Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-23234

ALC repos Konflux failures 2.15

XMLWordPrintable

    • Quality / Stability / Reliability
    • 3
    • False
    • Hide

      None

      Show
      None
    • False
    • Workload Mgmt Train 31 - 1
    • Moderate
    • None

       We need to fix the following violations for ALC repos:

       
       
      Component: multicloud-integrations-acm-215 Violations: • Task 'buildah-remote-oci-ta' was not invoked with the hermetic parameter set • No source image references found • One of "source-build", "source-build-oci-ta" tasks is missing • Required task "rpms-signature-scan" is required and present but not from a trusted task • Code tampering detected, untrusted PipelineTask "rpms-signature-scan" (Task "rpms-signature-scan") was included in build chain comprised of: rpms-signature-scan (Total: 5) Warnings: • 2025-09-26T00:00:00Z build-images • 2025-09-26T00:00:00Z deprecated-base-image-check • 2025-09-26T00:00:00Z prefetch-dependencies • 2025-09-27T00:00:00Z apply-tags • 2025-09-27T00:00:00Z build-image-index • 2025-09-27T00:00:00Z clone-repository • 2025-09-27T00:00:00Z init • 2025-09-27T00:00:00Z push-dockerfile • 2025-09-27T00:00:00Z show-sbom • 2025-10-04T00:00:00Z clair-scan • 2025-10-04T00:00:00Z clamav-scan • 2025-10-04T00:00:00Z ecosystem-cert-preflight-checks (Total: 12)
      11:03
       
      Component: multicluster-operators-application-acm-215 Violations: • Task 'buildah-remote-oci-ta' was not invoked with the hermetic parameter set • No source image references found • One of "source-build", "source-build-oci-ta" tasks is missing • Required task "rpms-signature-scan" is required and present but not from a trusted task • Code tampering detected, untrusted PipelineTask "rpms-signature-scan" (Task "rpms-signature-scan") was included in build chain comprised of: rpms-signature-scan (Total: 5) Warnings: • 2025-09-16T00:00:00Z build-images • 2025-09-26T00:00:00Z deprecated-base-image-check • 2025-09-26T00:00:00Z prefetch-dependencies • 2025-09-27T00:00:00Z apply-tags • 2025-09-27T00:00:00Z build-image-index • 2025-09-27T00:00:00Z clone-repository • 2025-09-27T00:00:00Z init • 2025-09-27T00:00:00Z push-dockerfile • 2025-09-27T00:00:00Z show-sbom • 2025-10-04T00:00:00Z clair-scan • 2025-10-04T00:00:00Z clamav-scan • 2025-10-04T00:00:00Z ecosystem-cert-preflight-checks (Total: 12)
      11:04
       
      Component: multicluster-operators-channel-acm-215 Violations: • Task 'buildah-remote-oci-ta' was not invoked with the hermetic parameter set • No source image references found • One of "source-build", "source-build-oci-ta" tasks is missing • Required task "rpms-signature-scan" is required and present but not from a trusted task • Code tampering detected, untrusted PipelineTask "rpms-signature-scan" (Task "rpms-signature-scan") was included in build chain comprised of: rpms-signature-scan (Total: 5) Warnings: • 2025-09-26T00:00:00Z build-images • 2025-09-26T00:00:00Z deprecated-base-image-check • 2025-09-26T00:00:00Z prefetch-dependencies • 2025-09-27T00:00:00Z apply-tags • 2025-09-27T00:00:00Z build-image-index • 2025-09-27T00:00:00Z clone-repository • 2025-09-27T00:00:00Z init • 2025-09-27T00:00:00Z push-dockerfile • 2025-09-27T00:00:00Z show-sbom • 2025-10-04T00:00:00Z clair-scan • 2025-10-04T00:00:00Z clamav-scan • 2025-10-04T00:00:00Z ecosystem-cert-preflight-checks (Total: 12)
      11:04
       
      Component: multicluster-operators-subscription-acm-215 Violations: • Required task "rpms-signature-scan" is required and present but not from a trusted task • Code tampering detected, untrusted PipelineTask "rpms-signature-scan" (Task "rpms-signature-scan") was included in build chain comprised of: rpms-signature-scan (Total: 2) Warnings: • 2025-09-26T00:00:00Z build-images • 2025-09-26T00:00:00Z build-source-image • 2025-09-26T00:00:00Z deprecated-base-image-check • 2025-09-26T00:00:00Z prefetch-dependencies • 2025-09-27T00:00:00Z apply-tags • 2025-09-27T00:00:00Z build-image-index • 2025-09-27T00:00:00Z clone-repository • 2025-09-27T00:00:00Z init • 2025-09-27T00:00:00Z push-dockerfile • 2025-09-27T00:00:00Z show-sbom • 2025-10-04T00:00:00Z clair-scan • 2025-10-04T00:00:00Z clamav-scan • 2025-10-04T00:00:00Z ecosystem-cert-preflight-checks (Total: 13)

              ming@redhat.com Mike Ng
              ming@redhat.com Mike Ng
              David Huynh David Huynh
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: