Skip to content

Commit

Permalink
feat(STONEINTG-839): hacbs-test migration
Browse files Browse the repository at this point in the history
hacbs-test repo has been migrated under konflux-ci org.
It was also renamed to konflux-test.

Old images under hacbs-test repo have been kept for BW compatibility of
tasks.

Signed-off-by: Martin Basti <[email protected]>
  • Loading branch information
MartinBasti committed May 6, 2024
1 parent 24e30e7 commit 9bac93b
Show file tree
Hide file tree
Showing 25 changed files with 28 additions and 28 deletions.
2 changes: 1 addition & 1 deletion renovate.json
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,7 @@
},
{
"matchPackageNames": [
"quay.io/redhat-appstudio/hacbs-test",
"quay.io/redhat-appstudio/konflux-test",
"quay.io/redhat-appstudio/clair-in-ci",
"quay.io/redhat-appstudio/clamav-db"
],
Expand Down
2 changes: 1 addition & 1 deletion task/clair-scan/0.1/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@ analyzing the components of a container image and comparing them against Clair's
https://github.com/quay/clair-action

## Source repository for image:
https://github.com/redhat-appstudio/hacbs-test/tree/main/clair-in-ci
https://github.com/konflux-ci/konflux-test/tree/main/clair-in-ci

## Additional links:
https://quay.github.io/clair/whatis.html
4 changes: 2 additions & 2 deletions task/clair-scan/0.1/clair-scan.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ spec:
description: Images processed in the task.
steps:
- name: get-image-manifests
image: quay.io/redhat-appstudio/hacbs-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
image: quay.io/redhat-appstudio/konflux-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
# the clair-in-ci image neither has skopeo or jq installed. Hence, we create an extra step to get the image manifest digests
env:
- name: IMAGE_URL
Expand Down Expand Up @@ -91,7 +91,7 @@ spec:
images_processed=$(echo "${images_processed_template/\[%s]/[$digests_processed_string]}")
echo "$images_processed" > /tekton/home/images-processed.json
- name: conftest-vulnerabilities
image: quay.io/redhat-appstudio/hacbs-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
image: quay.io/redhat-appstudio/konflux-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
# per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
# the cluster will set imagePullPolicy to IfNotPresent
# also per direction from Ralph Bean, we want to use image digest based tags to use a cue to automation like dependabot or renovatebot to periodially submit pull requests that update the digest as new images are released.
Expand Down
2 changes: 1 addition & 1 deletion task/clamav-scan/0.1/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ The task will extract compiled code to compare it against the latest virus datab
| TEST_OUTPUT | Tekton task test output. |

## Source repository for image:
https://github.com/redhat-appstudio/hacbs-test/tree/main/clamav
https://github.com/konflux-ci/konflux-test/tree/main/clamav

## Additional links:
https://docs.clamav.net/
2 changes: 1 addition & 1 deletion task/clamav-scan/0.1/clamav-scan.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ spec:

steps:
- name: extract-and-scan-image
image: quay.io/redhat-appstudio/hacbs-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
image: quay.io/redhat-appstudio/konflux-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
# per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
# the cluster will set imagePullPolicy to IfNotPresent
# also per direction from Ralph Bean, we want to use image digest based tags to use a cue to automation like dependabot or renovatebot to periodially submit pull requests that update the digest as new images are released.
Expand Down
2 changes: 1 addition & 1 deletion task/deprecated-image-check/0.1/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ in a high-level declarative language called Rego.
| TEST_OUTPUT | Tekton task test output. |

## Source repository for image:
https://github.com/redhat-appstudio/hacbs-test
https://github.com/konflux-ci/konflux-test

## Additional links:
https://catalog.redhat.com/api/containers/docs/
Expand Down
4 changes: 2 additions & 2 deletions task/deprecated-image-check/0.1/deprecated-image-check.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ spec:
steps:
# Download Pyxis metadata about the image
- name: query-pyxis
image: quay.io/redhat-appstudio/hacbs-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
image: quay.io/redhat-appstudio/konflux-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
# per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
# the cluster will set imagePullPolicy to IfNotPresent
# also per direction from Ralph Bean, we want to use image digest based tags to use a cue to automation like dependabot or renovatebot to periodially submit pull requests that update the digest as new images are released.
Expand Down Expand Up @@ -62,7 +62,7 @@ spec:
# Run the tests and save output
- name: run-conftest
image: quay.io/redhat-appstudio/hacbs-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
image: quay.io/redhat-appstudio/konflux-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
# per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
# the cluster will set imagePullPolicy to IfNotPresent
# also per direction from Ralph Bean, we want to use image digest based tags to use a cue to automation like dependabot or renovatebot to periodially submit pull requests that update the digest as new images are released.
Expand Down
2 changes: 1 addition & 1 deletion task/deprecated-image-check/0.2/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ in a high-level declarative language called Rego.
| TEST_OUTPUT | Tekton task test output. |

## Source repository for image:
https://github.com/redhat-appstudio/hacbs-test
https://github.com/konflux-ci/konflux-test

## Additional links:
https://catalog.redhat.com/api/containers/docs/
Expand Down
4 changes: 2 additions & 2 deletions task/deprecated-image-check/0.2/deprecated-image-check.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ spec:
steps:
# Download Pyxis metadata about the image
- name: query-pyxis
image: quay.io/redhat-appstudio/hacbs-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
image: quay.io/redhat-appstudio/konflux-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
# per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
# the cluster will set imagePullPolicy to IfNotPresent
# also per direction from Ralph Bean, we want to use image digest based tags to use a cue to automation like dependabot or renovatebot to periodially submit pull requests that update the digest as new images are released.
Expand Down Expand Up @@ -62,7 +62,7 @@ spec:
# Run the tests and save output
- name: run-conftest
image: quay.io/redhat-appstudio/hacbs-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
image: quay.io/redhat-appstudio/konflux-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
# per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
# the cluster will set imagePullPolicy to IfNotPresent
# also per direction from Ralph Bean, we want to use image digest based tags to use a cue to automation like dependabot or renovatebot to periodially submit pull requests that update the digest as new images are released.
Expand Down
2 changes: 1 addition & 1 deletion task/deprecated-image-check/0.3/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ in a high-level declarative language called Rego.
| TEST_OUTPUT | Tekton task test output. |

## Source repository for image:
https://github.com/redhat-appstudio/hacbs-test
https://github.com/konflux-ci/konflux-test

## Additional links:
https://catalog.redhat.com/api/containers/docs/
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ spec:

steps:
- name: check-images
image: quay.io/redhat-appstudio/hacbs-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
image: quay.io/redhat-appstudio/konflux-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
# per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
# the cluster will set imagePullPolicy to IfNotPresent
# also per direction from Ralph Bean, we want to use image digest based tags to use a cue to automation like dependabot or renovatebot to periodially submit pull requests that update the digest as new images are released.
Expand Down
2 changes: 1 addition & 1 deletion task/deprecated-image-check/0.4/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ in a high-level declarative language called Rego.

## Source repository for image

https://github.com/redhat-appstudio/hacbs-test
https://github.com/konflux-ci/konflux-test

## Additional links

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ spec:

steps:
- name: check-images
image: quay.io/redhat-appstudio/hacbs-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
image: quay.io/redhat-appstudio/konflux-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
# per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
# the cluster will set imagePullPolicy to IfNotPresent
# also per direction from Ralph Bean, we want to use image digest based tags to use a cue to automation like dependabot or renovatebot to periodially submit pull requests that update the digest as new images are released.
Expand Down
2 changes: 1 addition & 1 deletion task/fbc-related-image-check/0.1/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ Skopeo to inspect manifest content.
| TEST_OUTPUT | Tekton task test output. |

## Source repository for image:
https://github.com/redhat-appstudio/hacbs-test
https://github.com/konflux-ci/konflux-test

## Additional links:
https://www.redhat.com/en/topics/containers/what-is-skopeo
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ spec:
- name: workspace
steps:
- name: check-related-images
image: quay.io/redhat-appstudio/hacbs-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
image: quay.io/redhat-appstudio/konflux-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
# per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
# the cluster will set imagePullPolicy to IfNotPresent
# also per direction from Ralph Bean, we want to use image digest based tags to use a cue to automation like dependabot or renovatebot to periodially submit pull requests that update the digest as new images are released.
Expand Down
2 changes: 1 addition & 1 deletion task/fbc-validation/0.1/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ base image must come from a trusted source. Trusted sources are declared in `AL
| TEST_OUTPUT | Tekton task test output. |

## Source repository for image:
https://github.com/redhat-appstudio/hacbs-test
https://github.com/konflux-ci/konflux-test

## Additional links:
https://olm.operatorframework.io/docs/reference/file-based-catalogs/
Expand Down
2 changes: 1 addition & 1 deletion task/fbc-validation/0.1/fbc-validation.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ spec:
- name: workspace
steps:
- name: extract-and-check-binaries
image: quay.io/redhat-appstudio/hacbs-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
image: quay.io/redhat-appstudio/konflux-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
# per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
# the cluster will set imagePullPolicy to IfNotPresent
# also per direction from Ralph Bean, we want to use image digest based tags to use a cue to automation like dependabot or renovatebot to periodially submit pull requests that update the digest as new images are released.
Expand Down
2 changes: 1 addition & 1 deletion task/inspect-image/0.1/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ that base image.
| TEST_OUTPUT | Tekton task test output. |

## Source repository for image:
https://github.com/redhat-appstudio/hacbs-test
https://github.com/konflux-ci/konflux-test

## Additional links:
https://www.redhat.com/en/topics/containers/what-is-skopeo
2 changes: 1 addition & 1 deletion task/inspect-image/0.1/inspect-image.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ spec:
- name: source
steps:
- name: inspect-image
image: quay.io/redhat-appstudio/hacbs-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
image: quay.io/redhat-appstudio/konflux-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
# per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
# the cluster will set imagePullPolicy to IfNotPresent
# also per direction from Ralph Bean, we want to use image digest based tags to use a cue to automation like dependabot or renovatebot to periodially submit pull requests that update the digest as new images are released.
Expand Down
2 changes: 1 addition & 1 deletion task/sast-snyk-check/0.1/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ Follow the steps given [here](https://redhat-appstudio.github.io/docs.appstudio.

## Source repository for image:

https://github.com/redhat-appstudio/hacbs-test
https://github.com/konflux-ci/konflux-test

## Additional links:

Expand Down
2 changes: 1 addition & 1 deletion task/sast-snyk-check/0.1/sast-snyk-check.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ spec:
optional: true
steps:
- name: sast-snyk-check
image: quay.io/redhat-appstudio/hacbs-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
image: quay.io/redhat-appstudio/konflux-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
# per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
# the cluster will set imagePullPolicy to IfNotPresent
# also per direction from Ralph Bean, we want to use image digest based tags to use a cue to automation like dependabot or renovatebot to periodially submit pull requests that update the digest as new images are released.
Expand Down
2 changes: 1 addition & 1 deletion task/sbom-json-check/0.1/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ The syntax of the sbom-cyclonedx.json file (found in the `/root/buildinfo/conten

## Source repository for image:

https://github.com/redhat-appstudio/hacbs-test
https://github.com/konflux-ci/konflux-test

## Additional links:

Expand Down
2 changes: 1 addition & 1 deletion task/sbom-json-check/0.1/sbom-json-check.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ spec:
name: IMAGES_PROCESSED
steps:
- name: sbom-json-check
image: quay.io/redhat-appstudio/hacbs-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
image: quay.io/redhat-appstudio/konflux-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
# per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
# the cluster will set imagePullPolicy to IfNotPresent
# also per direction from Ralph Bean, we want to use image digest based tags to use a cue to automation like dependabot or renovatebot to periodially submit pull requests that update the digest as new images are released.
Expand Down
2 changes: 1 addition & 1 deletion task/tkn-bundle/0.1/tkn-bundle.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ spec:
- name: TASK_FILE
value: tekton_task_files
steps:
- image: quay.io/redhat-appstudio/hacbs-test:latest@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
- image: quay.io/redhat-appstudio/konflux-test:latest@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
name: modify-task-files
env:
- name: CONTEXT
Expand Down
2 changes: 1 addition & 1 deletion task/verify-signed-rpms/0.1/verify-signed-rpms.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,7 @@ spec:
--workdir "${WORKDIR}" \
--status-path "${WORKDIR}"/status
- name: output-results
image: quay.io/redhat-appstudio/hacbs-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
image: quay.io/redhat-appstudio/konflux-test:v1.4.0@sha256:54d49b37c9a2e280d42961a57e4f7a16c171d6b065559f1329b548db85300bea
volumeMounts:
- name: workdir
mountPath: "$(params.WORKDIR)"
Expand Down

0 comments on commit 9bac93b

Please sign in to comment.