-
Bug
-
Resolution: Unresolved
-
Critical
-
None
-
4.22.0
-
None
Description of problem
The HyperShift Konflux build pipelines have Tekton tasks that are failing enterprise contract validation. The build-image-index task (version 0.1) became unsupported as of 2026-01-09, causing enterprise contract violations. Additionally, several other tasks have newer versions or digests available.
Version-Release number of selected component (if applicable)
Affects Konflux pipelines in .tekton/pipelines/common-operator-build.yaml
How reproducible
Always
Steps to Reproduce
- Trigger an enterprise contract validation for HyperShift operator build
- Observe the validation failures in the EC pipeline run logs
Actual results
Enterprise contract validation fails with:
VIOLATION: Task "build-image-index" is used by pipeline task "build-image-index" is or will be unsupported as of 2026-01-09T00:00:00Z. Please update your configuration to use the 'build-image-index' task (version 0.2).
Additionally, multiple tasks show warnings for newer versions/digests available.
Expected results
All Tekton tasks should be using supported versions that pass enterprise contract validation.
Additional info
Tasks requiring update in .tekton/pipelines/common-operator-build.yaml:
| Task | Current | Latest | Type |
|---|---|---|---|
| build-image-index | 0.1 | 0.2 | VERSION BUMP (CRITICAL) |
| apply-tags | 0.2 | 0.3 | VERSION BUMP |
| prefetch-dependencies-oci-ta | 0.2 | 0.2 | digest update |
| deprecated-image-check | 0.5 | 0.5 | digest update |
| ecosystem-cert-preflight-checks | 0.2 | 0.2 | digest update |
| clamav-scan | 0.3 | 0.3 | digest update |
| coverity-availability-check | 0.2 | 0.2 | digest update |
| sast-shell-check-oci-ta | 0.1 | 0.1 | digest update |
| sast-unicode-check-oci-ta | 0.3 | 0.3 | digest update |
Migration notes:
- build-image-index 0.1 to 0.2: Enforces format consistency for BUILDAH_FORMAT - no action required if formats are consistent
- apply-tags 0.2 to 0.3: No action required (internal backend changes only)