-
Task
-
Resolution: Done
-
Undefined
-
None
-
None
-
None
-
None
-
None
-
False
-
-
False
-
None
-
None
-
None
-
None
Update 13 outdated Konflux Tekton task references to their latest digest versions based on enterprise contract verification warnings.
Tasks Updated
All updates are digest-only changes with no version bumps, maintaining full compatibility:
- apply-tags (0.2)
- build-image-index (0.1)
- clair-scan (0.3)
- clamav-scan (0.3)
- coverity-availability-check (0.2)
- deprecated-image-check (0.5)
- git-clone-oci-ta (0.1)
- init (0.2)
- prefetch-dependencies-oci-ta (0.2)
- push-dockerfile-oci-ta (0.1)
- sast-shell-check-oci-ta (0.1)
- sast-snyk-check-oci-ta (0.4)
- sast-unicode-check-oci-ta (0.3)
Benefits
- Incorporates latest security patches and bug fixes
- Resolves enterprise contract verification warnings
- Maintains trusted task chain compliance
Verification
- No migration notes required (digest-only updates)
- Enterprise contract verification will pass
- No breaking changes or new parameters
Files Modified
- .tekton/pipelines/common-operator-build.yaml