Merge pull request #2131 from lcarva/fix-release-v0.5

Fix release v0.5

.tekton/cli-build.yaml

@@ -411,6 +411,27 @@ spec:
           - name: kind
             value: task
         resolver: bundles
+    - name: rpms-signature-scan
+      when:
+      - input: $(params.skip-checks)
+        operator: in
+        values: ["false"]
+      runAfter:
+        - build-image-index
+      taskRef:
+        params:
+          - name: name
+            value: rpms-signature-scan
+          - name: bundle
+            value: quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:bacfab0fb93acaef5b8cc9ef9c75619e34e41336142e2cad73414e2b62d6000e
+          - name: kind
+            value: task
+        resolver: bundles
+      params:
+      - name: image-url
+        value: $(tasks.build-image-index.results.IMAGE_URL)
+      - name: image-digest
+        value: $(tasks.build-image-index.results.IMAGE_DIGEST)
   workspaces:
     - name: git-auth
       optional: true

acceptance/image/testimage/blobs/sha256/3221b557483091249f0702726384dd135da6510247f61400fcd8c61b5b7e1543

@@ -0,0 +1 @@
+{"schemaVersion":2,"mediaType":"application/vnd.oci.image.manifest.v1+json","config":{"mediaType":"application/vnd.oci.image.config.v1+json","size":247,"digest":"sha256:9b8a11cc6188b14489a5a62271e2b6b8004bc0b6364781529f2debe2b6ffc83e"},"layers":[{"mediaType":"application/vnd.dsse.envelope.v1+json","size":952,"digest":"sha256:931703cca3671d5cdea3d3f02716be79974f504fe5da4b2245cc676edf5cb85f","annotations":{"dev.cosignproject.cosign/signature":"","dev.sigstore.cosign/bundle":"{\"SignedEntryTimestamp\":\"MEYCIQCyapJSWZOoyW+IFYWW8M1Ey7NNhbwTu8x3jAkTNSSz7gIhAOF5uUq+X+SXBYbd7lrUnrLqBATtX1RM3fc6vxivrUzL\",\"Payload\":{\"body\":\"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\",\"integratedTime\":1730486488,\"logIndex\":1,\"logID\":\"e1629a21e8853c6db58c6f018a5085e3ff05d420c52197686675bd907e1435a1\"}}","dev.sigstore.cosign/certificate":"-----BEGIN CERTIFICATE-----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\nRyUlOD21BLLkg/eFBsvNSdWbxpQj+MZMyw==\n-----END CERTIFICATE-----\n","dev.sigstore.cosign/chain":"-----BEGIN CERTIFICATE-----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\nVc35+WJ+XsNKXlDb4WlRGzRtMbydcYSVvhSG27w9OFIE4+7ufCtX\n-----END CERTIFICATE-----","predicateType":"https://slsa.dev/provenance/v0.2"}}]}

acceptance/image/testimage/blobs/sha256/996e60caeba5a31621dbd69fc744e2686287d10564a6510bd8ef0d902960d33c → acceptance/image/testimage/blobs/sha256/324b385eb7a42f9d1b42fa2856256db8845dd8be1918b5762a19600d273aa089

@@ -1 +1 @@
-{"schemaVersion":2,"mediaType":"application/vnd.oci.image.manifest.v1+json","config":{"mediaType":"application/vnd.oci.image.config.v1+json","digest":"sha256:3eaf7ec07c9bee51f9b4a1d1722b7f340c31045867335ab8a0b4946df7f96bb8","size":326},"layers":[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:bd9ddc54bea929a22b334e73e026d4136e5b73f5cc29942896c72e4ece69b13d","size":34}],"annotations":{"org.opencontainers.image.base.digest":"","org.opencontainers.image.base.name":""}}
+{"schemaVersion":2,"mediaType":"application/vnd.oci.image.manifest.v1+json","config":{"mediaType":"application/vnd.oci.image.config.v1+json","digest":"sha256:63d3250e95a5003481faf0a85d3907981686fa8847614fccd772fb8d0957c399","size":326},"layers":[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:bd9ddc54bea929a22b334e73e026d4136e5b73f5cc29942896c72e4ece69b13d","size":34}],"annotations":{"org.opencontainers.image.base.digest":"","org.opencontainers.image.base.name":""}}

acceptance/image/testimage/blobs/sha256/5d895b35801cafb5c45e345ea2b9efe212411ba994ed8e8d6e23f9f3d5b4dfe0

@@ -0,0 +1 @@
+{"architecture":"","created":"2024-11-01T14:41:27.356337437-04:00","history":[{"created":"0001-01-01T00:00:00Z"}],"os":"","rootfs":{"type":"layers","diff_ids":["sha256:b4f165d25e576485d5cad0c3856214713b54078e050284788580b94103b4d3fc"]},"config":{}}

acceptance/image/testimage/blobs/sha256/63d3250e95a5003481faf0a85d3907981686fa8847614fccd772fb8d0957c399

@@ -0,0 +1 @@
+{"created":"2024-11-01T18:41:22.212751989Z","architecture":"amd64","os":"linux","config":{"Labels":{"io.buildah.version":"1.37.3"}},"rootfs":{"type":"layers","diff_ids":["sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef"]},"history":[{"created":"2024-11-01T18:41:22.216371929Z","created_by":"/bin/sh"}]}