-
Bug
-
Resolution: Done
-
Blocker
-
None
-
ACM 2.14.0
-
Product / Portfolio Work
-
False
-
-
False
-
-
-
Critical
-
None
Description of problem:
Please address EC failures. Some of them are
✕ [Violation] hermetic_build_task.build_task_hermetic
ImageRef: quay.io/redhat-user-workloads/crt-redhat-acm-tenant/submariner-addon-acm-214@sha256:1b3c330e25b215c282d181e3e0a9f1226beb118cefe9fd2939d89410d9c32773
Reason: Build task was not invoked with the hermetic parameter set
Title: Build task called with hermetic param set
Description: Verify the build task in the PipelineRun attestation was invoked with the proper parameters to make the build
process hermetic. To exclude this rule add "hermetic_build_task.build_task_hermetic" to the `exclude` section of the policy
configuration.
Solution: Make sure the task that builds the image has a parameter named 'HERMETIC' and it's set to 'true'.
✕ [Violation] labels.disallowed_inherited_labels
ImageRef: quay.io/redhat-user-workloads/crt-redhat-acm-tenant/submariner-addon-acm-214@sha256:1b3c330e25b215c282d181e3e0a9f1226beb118cefe9fd2939d89410d9c32773
Reason: The "com.redhat.component" label should not be inherited from the parent image
Term: com.redhat.component
Title: Disallowed inherited labels
Description: Check that certain labels on the image have different values than the labels from the parent image. If the label is
inherited from the parent image but not redefined for the image, it will contain an incorrect value for the image. Use the rule
data `disallowed_inherited_labels` key to set the list of labels to check, or the `fbc_disallowed_inherited_labels` key for fbc
images. To exclude this rule add "labels.disallowed_inherited_labels:com.redhat.component" to the `exclude` section of the
policy configuration.
Solution: Update the image build process to overwrite the inherited labels.
✕ [Violation] labels.disallowed_inherited_labels
ImageRef: quay.io/redhat-user-workloads/crt-redhat-acm-tenant/submariner-addon-acm-214@sha256:1b3c330e25b215c282d181e3e0a9f1226beb118cefe9fd2939d89410d9c32773
Reason: The "description" label should not be inherited from the parent image
Term: description
Title: Disallowed inherited labels
Description: Check that certain labels on the image have different values than the labels from the parent image. If the label is
inherited from the parent image but not redefined for the image, it will contain an incorrect value for the image. Use the rule
data `disallowed_inherited_labels` key to set the list of labels to check, or the `fbc_disallowed_inherited_labels` key for fbc
images. To exclude this rule add "labels.disallowed_inherited_labels:description" to the `exclude` section of the policy
configuration.
Solution: Update the image build process to overwrite the inherited labels.
Version-Release number of selected component (if applicable):
How reproducible:
Steps to Reproduce:
- ...