|
28 | 28 | value: task
|
29 | 29 | resolver: bundles
|
30 | 30 | params:
|
| 31 | + - default: "false" |
| 32 | + description: Add built image into an OCI image index |
| 33 | + name: build-image-index |
| 34 | + type: string |
31 | 35 | - default: --all-projects --org=3e1a4cca-ebfb-495f-b64c-3cc960d566b4 --exclude=test*,vendor,third_party
|
32 | 36 | description: Append arguments to Snyk code command.
|
33 | 37 | name: snyk-args
|
|
84 | 88 | description: Image tag expiration time, time values could be something like 1h,
|
85 | 89 | 2d, 3w for hours, days, and weeks, respectively.
|
86 | 90 | name: image-expires-after
|
87 |
| - - default: "true" |
88 |
| - description: Add built image into an OCI image index |
89 |
| - name: build-image-index |
90 |
| - type: string |
91 | 91 | - default: []
|
92 | 92 | description: Array of --build-arg values ("arg=value" strings) for buildah
|
93 | 93 | name: build-args
|
@@ -121,6 +121,56 @@ spec:
|
121 | 121 | name: CHAINS-GIT_COMMIT
|
122 | 122 | value: $(tasks.clone-repository.results.commit)
|
123 | 123 | tasks:
|
| 124 | + - matrix: |
| 125 | + params: |
| 126 | + - name: PLATFORM |
| 127 | + value: |
| 128 | + - $(params.build-platforms) |
| 129 | + name: build-images |
| 130 | + params: |
| 131 | + - name: IMAGE_APPEND_PLATFORM |
| 132 | + value: "false" |
| 133 | + - name: IMAGE |
| 134 | + value: $(params.output-image) |
| 135 | + - name: DOCKERFILE |
| 136 | + value: $(params.dockerfile) |
| 137 | + - name: CONTEXT |
| 138 | + value: $(params.path-context) |
| 139 | + - name: HERMETIC |
| 140 | + value: $(params.hermetic) |
| 141 | + - name: PREFETCH_INPUT |
| 142 | + value: $(params.prefetch-input) |
| 143 | + - name: IMAGE_EXPIRES_AFTER |
| 144 | + value: $(params.image-expires-after) |
| 145 | + - name: COMMIT_SHA |
| 146 | + value: $(tasks.clone-repository.results.commit) |
| 147 | + - name: BUILD_ARGS |
| 148 | + value: |
| 149 | + - $(params.build-args[*]) |
| 150 | + - name: BUILD_ARGS_FILE |
| 151 | + value: $(params.build-args-file) |
| 152 | + - name: PRIVILEGED_NESTED |
| 153 | + value: $(params.privileged-nested) |
| 154 | + - name: SOURCE_ARTIFACT |
| 155 | + value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) |
| 156 | + - name: CACHI2_ARTIFACT |
| 157 | + value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) |
| 158 | + runAfter: |
| 159 | + - prefetch-dependencies |
| 160 | + taskRef: |
| 161 | + params: |
| 162 | + - name: name |
| 163 | + value: buildah-remote-oci-ta |
| 164 | + - name: bundle |
| 165 | + value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:3141de71b1b98725e37c15c4287b8aa10008b755403a6d2518b85c6f19194fcc |
| 166 | + - name: kind |
| 167 | + value: task |
| 168 | + resolver: bundles |
| 169 | + when: |
| 170 | + - input: $(tasks.init.results.build) |
| 171 | + operator: in |
| 172 | + values: |
| 173 | + - "true" |
124 | 174 | - name: sast-snyk-check
|
125 | 175 | params:
|
126 | 176 | - name: ARGS
|
@@ -240,56 +290,6 @@ spec:
|
240 | 290 | workspaces:
|
241 | 291 | - name: basic-auth
|
242 | 292 | workspace: git-auth
|
243 |
| - - matrix: |
244 |
| - params: |
245 |
| - - name: PLATFORM |
246 |
| - value: |
247 |
| - - $(params.build-platforms) |
248 |
| - name: build-images |
249 |
| - params: |
250 |
| - - name: IMAGE |
251 |
| - value: $(params.output-image) |
252 |
| - - name: DOCKERFILE |
253 |
| - value: $(params.dockerfile) |
254 |
| - - name: CONTEXT |
255 |
| - value: $(params.path-context) |
256 |
| - - name: HERMETIC |
257 |
| - value: $(params.hermetic) |
258 |
| - - name: PREFETCH_INPUT |
259 |
| - value: $(params.prefetch-input) |
260 |
| - - name: IMAGE_EXPIRES_AFTER |
261 |
| - value: $(params.image-expires-after) |
262 |
| - - name: COMMIT_SHA |
263 |
| - value: $(tasks.clone-repository.results.commit) |
264 |
| - - name: BUILD_ARGS |
265 |
| - value: |
266 |
| - - $(params.build-args[*]) |
267 |
| - - name: BUILD_ARGS_FILE |
268 |
| - value: $(params.build-args-file) |
269 |
| - - name: PRIVILEGED_NESTED |
270 |
| - value: $(params.privileged-nested) |
271 |
| - - name: SOURCE_ARTIFACT |
272 |
| - value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT) |
273 |
| - - name: CACHI2_ARTIFACT |
274 |
| - value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT) |
275 |
| - - name: IMAGE_APPEND_PLATFORM |
276 |
| - value: "true" |
277 |
| - runAfter: |
278 |
| - - prefetch-dependencies |
279 |
| - taskRef: |
280 |
| - params: |
281 |
| - - name: name |
282 |
| - value: buildah-remote-oci-ta |
283 |
| - - name: bundle |
284 |
| - value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:3141de71b1b98725e37c15c4287b8aa10008b755403a6d2518b85c6f19194fcc |
285 |
| - - name: kind |
286 |
| - value: task |
287 |
| - resolver: bundles |
288 |
| - when: |
289 |
| - - input: $(tasks.init.results.build) |
290 |
| - operator: in |
291 |
| - values: |
292 |
| - - "true" |
293 | 293 | - name: build-image-index
|
294 | 294 | params:
|
295 | 295 | - name: IMAGE
|
|
0 commit comments