: bundles
+          params:
+          - name: name
+            value: rpms-signature-scan
+          - name: bundle
+            value: quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:7aa4d3c95e2b963e82fdda392f7cb3d61e3dab035416cf4a3a34e43cf3c9c9b8
+          - name: kind
+            value: task
+        params:
+        - name: image-url
+          value: $(tasks.build-container.results.IMAGE_URL)
+        - name: image-digest
+          value: $(tasks.build-container.results.IMAGE_DIGEST)
     workspaces:
       - name: workspace
       - name: git-auth