From ed82645558e93af531a92a5d6795407d182f60b7 Mon Sep 17 00:00:00 2001
From: Dan Labrecque <dlabrecq@redhat.com>
Date: Mon, 4 Nov 2024 12:02:26 -0500
Subject: [PATCH] Add rpms-signature-scan task

---
 .tekton/hcs-frontend-pull-request.yaml | 17 +++++++++++++++++
 .tekton/hcs-frontend-push.yaml         | 17 +++++++++++++++++
 2 files changed, 34 insertions(+)

diff --git a/.tekton/hcs-frontend-pull-request.yaml b/.tekton/hcs-frontend-pull-request.yaml
index ae81a11a..c9523eac 100644
--- a/.tekton/hcs-frontend-pull-request.yaml
+++ b/.tekton/hcs-frontend-pull-request.yaml
@@ -487,6 +487,23 @@ spec:
       workspaces:
       - name: workspace
         workspace: workspace
+    - name: rpms-signature-scan
+      params:
+        - name: image-digest
+          value: $(tasks.build-container.results.IMAGE_DIGEST)
+        - name: image-url
+          value: $(tasks.build-container.results.IMAGE_URL)
+      runAfter:
+        - build-container
+      taskRef:
+        params:
+          - name: name
+            value: rpms-signature-scan
+          - name: bundle
+            value: quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:b627a8040f900bf359b50bfb5201907f73712ae5949270d57ea30cff11df078c
+          - name: kind
+            value: task
+        resolver: bundles
     workspaces:
     - name: workspace
     - name: git-auth
diff --git a/.tekton/hcs-frontend-push.yaml b/.tekton/hcs-frontend-push.yaml
index 93a38f5d..1d4829d2 100644
--- a/.tekton/hcs-frontend-push.yaml
+++ b/.tekton/hcs-frontend-push.yaml
@@ -484,6 +484,23 @@ spec:
       workspaces:
       - name: workspace
         workspace: workspace
+    - name: rpms-signature-scan
+      params:
+        - name: image-digest
+          value: $(tasks.build-container.results.IMAGE_DIGEST)
+        - name: image-url
+          value: $(tasks.build-container.results.IMAGE_URL)
+      runAfter:
+        - build-container
+      taskRef:
+        params:
+          - name: name
+            value: rpms-signature-scan
+          - name: bundle
+            value: quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:b627a8040f900bf359b50bfb5201907f73712ae5949270d57ea30cff11df078c
+          - name: kind
+            value: task
+        resolver: bundles
     workspaces:
     - name: workspace
     - name: git-auth